sencho-quartermaster[bot]
0adc2b5eb2
chore(main): release 0.93.3 ( #1536 )
2026-07-01 22:56:46 -04:00
dependabot[bot]
d96359d989
chore(deps-dev): bump the all-npm-root group with 2 updates ( #1541 )
...
Bumps the all-npm-root group with 2 updates: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli ) and [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional ).
Updates `@commitlint/cli` from 21.1.0 to 21.2.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases )
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md )
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.0/@commitlint/cli )
Updates `@commitlint/config-conventional` from 21.1.0 to 21.2.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases )
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md )
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.0/@commitlint/config-conventional )
---
updated-dependencies:
- dependency-name: "@commitlint/cli"
dependency-version: 21.2.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all-npm-root
- dependency-name: "@commitlint/config-conventional"
dependency-version: 21.2.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all-npm-root
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-01 12:44:31 -04:00
sencho-quartermaster[bot]
af7b920b97
chore(main): release 0.93.2 ( #1529 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-06-30 02:08:25 -04:00
sencho-quartermaster[bot]
b7cfdb5086
chore(main): release 0.93.1 ( #1517 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-06-29 21:55:16 -04:00
sencho-quartermaster[bot]
dd202770ed
chore(main): release 0.93.0 ( #1400 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-06-29 01:28:41 -04:00
dependabot[bot]
2539709d74
chore(deps-dev): bump the all-npm-root group with 3 updates ( #1438 )
...
Bumps the all-npm-root group with 3 updates: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli ), [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional ) and [@playwright/test](https://github.com/microsoft/playwright ).
Updates `@commitlint/cli` from 21.0.2 to 21.1.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases )
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md )
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.1.0/@commitlint/cli )
Updates `@commitlint/config-conventional` from 21.0.2 to 21.1.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases )
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md )
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.1.0/@commitlint/config-conventional )
Updates `@playwright/test` from 1.61.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1 )
---
updated-dependencies:
- dependency-name: "@commitlint/cli"
dependency-version: 21.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all-npm-root
- dependency-name: "@commitlint/config-conventional"
dependency-version: 21.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all-npm-root
- dependency-name: "@playwright/test"
dependency-version: 1.61.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all-npm-root
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 16:15:04 -04:00
sencho-quartermaster[bot]
ce9e1bca7e
chore(main): release 0.92.0 ( #1350 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-06-19 01:18:28 -04:00
dependabot[bot]
465890bcac
chore(deps-dev): bump @playwright/test in the all-npm-root group ( #1385 )
...
Bumps the all-npm-root group with 1 update: [@playwright/test](https://github.com/microsoft/playwright ).
Updates `@playwright/test` from 1.60.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.61.0 )
---
updated-dependencies:
- dependency-name: "@playwright/test"
dependency-version: 1.61.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all-npm-root
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-17 13:25:55 -04:00
sencho-quartermaster[bot]
fd10c49ee4
chore(main): release 0.91.1 ( #1344 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com >
2026-06-09 21:08:13 -04:00
sencho-quartermaster[bot]
4a619e69f4
chore(main): release 0.91.0 ( #1325 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com >
2026-06-08 11:25:51 -04:00
sencho-quartermaster[bot]
7df5ffde54
chore(main): release 0.90.0 ( #1317 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-06-05 23:03:29 -04:00
sencho-quartermaster[bot]
1f859d26d2
chore(main): release 0.89.0 ( #1308 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com >
2026-06-04 23:16:00 -04:00
dependabot[bot]
e3a9cf922f
chore(deps-dev): bump the all-npm-root group with 3 updates ( #1305 )
...
Bumps the all-npm-root group with 3 updates: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli ), [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional ) and [otplib](https://github.com/yeojz/otplib/tree/HEAD/packages/otplib ).
