renovate[bot]
61c98a9994
chore(deps): update dependency http-proxy-middleware to v2.0.8 [security] ( #9787 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[http-proxy-middleware](https://redirect.github.com/chimurai/http-proxy-middleware )
| [`2.0.7` ->
`2.0.8`](https://renovatebot.com/diffs/npm/http-proxy-middleware/2.0.7/2.0.8 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
### GitHub Vulnerability Alerts
#### [CVE-2025-32996](https://nvd.nist.gov/vuln/detail/CVE-2025-32996 )
In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody
can be called twice because "else if" is not used.
---
### Release Notes
<details>
<summary>chimurai/http-proxy-middleware
(http-proxy-middleware)</summary>
###
[`v2.0.8`](https://redirect.github.com/chimurai/http-proxy-middleware/releases/tag/v2.0.8 )
[Compare
Source](https://redirect.github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.8 )
#### What's Changed
- fix(fixRequestBody): prevent multiple .write() calls by
[@​chimurai](https://redirect.github.com/chimurai ) in
[https://github.com/chimurai/http-proxy-middleware/pull/1090 ](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1090 )
- fix(fixRequestBody): handle invalid request by
[@​chimurai](https://redirect.github.com/chimurai ) in
[https://github.com/chimurai/http-proxy-middleware/pull/1091 ](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1091 )
- chore(package): v2.0.8 by
[@​chimurai](https://redirect.github.com/chimurai ) in
[https://github.com/chimurai/http-proxy-middleware/pull/1094 ](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1094 )
**Full Changelog**:
https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.8
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" in timezone Europe/Madrid,
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/Unleash/unleash ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzguMCIsInVwZGF0ZWRJblZlciI6IjM5LjIzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-16 20:10:43 +00:00
renovate[bot]
4454656713
chore(deps): update dependency http-proxy-middleware to v3.0.5 [security] ( #9785 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[http-proxy-middleware](https://redirect.github.com/chimurai/http-proxy-middleware )
| [`3.0.3` ->
`3.0.5`](https://renovatebot.com/diffs/npm/http-proxy-middleware/3.0.3/3.0.5 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
### GitHub Vulnerability Alerts
#### [CVE-2025-32997](https://nvd.nist.gov/vuln/detail/CVE-2025-32997 )
In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5,
fixRequestBody proceeds even if bodyParser has failed.
#### [CVE-2025-32996](https://nvd.nist.gov/vuln/detail/CVE-2025-32996 )
In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody
can be called twice because "else if" is not used.
---
### Release Notes
<details>
<summary>chimurai/http-proxy-middleware
(http-proxy-middleware)</summary>
###
[`v3.0.5`](https://redirect.github.com/chimurai/http-proxy-middleware/blob/HEAD/CHANGELOG.md#v305 )
[Compare
Source](https://redirect.github.com/chimurai/http-proxy-middleware/compare/v3.0.4...v3.0.5 )
- fix(fixRequestBody): check readableLength
([#​1096](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1096 ))
###
[`v3.0.4`](https://redirect.github.com/chimurai/http-proxy-middleware/blob/HEAD/CHANGELOG.md#v304 )
[Compare
Source](https://redirect.github.com/chimurai/http-proxy-middleware/compare/v3.0.3...v3.0.4 )
- fix(fixRequestBody): handle invalid request
([#​1092](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1092 ))
- fix(fixRequestBody): prevent multiple .write() calls
([#​1089](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1089 ))
- fix(websocket): handle errors in handleUpgrade
([#​823](https://redirect.github.com/chimurai/http-proxy-middleware/pull/823 ))
- ci(package): patch http-proxy
([#​1084](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1084 ))
- fix(fixRequestBody): support multipart/form-data
([#​896](https://redirect.github.com/chimurai/http-proxy-middleware/pull/896 ))
- feat(types): export Plugin type
([#​1071](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1071 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" in timezone Europe/Madrid,
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/Unleash/unleash ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMzguMCIsInVwZGF0ZWRJblZlciI6IjM5LjIzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-16 20:04:17 +00:00
Melinda Fekete
97ae82c134
docs: hosting options - apply suggestions for latency and client-side context ( #9777 )
2025-04-16 16:07:49 +02:00
Mateusz Kwasniewski
b31845b63c
feat: archive reminder icon ( #9781 )
2025-04-16 16:07:33 +02:00
Nuno Góis
176e9d3187
chore: improve demo auth screen ( #9780 )
...
