Commit Graph

811 Commits

Author SHA1 Message Date
GitHub Actions daef23118a test(crowdsec): add LAPI connectivity tests and enhance integration test reporting 2026-02-04 01:56:56 +00:00
GitHub Actions c9965bb45b feat: Add CrowdSec Bouncer Key Display component and integrate into Security page
- Implemented CrowdSecBouncerKeyDisplay component to fetch and display the bouncer API key information.
- Added loading skeletons and error handling for API requests.
- Integrated the new component into the Security page, conditionally rendering it based on CrowdSec status.
- Created unit tests for the CrowdSecBouncerKeyDisplay component, covering various states including loading, registered/unregistered bouncer, and no key configured.
- Added functional tests for the Security page to ensure proper rendering of the CrowdSec Bouncer Key Display based on the CrowdSec status.
- Updated translation files to include new keys related to the bouncer API key functionality.
2026-02-03 21:07:16 +00:00
Jeremy da6682000e Merge branch 'feature/beta-release' into renovate/feature/beta-release-weekly-non-major-updates 2026-02-03 14:55:10 -05:00
GitHub Actions b6a189c927 fix(security): add CrowdSec diagnostics script and E2E tests for console enrollment and diagnostics
- Implemented `diagnose-crowdsec.sh` script for checking CrowdSec connectivity and configuration.
- Added E2E tests for CrowdSec console enrollment, including API checks for enrollment status, diagnostics connectivity, and configuration validation.
- Created E2E tests for CrowdSec diagnostics, covering configuration file validation, connectivity checks, and configuration export.
2026-02-03 18:26:32 +00:00
renovate[bot] 6d746385c3 chore(deps): update actions/checkout digest to de0fac2 2026-02-03 17:20:33 +00:00
GitHub Actions 60436b5481 fix(e2e): resolve E2E test failures by correcting API endpoints and response field access
- Updated Break Glass Recovery test to use the correct endpoint `/api/v1/security/status` and adjusted field access to `body.cerberus.enabled`.
- Modified Emergency Security Reset test to remove expectation for `feature.cerberus.enabled` and added assertions for all disabled modules.
- Refactored Security Teardown to replace hardcoded authentication path with `STORAGE_STATE` constant and corrected API endpoint usage for verifying security module status.
- Added comprehensive verification steps and comments for clarity.
2026-02-03 15:13:33 +00:00
GitHub Actions bba59ca2b6 chore: update tools list in agent configurations for improved functionality and organization 2026-02-03 14:03:23 +00:00
renovate[bot] df80c49070 chore(deps): update github/codeql-action digest to 6bc82e0 2026-02-03 07:15:37 +00:00
GitHub Actions 4178910eac refactor: streamline supply chain workflows by removing Syft and Grype installations and utilizing official Anchore actions for SBOM generation and vulnerability scanning 2026-02-03 07:09:54 +00:00
GitHub Actions de66689b79 fix: update SYFT and GRYPE versions to include SHA256 digests for improved security 2026-02-03 06:40:50 +00:00
GitHub Actions 07e8261ecb chore(e2e): update concurrency settings to prevent cancellation of in-progress E2E tests 2026-02-03 04:18:37 +00:00
GitHub Actions 3ecc4015a6 refactor(workflows): simplify E2E Tests workflow name by removing 'Split Browsers' suffix 2026-02-03 00:56:00 +00:00
GitHub Actions 19e74f2122 refactor(workflows): standardize workflow names by removing 'Tests' suffix 2026-02-03 00:51:06 +00:00
GitHub Actions d6cbc407fd fix(e2e): update Docker build-push-action version in E2E tests workflow 2026-02-03 00:06:01 +00:00
GitHub Actions 641588367b chore(diagnostics): Add comprehensive diagnostic tools for E2E testing
- Create phase1_diagnostics.md to document findings from test interruptions
- Introduce phase1_validation_checklist.md for pre-deployment validation
- Implement diagnostic-helpers.ts for enhanced logging and state capture
- Enable browser console logging, error tracking, and dialog lifecycle monitoring
- Establish performance monitoring for test execution times
- Document actionable recommendations for Phase 2 remediation
2026-02-03 00:02:45 +00:00
Jeremy 3bb7098220 Merge branch 'feature/beta-release' into renovate/feature/beta-release-weekly-non-major-updates 2026-02-02 16:44:12 -05:00
GitHub Actions 3414576f60 fix(e2e): implement performance tracking for shard execution and API call metrics 2026-02-02 21:32:27 +00:00
renovate[bot] 22c2e10f64 chore(deps): update weekly-non-major-updates 2026-02-02 21:23:46 +00:00
Jeremy 44d425d51d Merge branch 'feature/beta-release' into renovate/feature/beta-release-peter-evans-create-pull-request-8.x 2026-02-02 09:55:06 -05:00
renovate[bot] 280e7b9c19 chore(deps): pin peter-evans/create-pull-request action to c5a7806 2026-02-02 14:53:28 +00:00
Jeremy a92e49604f Merge branch 'feature/beta-release' into renovate/feature/beta-release-peter-evans-create-pull-request-8.x 2026-02-02 09:48:59 -05:00
Jeremy 15d27b0c37 Merge branch 'feature/beta-release' into renovate/feature/beta-release-actions-github-script-8.x 2026-02-02 09:48:35 -05:00
renovate[bot] 3785e83323 chore(deps): update peter-evans/create-pull-request action to v8 2026-02-02 14:46:39 +00:00
renovate[bot] dccf75545a chore(deps): update actions/github-script action to v8 2026-02-02 14:46:34 +00:00
renovate[bot] 530450440e chore(deps): update actions/checkout action to v6 2026-02-02 14:46:29 +00:00
Jeremy d0cc6c08cf Merge branch 'feature/beta-release' into development 2026-02-02 09:41:47 -05:00
Jeremy 28ce642f94 Merge branch 'development' into main 2026-02-02 09:37:27 -05:00
GitHub Actions 09dc2fc182 fix(ci): use valid BuildKit --check flag for Dockerfile syntax validation
Replaced non-existent `docker build --dry-run` with BuildKit's
`--check` flag which validates Dockerfile syntax without building.

