6d904c48b3
Merge branch 'development' into feature/beta-release
2026-01-02 22:28:27 -05:00
6b6791695f
Merge pull request #466 from Wikid82/renovate/npm-minorpatch
...
fix(deps): update npm minor/patch
2026-01-02 22:24:47 -05:00
0b28ec617f
Merge branch 'development' into renovate/npm-minorpatch
2026-01-02 22:24:42 -05:00
5aa63e4561
Merge pull request #465 from Wikid82/renovate/actions-attest-sbom-3.x
...
chore(deps): update actions/attest-sbom action to v3
2026-01-02 22:24:29 -05:00
9527333b78
Merge branch 'development' into renovate/actions-attest-sbom-3.x
2026-01-02 22:24:23 -05:00
d25712aad1
Merge pull request #464 from Wikid82/renovate/anchore-sbom-action-0.x
...
chore(deps): update anchore/sbom-action action to v0.21.0
2026-01-02 22:23:43 -05:00
16911038dc
Merge pull request #463 from Wikid82/renovate/actions-attest-sbom-2.x
...
chore(deps): update actions/attest-sbom action to v2.4.0
2026-01-02 22:23:30 -05:00
f2ef1b72c8
Merge pull request #462 from Wikid82/renovate/renovatebot-github-action-44.x
...
chore(deps): update renovatebot/github-action action to v44.2.2
2026-01-02 22:23:14 -05:00
9fb422741e
fix(deps): update npm minor/patch
2026-01-03 03:19:01 +00:00
b328c3d3a5
chore(deps): update actions/attest-sbom action to v3
2026-01-03 03:18:50 +00:00
871447d7b7
chore(deps): update anchore/sbom-action action to v0.21.0
2026-01-03 03:18:46 +00:00
b856170f70
chore(deps): update actions/attest-sbom action to v2.4.0
2026-01-03 03:18:41 +00:00
02d84ad83c
chore(deps): update renovatebot/github-action action to v44.2.2
2026-01-03 03:18:36 +00:00
3aaa059a15
fix: authentication issues for certificate endpoints and improve test coverage
...
- Updated UsersPage tests to check for specific URL formats instead of regex patterns.
- Increased timeout for Go coverage report generation to handle larger repositories.
- Cleaned up generated artifacts before running CodeQL analysis to reduce false positives.
- Removed outdated QA testing report for authentication fixes on the certificates page.
- Added final report confirming successful resolution of authentication issues with certificate endpoints.
- Deleted previous test output files to maintain a clean test results directory.
2026-01-03 03:08:43 +00:00
8f15fdd97f
chore: Update QA report and improve test coverage
...
- Updated the QA/Security Validation Report with new dates and status.
- Enhanced coverage verification metrics for backend and frontend tests.
- Improved TypeScript checks and security scans, ensuring all checks passed.
- Refactored ProxyHosts tests to utilize mock implementations for hooks and APIs.
- Added smoke test for login functionality using Playwright.
- Adjusted vitest configuration to use thread pooling for tests.
- Removed unnecessary peer dependency from package-lock.json.
2026-01-02 07:10:08 +00:00
e4dd32f7ef
Merge branch 'main' into feature/beta-release
2026-01-01 22:08:22 -05:00
4e429c6cf5
fix: prevent IP addresses from using ACME/ZeroSSL issuers
...
- Filter IP addresses from HTTP challenge domains list
- Ensure IPs only get internal (self-signed) certificates
- Preserve IP addresses in DNS challenge domains for proper handling
- All 550+ backend tests passing with 85.8% coverage
Resolves certificate issuer assignment bug for IP-based proxy hosts
2026-01-02 02:55:31 +00:00
011ac1d3ab
feat: add jest-dom matchers reference for vitest in test shims
2026-01-02 01:49:29 +00:00
7e2c7005c9
test: add comprehensive frontend tests for DNS provider feature
...
- Add 97 test cases covering API, hooks, and components
- Achieve 87.8% frontend coverage (exceeds 85% requirement)
- Fix CodeQL informational findings
- Ensure type safety and code quality standards
Resolves coverage failure in PR #460
2026-01-02 01:46:28 +00:00
5ea207ab47
chore: clean git cache
2026-01-02 01:01:54 +00:00
aae55a8ae9
chore: clean git cache
2026-01-02 00:59:57 +00:00
9a05e2f927
feat: add DNS provider management features
...
- Implement DNSProviderCard component for displaying individual DNS provider details.
- Create DNSProviderForm component for adding and editing DNS providers.
- Add DNSProviderSelector component for selecting DNS providers in forms.
