257d42e922
chore(deps): update weekly-non-major-updates
2026-02-10 21:49:41 +00:00
d29b8e9ce4
Refactor user management and logs viewing tests for improved stability and clarity
...
- Scoped button selectors to dialogs in user management tests to avoid strict mode violations.
- Added wait conditions for loading states and element visibility in user management and logs viewing tests.
- Updated navigation methods to use 'domcontentloaded' for better reliability.
- Enhanced mock data generation for log entries and improved filtering logic in logs viewing tests.
- Consolidated selector usage with data-testid attributes for consistency and maintainability.
- Removed skipped tests and ensured all scenarios are covered for logs viewing, including pagination and filtering.
2026-02-10 09:02:26 +00:00
eee9f429d9
docs: Add QA Definition of Done Verification Report and update Vulnerability Assessment Phase 2
...
- Created a comprehensive QA Definition of Done (DoD) Verification Report detailing the status of E2E tests, coverage, type safety, pre-commit hooks, linting, and security scans.
- Documented findings on React rendering issues, test execution times, and recommendations for CI scheduling.
- Updated the Vulnerability Assessment Phase 2 report with detailed CVE findings, risk assessments, and remediation plans for identified vulnerabilities in dependencies.
2026-02-10 07:24:14 +00:00
86c8e728b3
chore: add PR comment configuration for Codecov coverage reports
2026-02-10 07:08:11 +00:00
b18716bfad
fix: update permissions to allow write access for pull requests
2026-02-10 07:07:40 +00:00
b5d2dbf89d
fix: increase timeout durations for security and non-security E2E tests
2026-02-10 07:01:41 +00:00
e568ba5ed3
chore: add tests for Domain/DNS Management, Monitoring/Audit, Backup/Recovery, and Emergency Operations
...
- Implemented tests for domain and DNS management including adding domains, viewing DNS records, and SSL certificate management.
- Created monitoring and audit tests for log display, filtering, searching, and export functionality.
- Developed backup and recovery tests covering manual backups, scheduling, restoration, and data integrity verification.
- Added emergency operations tests for emergency token usage, break-glass recovery procedures, and security module management.
- Included a comprehensive README for the UAT test suite detailing test coverage, execution instructions, and success criteria.
2026-02-10 06:27:21 +00:00
bf64878b64
fix: improve conditional check for image size in GHCR deletion script
2026-02-10 06:25:35 +00:00
ed3d997c3f
Merge pull request #687 from Wikid82/renovate/feature/beta-release-weekly-non-major-updates
...
chore(deps): update dependency @vitejs/plugin-react to ^5.1.4 (feature/beta-release)
2026-02-10 00:58:28 -05:00
bfe5edcdd0
chore(deps): update dependency @vitejs/plugin-react to ^5.1.4
2026-02-10 05:52:57 +00:00
2dbb17fc94
fix: remove redundant test-image job from Docker build workflow
2026-02-10 05:23:18 +00:00
8b0e3c9eb7
fix: enhance error handling and streamline coverage summary extraction in frontend test script
2026-02-10 04:39:30 +00:00
1ab4bcabf8
fix: improve coverage summary output handling and error reporting in frontend test script
2026-02-10 04:30:39 +00:00
6b5ccfa7eb
fix: remove ignored tests from Playwright execution in E2E workflow
2026-02-10 04:17:20 +00:00
9018e7607b
fix: improve error messages for coverage percentage extraction and minimum coverage validation
2026-02-10 04:10:00 +00:00
67521c0d3f
chore: Add comprehensive security testing reports and enhance session logging functionality
2026-02-10 01:43:48 +00:00
4f59f0ccf3
chore: Add integration, rate limiting, and security enforcement tests for Phase 3
...
- Implement CrowdSec integration tests to validate DDoS/bot protection mechanisms.
- Create rate limiting tests to ensure request throttling and proper handling of rate limit headers.
- Develop security enforcement tests to check JWT validation, CSRF protection, request timeouts, and middleware execution order.
2026-02-10 01:17:07 +00:00
2da8c51277
fix: CrowdSec configuration handling and verification in entrypoint and Dockerfile
2026-02-10 00:51:02 +00:00
f86b2335e4
fix: enhance error handling and validation in test coverage scripts
2026-02-10 00:47:29 +00:00
a14f6ee41f
fix: add refresh token endpoint to authentication routes
2026-02-10 00:18:05 +00:00
f6b3cc3cef
chore(deps): update github.com/quic-go/quic-go to v0.59.0
...
- Updated quic-go from v0.57.1 to v0.59.0 for QUIC protocol improvements
- Ran go mod tidy to ensure consistency
- Dependencies verified for integrity
2026-02-10 00:05:23 +00:00
028189ece0
feat: complete Phase 2 testing infrastructure remediation and discovery
...