Fixes #601
2026-02-02 14:18:08 +00:00
GitHub Actions 34f99535e8 fix(ci): add GeoLite2 checksum update workflow with error handling 2026-02-02 14:12:57 +00:00
GitHub Actions a167ca9756 fix(ci): add workflow to update GeoLite2-Country.mmdb checksum automatically 2026-02-02 14:11:13 +00:00
renovate[bot] 4dd95f1b6b fix(deps): update weekly-non-major-updates 2026-02-02 14:03:20 +00:00
GitHub Actions b27fb306f7 fix(ci): force push nightly branch to handle divergence from development 2026-02-02 13:47:36 +00:00
GitHub Actions f3ed1614c2 fix(ci): improve nightly build sync process by fetching both branches and preventing non-fast-forward errors 2026-02-02 13:45:21 +00:00
GitHub Actions 3261f5d7a1 fix(ci): normalize branch name for Docker tag in security PR workflow 2026-02-02 13:42:49 +00:00
GitHub Actions 60c3336725 COMMIT_MESSAGE_START
fix(docker): update GeoLite2-Country.mmdb checksum + automation

Fixes critical Docker build failure caused by upstream GeoLite2 database
update without corresponding Dockerfile checksum update.

**Root Cause:**
- GeoLite2-Country.mmdb file updated upstream
- Dockerfile still referenced old SHA256 checksum
- Build aborted at checksum verification (line 352)
- Cascade "blob not found" errors for all COPY commands

**Changes:**
- Update Dockerfile ARG GEOLITE2_COUNTRY_SHA256 to current value
- Add automated weekly checksum update workflow (.github/workflows/update-geolite2.yml)
- Implement error handling: retry logic, format validation, failure notifications
- Document rollback decision matrix with 10 failure scenarios
- Create comprehensive maintenance guide (docs/maintenance/geolite2-checksum-update.md)
- Update CHANGELOG.md and README.md with maintenance references

**Verification:**
- Checksum verified against current upstream file: 436135ee...
- Pre-commit hooks: PASSED (EOF/whitespace auto-fixed)
- Trivy security scan: PASSED (no critical/high issues)
- Dockerfile syntax: VALID
- GitHub Actions YAML: VALID
- No hardcoded secrets or injection vulnerabilities

**Automation Features:**
- Weekly scheduled checks (Monday 2 AM UTC)
- Auto-PR creation when checksum changes
- GitHub issue creation on workflow failure
- Comprehensive error handling and retry logic

**Impact:**
- Unblocks all CI/CD Docker image builds
- Enables publishing to GHCR/Docker Hub
- Prevents future checksum failures via automation
- Zero application code changes (no regression risk)

**Documentation:**
- Implementation plan: docs/plans/geolite2_checksum_fix_spec.md
- QA report: docs/reports/qa_geolite2_checksum_fix.md
- Maintenance guide: docs/maintenance/geolite2-checksum-update.md