https://linear.app/unleash/issue/2-2575/adjust-text-login-screen
Adjusts the text for the demo auth screen.
Also took some liberties to improve the visual design of this page (at
least, IMO).
### Before
### After
2025-04-16 15:07:22 +01:00
Nuno Góis
f3a1da9d7e
chore: make demo back button variant text ( #9772 )
...
https://linear.app/unleash/issue/2-2576/make-back-button-less-dominant
Make demo "Back" button `variant='text'` so it's less predominant
visually.
### Before
### After
2025-04-16 14:52:54 +01:00
Nuno Góis
d3d618c9ad
chore: improve demo finish CTA ( #9773 )
...
https://linear.app/unleash/issue/2-2578/change-cta-text-finished-screen
Improves the demo finished dialog CTA.
2025-04-16 14:48:12 +01:00
Mateusz Kwasniewski
a2a8c06003
feat: archive reminder ( #9779 )
2025-04-16 15:47:35 +02:00
Mateusz Kwasniewski
bf8a9b31b3
feat: cleanup reminder ( #9776 )
2025-04-16 15:01:07 +02:00
David Leek
ab594f5c29
feat: move admin menu into nav sidebar ( #9774 )
2025-04-16 14:58:37 +02:00
Nuno Góis
86cfb2f651
fix: demo flow step 4 is too eager on add strategy ( #9771 )
...
https://linear.app/unleash/issue/2-3512/bug-flow-2-enable-for-a-specific-user-doesnt-work
https://linear.app/unleash/issue/2-3513/bug-flow-4-adjust-variants-doesnt-work
Follow-up to #9770
This "add strategy" step of `demoApp.step4` was a bit too eager and did
not properly wait for the accordion to be fully expanded. This change
makes it consistent with the same step in `demoApp.step2`, also
improving its "back" behavior.
2025-04-16 13:14:31 +01:00
Melinda Fekete
aabb364415
docs: Update hosting strategies page ( #9729 )
2025-04-16 12:42:39 +02:00
Nuno Góis
fa4b09ffe5
fix: demo flow consistency with new flag page ( #9770 )
...
https://linear.app/unleash/issue/2-3512/bug-flow-2-enable-for-a-specific-user-doesnt-work
https://linear.app/unleash/issue/2-3513/bug-flow-4-adjust-variants-doesnt-work
Follow-up to #9765
This should make the demo flow a bit more consistent with the new page
design.
The page seems a bit slower in general, so we're being a bit more
aggressive on the cleaning up of demo data to make it faster as well as
adding some delays in key steps of the flow.
2025-04-16 11:35:02 +01:00
Mateusz Kwasniewski
695c50b7d6
chore: cleanup reminder flag ( #9769 )
2025-04-16 11:25:50 +02:00
Jaanus Sellin
187f265680
feat: add values button now actually adds value ( #9768 )
2025-04-16 11:52:36 +03:00
Jaanus Sellin
e9c50a551f
feat: remove add values for legal values ( #9767 )
...
This removes the add values nicely.
