bdbefacfee
chore(main): release 0.24.2 ( #315 )
2026-04-01 19:47:19 -04:00
8bfb7c9133
chore(main): release 0.24.1 ( #312 )
2026-04-01 19:29:09 -04:00
c084836baa
chore(deps-dev): bump @playwright/test from 1.58.2 to 1.59.1 ( #300 )
...
Bumps [@playwright/test](https://github.com/microsoft/playwright ) from 1.58.2 to 1.59.1.
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.58.2...v1.59.1 )
---
updated-dependencies:
- dependency-name: "@playwright/test"
dependency-version: 1.59.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 17:10:19 -04:00
1492e2cb62
chore(main): release 0.24.0 ( #298 )
2026-04-01 00:31:58 -04:00
574fa9a36b
chore(main): release 0.23.0 ( #293 )
2026-03-31 13:07:14 -04:00
f17090a90b
chore(main): release 0.22.1 ( #290 )
2026-03-31 10:59:29 -04:00
6c759b6228
chore(main): release 0.22.0 ( #287 )
2026-03-31 10:23:37 -04:00
5b8cce5811
chore(main): release 0.21.2 ( #284 )
2026-03-30 17:54:35 -04:00
9072f23b13
chore(main): release 0.21.1 ( #281 )
2026-03-30 17:22:53 -04:00
b7e571fa31
chore(main): release 0.21.0 ( #278 )
2026-03-30 16:54:18 -04:00
428f180c2e
chore(main): release 0.20.0 ( #275 )
2026-03-30 12:55:26 -04:00
7584bb8258
chore(main): release 0.19.4 ( #272 )
2026-03-30 00:04:54 -04:00
dd043cd4b1
chore(main): release 0.19.3 ( #269 )
2026-03-29 23:32:43 -04:00
0eb12b137a
chore(main): release 0.19.2 ( #266 )
2026-03-29 22:38:16 -04:00
e9e0df8998
chore(main): release 0.19.1 ( #262 )
2026-03-29 21:39:11 -04:00
f73e9f4db6
chore(main): release 0.19.0 ( #259 )
2026-03-29 20:23:39 -04:00
b6e5a0f196
chore(main): release 0.18.0 ( #254 )
2026-03-29 17:07:28 -04:00
b396bf3d95
chore(main): release 0.17.0 ( #241 )
2026-03-29 14:46:00 -04:00
92147974cd
chore(main): release 0.16.0 ( #238 )
2026-03-29 03:12:08 -04:00
cfccab1f93
chore(main): release 0.15.1 ( #235 )
2026-03-29 01:28:09 -04:00
428898dbc3
chore(main): release 0.15.0 ( #232 )
2026-03-29 00:00:43 -04:00
fb6d7b45e7
chore(main): release 0.14.2 ( #229 )
2026-03-28 22:17:40 -04:00
9bf6e10d8b
chore(main): release 0.14.1 ( #225 )
2026-03-28 17:25:17 -04:00
84dc102411
chore(main): release 0.14.0 ( #221 )
2026-03-28 15:44:27 -04:00
0dfd0d52e0
chore(main): release 0.13.2 ( #217 )
2026-03-28 04:37:54 -04:00
018293fd47
chore(main): release 0.13.1 ( #214 )
2026-03-28 03:59:59 -04:00
4c7ec9297d
chore(main): release 0.13.0 ( #210 )
2026-03-28 03:36:07 -04:00
23d92f75e5
chore(main): release 0.12.0 ( #206 )
2026-03-28 01:08:23 -04:00
4eb19157ab
chore(main): release 0.11.0 ( #202 )
2026-03-27 23:59:42 -04:00
72d8e3dcb3
chore(main): release 0.10.0 ( #195 )
2026-03-27 17:14:01 -04:00
e09501c3f2
chore(main): release 0.9.0 ( #186 )
2026-03-26 22:03:22 -04:00
fa34b43b11
chore(main): release 0.8.0 ( #182 )
2026-03-26 13:14:51 -04:00
fb4a3db80d
chore(main): release 0.7.0 ( #179 )
2026-03-26 09:32:03 -04:00
95f46c9d15
chore(main): release 0.6.0 ( #175 )
2026-03-26 09:20:56 -04:00
ed78dbd02d
chore(main): release 0.5.0 ( #170 )
2026-03-25 21:52:39 -04:00
bb46ab728c
chore(main): release 0.4.0 ( #154 )
2026-03-25 10:46:31 -04:00
7d20f2e3c5
chore(main): release 0.3.1 ( #150 )
2026-03-25 09:10:10 -04:00
fda9679632
chore(main): release 0.3.0 ( #146 )
2026-03-25 08:40:13 -04:00
2f39becfab
chore(main): release 0.2.5 ( #142 )
2026-03-25 02:35:51 -04:00
e8110bf7af
chore(main): release 0.2.4 ( #139 )
2026-03-25 01:51:06 -04:00
4fe51ec17a
chore(main): release 0.2.3 ( #135 )
2026-03-25 01:15:13 -04:00
6f1b2cfa9c
chore(main): release 0.2.2 ( #98 )
2026-03-24 21:28:19 -04:00
7aac99abdf
chore(main): release 0.2.1
2026-03-24 19:46:44 -04:00
8f7419f710
chore(main): release 0.2.0
2026-03-24 23:06:51 +00:00
ce50db0fde
security: pre-release hardening, automated testing, and production readiness
...
SECURITY (critical fixes):
- Add authMiddleware to /api/system/console-token (was publicly accessible)
- Validate api_url on node create/update to prevent SSRF (rejects localhost/loopback)
- Add rate limiting (5 req/15 min/IP) to /api/auth/login and /api/auth/setup
- Fix path traversal in env_file resolution — absolute/escaping paths rejected
- Add stack name validation to GET routes (was only on PUT/POST)
- Add helmet security headers middleware
- Restrict CORS to FRONTEND_URL in production
PRODUCTION READINESS:
- Add GET /api/health public endpoint + HEALTHCHECK in Dockerfile
- Add SIGTERM/SIGINT graceful shutdown handler (drains connections, closes DB)
- Run container as non-root sencho user in Dockerfile
QUALITY:
- Fix 4 silent empty catch{} blocks in EditorLayout (now show toast.error)
- Connect ErrorBoundary to root App in main.tsx
- Replace WebSocket.Server with named WebSocketServer import (ESM compat)
TESTING (new automated test suite):
- Install Vitest; 38 backend tests across 4 suites covering validation utilities,
health endpoint, auth middleware, login flows, SSRF protection, and path traversal
- Extract isValidStackName/isValidRemoteUrl/isPathWithinBase to utils/validation.ts
- Playwright E2E scaffolding: auth, stacks, nodes specs + shared login helper
- CI: run Vitest + ESLint on every PR
2026-03-21 21:59:44 -04:00
Anso