Updates `@commitlint/cli` from 21.0.1 to 21.0.2
- [Release notes](https://github.com/conventional-changelog/commitlint/releases )
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md )
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/cli )
Updates `@commitlint/config-conventional` from 21.0.1 to 21.0.2
- [Release notes](https://github.com/conventional-changelog/commitlint/releases )
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md )
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.0.2/@commitlint/config-conventional )
Updates `otplib` from 13.4.0 to 13.4.1
- [Release notes](https://github.com/yeojz/otplib/releases )
- [Commits](https://github.com/yeojz/otplib/commits/v13.4.1/packages/otplib )
---
updated-dependencies:
- dependency-name: "@commitlint/cli"
dependency-version: 21.0.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all-npm-root
- dependency-name: "@commitlint/config-conventional"
dependency-version: 21.0.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all-npm-root
- dependency-name: otplib
dependency-version: 13.4.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all-npm-root
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com >
2026-06-04 16:24:06 -04:00
sencho-quartermaster[bot]
cfadd76159
chore(main): release 0.88.2 ( #1298 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-06-03 16:13:31 -04:00
sencho-quartermaster[bot]
f007cf4e28
chore(main): release 0.88.1 ( #1295 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
Co-authored-by: Anso <dev@saelix.com >
2026-06-03 08:43:22 -04:00
sencho-quartermaster[bot]
c65c193a59
chore(main): release 0.88.0 ( #1275 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-06-02 22:15:56 -04:00
sencho-quartermaster[bot]
53be6a258e
chore(main): release 0.87.0 ( #1186 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-06-01 17:41:06 -04:00
sencho-quartermaster[bot]
249cfdcc87
chore(main): release 0.86.6 ( #1180 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-23 16:17:15 -04:00
sencho-quartermaster[bot]
579e672e24
chore(main): release 0.86.5 ( #1167 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-23 03:08:53 -04:00
Anso
efcc06d50b
ci: harden CI and supply-chain pipeline ( #1169 )
...
* ci: harden CI and supply-chain pipeline
* Add frontend Vitest step to ci.yml so the 241 existing frontend tests run on
every PR (mirrors the backend build/test/lint/audit order).
* Pin Node 26 as a single source of truth: new .node-version, node-version-file
on all setup-node calls, engines.node ">=26.0.0" in all three package.json
files. Matches the Dockerfile's node:26-alpine.
* SHA-pin remaining mutable actions in the start-app composite
(actions/setup-node v6, actions/cache v4.3.0).
* Pin Dockerfile supply-chain inputs: golang:1.26.3-alpine by sha256 digest in
both builder stages; replace mutable-tag git clone with commit-SHA fetch for
docker/cli (v29.4.1) and docker/compose (v5.1.3). LDFLAGS version strings
and otel patch preserved unchanged.
* Ref-scope docker-publish concurrency so two different release tags cannot
cancel each other; same-ref reruns still cancel as before.
* Harden CLA workflow: drop actions:write from permissions; tighten the
issue_comment trigger to PRs only (github.event.issue.pull_request != null)
matching the two documented CLA phrases. No PR code is checked out.
* Drop trivy-version: latest from both Trivy scans so the SHA-pinned
aquasecurity/trivy-action governs the bundled binary version. The
HIGH/CRITICAL gate, severity filter, and trivy.yaml (OpenVEX) are unchanged.
* Restructure Dependabot: add applies-to: security-updates groups for npm
(root/backend/frontend), docker, and github-actions; switch github-actions
to directories so the local composite action is monitored alongside the
top-level workflows.
* Add a daily scheduled SARIF security scan (security-scan.yml): two parallel
jobs scanning saelix/sencho:latest and a fresh main HEAD build, uploading to
GitHub code scanning. Least-privilege (contents: read, security-events:
write). Visibility only; existing PR-blocking and release-blocking Trivy
gates are not weakened.
Validation: backend tsc clean; frontend tsc clean; frontend npm test 27 files
/ 241 tests pass; npm audit --audit-level=high passes at root, backend, and
frontend; docker buildx build --check passes with no warnings (all pinned
digests resolve from the registry).
* ci(frontend): set explicit jsdom URL so localStorage initializes in CI
jsdom does not instantiate window.localStorage / sessionStorage when the
document has the opaque about:blank origin. Five frontend test files that
call localStorage.clear() in beforeEach started failing once the new
frontend Vitest step in this PR began running them on Linux CI runners.
Configuring environmentOptions.jsdom.url with a real same-origin URL is
the documented Vitest 4.x workaround and is a config-only change. All 27
test files (241 tests) pass locally with the fix applied.