2025-04-16 11:06:46 +03:00
Thomas Heartman
c1bb905146
Fix type issues ( #9745 )
2025-04-16 10:36:29 +03:00
dependabot[bot]
4d100e3237
chore(deps): bump estree-util-value-to-estree from 3.2.1 to 3.3.3 in /website ( #9711 )
2025-04-15 19:37:42 +02:00
dependabot[bot]
6af36288ab
chore(deps-dev): bump vite from 5.4.16 to 5.4.18 in /frontend ( #9766 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite )
from 5.4.16 to 5.4.18.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v5.4.18</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.18/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.17</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.17/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v5.4.18/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->5.4.18 (2025-04-10)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19830 ">#19830</a>,
reject requests with <code>#</code> in request-target (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19831 ">#19831</a>)
(<a
href="823675baffhttps://redirect.github.com/vitejs/vite/issues/19830 ">#19830</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/19831 ">#19831</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.17 (2025-04-03)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19784 ">#19784</a>)
(<a
href="84b2b46ed1https://redirect.github.com/vitejs/vite/issues/19782 ">#19782</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/19784 ">#19784</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="731b77d19d823675baffhttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19830 ">#19830</a>,
reject requests with <code>#</code> in request-target (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19831 ">#19831</a>)</li>
<li><a
href="0a2518a98d84b2b46ed1https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19784 ">#19784</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v5.4.18/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Unleash/unleash/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-15 19:36:22 +02:00
Nuno Góis
1d94c261e6
fix: demo topics should work with new flag design ( #9765 )
...
https://linear.app/unleash/issue/2-3512/bug-flow-2-enable-for-a-specific-user-doesnt-work
https://linear.app/unleash/issue/2-3513/bug-flow-4-adjust-variants-doesnt-work
Fixes our demo topics by making them work with the new flag page design.
We achieve this by adding 2 new interactive steps in `demoApp.step2` and
`demoApp.step4` to expand the respective environment accordions. We mark
them as optional so they are not strictly required and will be skipped
if not found. This means the demo will be resilient to rolling back the
`flagOverviewRedesign` flag, for example.
We also mark 2 steps as optional: saving constraints in `demoApp.step2`
and `demoApp.step4`. It seems like we no longer have an extra button to
save the constraints after adding them, so by marking these steps as
optional the demo flow is able to proceed without breaking.
2025-04-15 16:18:33 +01:00
Gastón Fournier
713c5560a8
chore: fix coverage report ( #9695 )
2025-04-15 16:25:25 +02:00
Mateusz Kwasniewski
67d59d6141
chore: aggregate daily metrics query time instrumentation ( #9764 )
2025-04-15 14:52:03 +02:00
Tymoteusz Czech
06ade698e3
fix: search page filtered placeholder ( #9763 )
...
It's weird that we encourage to create new flags in the cleanup stage
2025-04-15 14:29:50 +02:00
Mateusz Kwasniewski
6396da3e77
fix: improve health rating job performance ( #9761 )
2025-04-15 14:20:26 +02:00
Tymoteusz Czech
3fd74262bb
feat: search page - improved change request tooltip ( #9750 )
...
improved and tested tooltip for change requests and adjusted column width
2025-04-15 13:22:50 +02:00
Jaanus Sellin
01c1ec5c29
feat: strategy status as checkbox ( #9760 )
2025-04-15 13:11:11 +03:00
Ivar Conradi Østhus
a6c2cef71a
Revert "fix: use unleash to enable frontend SDK with token via varian… ( #9759 )
2025-04-15 09:01:51 +00:00
Christopher Kolstad
8380a7a532
fix(frontend): Now only shows average daily requests when viewing daily ( #9758 )
...
As reported by Ivar, there's no point in displaying the average daily
traffic when grouping monthly.
2025-04-15 08:38:56 +00:00
Melinda Fekete
fd7fb158fb
docs: Add missing Edge pages to autogenerated docs ( #9737 )
2025-04-15 10:37:05 +02:00
Nuno Góis
2c1ec41a07
fix: demo QR code ( #9756 )
...
https://linear.app/unleash/issue/CJUX-340/bug-qr-code-doesnt-work
Generated a new QR code using
[qrcode-monkey.com](https://www.qrcode-monkey.com/ ), following a similar
design to our previous one.