## Summary
- Phase 2.1 critical fixes implemented and verified:
* Uptime monitor initial state logic validated (no code change needed)
* Backups guest authorization check added (frontend role gating)
* Docker integration element IDs fixed for test selector reliability
- Phase 2.2 discovery completed with root cause analysis:
* User management invite endpoint identified: blocking email send (SMTP blocking)
* Docker integration code quality verified as sound
* Async email pattern recommended for Phase 2.3 implementation
- Comprehensive QA verification executed:
* Full Phase 2 E2E suite run in headless mode (90%+ pass rate)
* GORM security scanner passed (0 CRITICAL/HIGH app code issues)
* Infrastructure validation complete (Docker, ports, containers operational)
## Critical Findings
- CVE-2024-45337 in golang.org/x/crypto/ssh (dependency update required)
- InviteUser handler blocks on SMTP (design pattern issue, documented for async refactor)
- Test authentication token refresh needed for Phase 3
## Artifacts Created
- Phase 2 discovery documents (user management, Docker integration)
- Uptime monitor contract test validating initial state behavior
- Comprehensive security and quality reports in docs/reports/ and docs/security/
## Next Steps
1. Update crypto dependency (1 hour) - CRITICAL
2. Implement async email queuing for invites (2-3 hours) - HIGH
3. Add test auth token refresh mechanism (30 min) - MEDIUM
4. Phase 3 security enforcement testing can proceed in parallel
2026-02-09 23:31:00 +00:00
2f9d016ac0
fix: restrict push triggers to main and development branches in quality checks workflow
2026-02-09 23:19:40 +00:00
1cf49cc708
fix: restrict header actions to admin users in Backups component
2026-02-09 23:16:51 +00:00
ce073370a2
fix: update coverage threshold values to align with project standards
2026-02-09 23:15:21 +00:00
95eb9c7e0a
fix: add IDs to SelectTrigger components for improved accessibility
2026-02-09 23:09:18 +00:00
b0256213ff
fix: update Go version to 1.25.7 in quality checks workflow
2026-02-09 23:08:15 +00:00
b4b89c44c0
chore: enhance Docker build workflow with improved tagging and error handling
2026-02-09 23:03:13 +00:00
3169b05156
fix: skip incomplete system log viewer tests
...
- Marked 12 tests as skip pending feature implementation
- Features tracked in GitHub issue #686 (system log viewer feature completion)
- Tests cover sorting by timestamp/level/method/URI/status, pagination controls, filtering by text/level, download functionality
- Unblocks Phase 2 at 91.7% pass rate to proceed to Phase 3 security enforcement validation
- TODO comments in code reference GitHub #686 for feature completion tracking
- Tests skipped: Pagination (3), Search/Filter (2), Download (2), Sorting (1), Log Display (4)
2026-02-09 21:55:55 +00:00
74a51ee151
chore: clean git cache
2026-02-09 21:42:54 +00:00
177e309b38
feat: add Phase 2 Test Failure Triage Report with detailed failure analysis and recommendations
2026-02-09 21:35:54 +00:00
18b062f2d5
fix: update go.mod dependencies to latest versions
2026-02-09 21:35:44 +00:00
32c4cc879e
fix: skip incomplete system log viewer tests
...
- Mark 12 tests as skip pending feature implementation (GitHub #686 )
- Tests cover sorting, pagination, search/filter, and download features
- Unblocks Phase 2 test suite from proceeding to Phase 3
- Features identified in issue: sorting by timestamp/level/method/URI/status, pagination controls, filtering by text/level, and download functionality
2026-02-09 21:31:19 +00:00
2e842ff495
Merge pull request #685 from Wikid82/renovate/feature/beta-release-weekly-non-major-updates
...
fix(deps): update weekly-non-major-updates (feature/beta-release)
2026-02-09 15:27:58 -05:00
36f386eec0
Refactor quality checks workflow
...
Updated workflow to remove frontend dispatch inputs, adjust Go version, and modify test summary outputs.
2026-02-09 15:27:15 -05:00
5efaa98873
fix(deps): update weekly-non-major-updates
2026-02-09 20:24:57 +00:00
9793471435
fix: pin ESLint version to 9.39.2 for consistency
2026-02-09 20:11:55 +00:00
fa7b413430
chore: downgrade @typescript-eslint packages to version 8.54.0
2026-02-09 20:01:03 +00:00
104559afcd
fix: update ESLint version constraint to allow compatible updates
2026-02-09 19:54:54 +00:00
af0ce21ffd
fix: update TypeScript ESLint dependencies and adjust ESLint version constraint
2026-02-09 19:48:20 +00:00
7bf7b8261c
test(e2e): harden proxy-hosts navigation for browser resilience
2026-02-09 17:20:35 +00:00
27479fd5cc
test(e2e): mitigate flaky Phase 2 failures — retry flaky cert test, tighten monitoring modal selector, wait for /api/v1/logs response
2026-02-09 17:05:18 +00:00
e080c487f2
test(e2e): stabilize Phase 2 runs — disable dev webServer by default, increase API timeouts, retry navigation and harden dialog interactions
2026-02-09 16:59:11 +00:00
378384b319
fix: enhance Codecov configuration for backend, frontend, and E2E coverage thresholds
2026-02-09 08:09:36 +00:00
dc505b2789
fix: mock system api in layout tests to prevent network crashes
...
- Mocked `getNotifications` and `checkUpdates` in `Layout.test.tsx`
- Prevents `UND_ERR_INVALID_ARG` errors caused by unmocked `undici` network requests in JSDOM
- Ensures clean test execution for `Layout` and child components
2026-02-09 07:28:16 +00:00
376f9d3e34
fix: address console noise in AuditLogs tests and eliminate act() warnings in UsersPage tests
...
- update coverage threshold to 88.0 and add CHARON_MIN_COVERAGE environment variable
- ignore frontend coverage output in .gitignore
2026-02-09 06:57:20 +00:00
0985a9a79a
Merge branch 'development' into feature/beta-release
2026-02-09 01:18:53 -05:00
ce3831fb13
Merge pull request #682 from Wikid82/renovate/feature/beta-release-actions-github-script-8.x
...
chore(deps): update actions/github-script action to v8 (feature/beta-release)
2026-02-09 01:13:02 -05:00
ae769ec958
Merge branch 'feature/beta-release' into renovate/feature/beta-release-actions-github-script-8.x
2026-02-09 01:12:54 -05:00
f1981ee85a
Merge pull request #681 from Wikid82/renovate/feature/beta-release-pin-dependencies
...
chore(deps): pin actions/github-script action to f28e40c (feature/beta-release)
2026-02-09 01:12:19 -05:00
renovate[bot]
GitHub Actions
Jeremy