2026-05-23 02:37:29 -04:00
sencho-quartermaster[bot]
e9af5c0d5d
chore(main): release 0.86.4 ( #1165 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-23 00:17:49 -04:00
sencho-quartermaster[bot]
da3e7adc30
chore(main): release 0.86.3 ( #1163 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-22 21:11:38 -04:00
sencho-quartermaster[bot]
0fdcec41c7
chore(main): release 0.86.2 ( #1160 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-22 16:32:20 -04:00
sencho-quartermaster[bot]
c87dc7e747
chore(main): release 0.86.1 ( #1157 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-22 13:43:39 -04:00
sencho-quartermaster[bot]
606bdb6b67
chore(main): release 0.86.0 ( #1139 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-22 02:41:22 -04:00
sencho-quartermaster[bot]
0a3e76c0bb
chore(main): release 0.85.0 ( #1135 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-21 11:48:29 -04:00
sencho-quartermaster[bot]
620e28f352
chore(main): release 0.84.3 ( #1132 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-21 01:04:21 -04:00
sencho-quartermaster[bot]
8fd02ef39b
chore(main): release 0.84.2 ( #1127 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-20 13:06:01 -04:00
sencho-quartermaster[bot]
6bd4645ea9
chore(main): release 0.84.1 ( #1125 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-20 03:37:34 -04:00
sencho-quartermaster[bot]
b4d92621d4
chore(main): release 0.84.0 ( #1120 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-20 02:06:02 -04:00
sencho-quartermaster[bot]
9362c7215e
chore(main): release 0.83.1 ( #1118 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-19 19:50:34 -04:00
sencho-quartermaster[bot]
69bc955c3b
chore(main): release 0.83.0 ( #1114 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-19 19:13:57 -04:00
sencho-quartermaster[bot]
7f81f06bbd
chore(main): release 0.82.1 ( #1112 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-19 07:29:56 -04:00
sencho-quartermaster[bot]
5a2aed22fd
chore(main): release 0.82.0 ( #1109 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-19 00:14:46 -04:00
sencho-quartermaster[bot]
9f22f73cfb
chore(main): release 0.81.15 ( #1106 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-18 22:10:34 -04:00
sencho-quartermaster[bot]
1b33f2d064
chore(main): release 0.81.14 ( #1103 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-18 17:39:24 -04:00
sencho-quartermaster[bot]
7dff6127e7
chore(main): release 0.81.13 ( #1101 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-18 16:51:05 -04:00
sencho-quartermaster[bot]
7d2b8bee7a
chore(main): release 0.81.12 ( #1099 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-18 01:53:10 -04:00
sencho-quartermaster[bot]
77782ce1ff
chore(main): release 0.81.11 ( #1097 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-18 00:16:31 -04:00
sencho-quartermaster[bot]
d9b4f71e0d
chore(main): release 0.81.10 ( #1095 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-17 22:05:24 -04:00
sencho-quartermaster[bot]
54c07d4930
chore(main): release 0.81.9 ( #1093 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-17 20:15:09 -04:00
sencho-quartermaster[bot]
77ccce41fe
chore(main): release 0.81.8 ( #1091 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-17 19:08:19 -04:00
sencho-quartermaster[bot]
c2a23378aa
chore(main): release 0.81.7 ( #1089 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-17 17:32:31 -04:00
sencho-quartermaster[bot]
f11e5ef58c
chore(main): release 0.81.6 ( #1087 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-17 14:12:13 -04:00
sencho-quartermaster[bot]
662036bcb7
chore(main): release 0.81.5 ( #1080 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-17 04:16:49 -04:00
sencho-quartermaster[bot]
de725cc4c1
chore(main): release 0.81.4 ( #1077 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-17 02:10:35 -04:00
sencho-quartermaster[bot]
1e262a1fd4
chore(main): release 0.81.3 ( #1074 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-16 22:48:33 -04:00
sencho-quartermaster[bot]
10ce98b111
chore(main): release 0.81.2 ( #1072 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-16 20:12:08 -04:00
sencho-quartermaster[bot]
e206fa005e
chore(main): release 0.81.1 ( #1069 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-16 18:29:14 -04:00
sencho-quartermaster[bot]
865e19ac10
chore(main): release 0.81.0 ( #1067 )
...
Co-authored-by: sencho-quartermaster[bot] <275163604+sencho-quartermaster[bot]@users.noreply.github.com>
2026-05-16 15:00:59 -04:00