- Introduce useDNSProviders hook for fetching and managing DNS provider data.
- Add DNSProviders page for listing and managing DNS providers.
- Update layout to include DNS Providers navigation.
- Enhance UI components with new badge styles and improved layouts.
- Add default provider schemas for various DNS providers.
- Integrate translation strings for DNS provider management.
- Update Vite configuration for improved chunking and performance.
2026-01-02 00:52:37 +00:00
902e8aedc7
Merge pull request #459 from Wikid82/development
...
Propagate changes from development into feature/beta-release
2025-12-31 23:29:09 -05:00
03f079ce82
Merge pull request #437 from Wikid82/feature/issue-365-additional-security
...
fix(security): complete SSRF remediation with defense-in-depth (CWE-918)
2025-12-31 23:19:09 -05:00
f5f245af74
Merge pull request #436 from Wikid82/feature/issue-365-additional-security
...
fix(security): complete SSRF remediation with defense-in-depth (CWE-918)
2025-12-31 23:18:42 -05:00
15db211fe5
chore: move processed issue files to created/ [skip ci]
2026-01-01 04:04:53 +00:00
a580858bfd
Merge pull request #450 from Wikid82/feature/beta-release
...
fix(security): complete SSRF remediation with defense-in-depth (CWE-918)
2025-12-31 23:04:36 -05:00
cfafe70d17
fix: rename variable for clarity and security verification in TestURLConnectivity
2026-01-01 03:53:44 +00:00
a1ff78a92f
fix: add CodeQL configuration to exclude documented SSRF false positives and update workflow to use new config
2026-01-01 03:36:06 +00:00
f8667bcc66
fix: enhance CodeQL custom model for SSRF protection clarity and update URL validation comments
2026-01-01 03:29:38 +00:00
5ed998a9c4
fix: refactor host matching logic in TestGenerateConfig_WithWAFPerHostDisabled for clarity
2026-01-01 03:09:25 +00:00
d7fb784fa4
fix: update parameter name in computeEffectiveFlags for clarity
2026-01-01 03:08:09 +00:00
beb230c0d6
fix: sanitize user input for log injection protection in ProxyHostHandler
2026-01-01 03:06:36 +00:00
5a3f0fed62
fix: update CodeQL custom model and comments in TestURLConnectivity for improved SSRF protection clarity
2026-01-01 03:02:23 +00:00
37f42dd62e
fix: configure GORM logger to ignore "record not found" errors during seed operations
2026-01-01 02:29:40 +00:00
03a2fb1969
fix: enhance URL validation in TestURLConnectivity to prevent SSRF vulnerabilities
2026-01-01 01:50:32 +00:00
8edd2056b0
fix: replace nil with http.NoBody in various test cases for consistency
2026-01-01 01:38:19 +00:00
436b67f728
fix: replace nil with http.NoBody in various handler tests for clarity
2026-01-01 01:00:27 +00:00
e50d329e01
fix: replace nil with http.NoBody in CrowdsecHandler tests for clarity
2026-01-01 00:24:41 +00:00
d3f39cdea9
fix: replace nil with http.NoBody in CrowdsecHandler tests for clarity
2026-01-01 00:11:02 +00:00
7a1a3adb1b
fix: replace inline mock with verification executor for clarity in TestReconcileCrowdSecOnStartup
2025-12-31 23:52:04 +00:00
8d271f7f60
fix: update file permission mode in log watcher test for consistency
2025-12-31 23:40:45 +00:00
27787022ee
fix: simplify return types in ValidateURL for consistency
2025-12-31 23:34:52 +00:00
d2447da604
fix: enhance SSRF protection documentation and improve function return clarity in TestURLConnectivity
2025-12-31 23:30:56 +00:00
b1c67153f1
fix: streamline error handling in TestTestURLConnectivity_EnhancedSSRF for clarity
2025-12-31 23:09:20 +00:00
12615a918b
fix: add security comment for binPath handling in Start method
2025-12-31 23:06:01 +00:00
bfc19ef3bd
fix: refactor status handling in checkHost to improve clarity and maintainability
2025-12-31 22:57:08 +00:00
8df363a75c
fix: enhance IP address handling in generateForwardHostWarnings for improved warning accuracy
2025-12-31 22:49:32 +00:00
247ebcacf7
fix: improve type handling in crowdsecExport tests for better type safety
2025-12-31 22:32:09 +00:00
dcdc4e03b8
fix: update HTTP request handling and improve test coverage in various handlers
2025-12-31 22:12:51 +00:00
Jeremy
renovate[bot]
GitHub Actions
github-actions[bot]