**Supervisor Recommendations Implemented:**
- #1: Checksum freshness verification before update
- #3: Rollback decision criteria (10 scenarios)
- #4: Automated workflow error handling

Resolves: https://github.com/Wikid82/Charon/actions/runs/21584236523/job/62188372617
COMMIT_MESSAGE_END
2026-02-02 13:31:56 +00:00
renovate[bot] 8794e8948c chore(deps): update github/codeql-action digest to f52cbc8 2026-02-02 11:57:38 +00:00
renovate[bot] 085fa9cb2c chore(deps): update weekly-non-major-updates 2026-02-02 11:57:31 +00:00
GitHub Actions 8e31db2a5a fix(e2e): implement clickSwitch utility for reliable toggle interactions and enhance tests with new helper functions 2026-02-02 07:23:49 +00:00
GitHub Actions fcb9eb79a8 chore: Remove dupe Playwright E2E test workflow 2026-02-02 06:44:21 +00:00
renovate[bot] 08cc82ac19 chore(deps): update actions/upload-artifact digest to 47309c9 2026-02-02 05:40:03 +00:00
renovate[bot] 0ad65fcfb1 chore(deps): update renovatebot/github-action action to v46.0.1 2026-02-02 05:39:57 +00:00
GitHub Actions f19632cdf8 fix(tests): enhance system settings tests with feature flag propagation and retry logic
- Added initial feature flag state verification before tests to ensure a stable starting point.
- Implemented retry logic with exponential backoff for toggling feature flags, improving resilience against transient failures.
- Introduced `waitForFeatureFlagPropagation` utility to replace hard-coded waits with condition-based verification for feature flag states.
- Added advanced test scenarios for handling concurrent toggle operations and retrying on network failures.
- Updated existing tests to utilize the new retry and propagation utilities for better reliability and maintainability.
2026-02-02 01:14:46 +00:00
GitHub Actions db48daf0e8 test: fix E2E timing for DNS provider field visibility
Resolved timing issues in DNS provider type selection E2E tests
(Manual, Webhook, RFC2136, Script) caused by React re-render delays
with conditional rendering.

Changes:
- Simplified field wait strategy in tests/dns-provider-types.spec.ts
- Removed intermediate credentials-section wait
- Use direct visibility check for provider-specific fields
- Reduced timeout from 10s to 5s (sufficient for 2x safety margin)

Technical Details:
- Root cause: Tests attempted to find fields before React completed
  state update cycle (setState → re-render → conditional eval)
- Firefox SpiderMonkey 2x slower than Chromium V8 (30-50ms vs 10-20ms)
- Solution confirms full React cycle by waiting for actual target field

Results:
- 544/602 E2E tests passing (90%)
- All DNS provider tests verified on Chromium
- Backend coverage: 85.2% (meets ≥85% threshold)
- TypeScript compilation clean
- Zero ESLint errors introduced

Documentation:
- Updated CHANGELOG.md with fix entry
- Created docs/reports/e2e_fix_v2_qa_report.md (detailed)
- Created docs/reports/e2e_fix_v2_summary.md (quick reference)
- Created docs/security/advisory_2026-02-01_base_image_cves.md (7 HIGH CVEs)

Related: PR #583, CI run https://github.com/Wikid82/Charon/actions/runs/21558579945
2026-02-01 14:17:58 +00:00
GitHub Actions 9dc1cd6823 fix(ci): enhance test database management and improve service cleanup
- Added cleanup functions to close database connections in various test setups to prevent resource leaks.
- Introduced new helper functions for creating test services with proper cleanup.
- Updated multiple test cases to utilize the new helper functions for better maintainability and readability.
- Improved error handling in tests to ensure proper assertions and resource management.
2026-02-01 09:33:26 +00:00
GitHub Actions 314fddb7db fix(agent): update tool list for Management agent to include additional editing commands 2026-02-01 02:31:29 +00:00
GitHub Actions 20d47e711f fix(tools): update tool lists for various agents to include specific edit commands 2026-02-01 02:25:30 +00:00
GitHub Actions 1defb04fca fix(e2e): streamline Playwright browser installation by caching and removing redundant force install step 2026-01-31 19:32:15 +00:00
GitHub Actions 200cdac3f4 fix(e2e): reorder Playwright browser installation step to ensure proper caching 2026-01-31 19:18:43 +00:00
GitHub Actions 620f566992 fix(e2e): force reinstall Playwright browsers to ensure dependencies are up to date 2026-01-31 18:57:50 +00:00
GitHub Actions 5daa173591 fix(agent): update tools list for Management agent to include new VSCode extensions and commands 2026-01-31 15:16:00 +00:00