Unlike the previous QR generator, this one does **not** proxy the URL—so
the QR code will never break in the future. It’s also in SVG format,
allowing for infinite scaling without quality loss.
2025-04-15 09:06:25 +01:00
Mateusz Kwasniewski
0efa2585fe
fix: improve status job performance ( #9755 )
2025-04-15 09:33:13 +02:00
Ivar Conradi Østhus
fc40a4b4d8
fix: use unleash to enable frontend SDK with token via variant ( #9757 )
2025-04-15 09:27:54 +02:00
Mateusz Kwasniewski
9a25664a83
refactor: move batch execute to oss ( #9754 )
2025-04-14 15:33:02 +02:00
Mateusz Kwasniewski
e6d55ab17a
feat: display total count ( #9753 )
2025-04-14 14:30:21 +02:00
Jaanus Sellin
5b52a6e8d1
feat: predefined values more organized ( #9752 )
2025-04-14 14:22:32 +03:00
Mateusz Kwasniewski
ff3c17ffa7
refactor: extract flags overview sql builders ( #9751 )
2025-04-14 10:56:28 +02:00
Tymoteusz Czech
417d3b80a4
feat: search page flag status with change requests ( #9744 )
2025-04-14 09:51:09 +02:00
Tymoteusz Czech
1b7cf6d97d
chore: update api types in frontend ( #9748 )
...
Get backend changes into frontend types
2025-04-11 20:00:09 +02:00
Mateusz Kwasniewski
e003c10e94
docs: ADR correct type dependencies ( #9749 )
2025-04-11 14:49:51 +02:00
Jaanus Sellin
3b96bfb4ff
feat: description for stickiness selector ( #9746 )
2025-04-11 15:01:15 +03:00
Mateusz Kwasniewski
b2471633b4
refactor: move release plan stores to OSS ( #9747 )
2025-04-11 11:37:06 +02:00
Thomas Heartman
e9ec1db3b7
chore(1-3611): inline values list v1 ( #9743 )
...
Adds the easy parts of the inline values list: a list of chips that
shows you which values you have and that you can delete. You either
delete them by clicking the "clear" icon or by using del/backspace on
your keyboard.
If you use your keyboard we also handle switching your focus to the
appropriate element. By default, your browser may shift the focus to the
top of the window (which isn't very helpful). Instead, we handle it like
this:
- If you delete an item and there are more elements in the list:
- move the element to the next item if exists
- if your element is the last item, move focus to the previous item
- if there are no more items in the list, move the focus to the Add
Values button
We still need to add the "add values" popover functionality. That's next
on the agenda.
Additionally, this switches how the containing flex container positions
its items along the cross axis (vertically) to "flex-start" instead of
"center". Because the values list can grow to multiple lines, it would
shift the "delete constraint" button and the constraint picker to the
middle of the expanded constraint. Now, instead they stay aligned to the
top. This causes a slight alignment issue with the button (due to the
invisible padding), but I don't want to look at that before the rest of
this is complete and we know how it all fits together. You'll notice
that the spacing between elements in that top row is also off anyway
(look at the value list being smushed up against the case sensitive
icon), so there's more work to do.
<img width="716" alt="image"
src="https://github.com/user-attachments/assets/225fcab8-03e4-46e3-92d4-82912eb40d46 "
/>
Focus styles:
<img width="190" alt="image"
src="https://github.com/user-attachments/assets/6b07ab25-0a67-493c-9cac-839932b0d654 "
/>
<img width="195" alt="image"
src="https://github.com/user-attachments/assets/9d5b323e-bf65-4eca-9008-a45ce0139a2b "
/>
Hover styles:
<img width="96" alt="image"
src="https://github.com/user-attachments/assets/f19e1945-d2be-4e87-8005-76cb6beb1f50 "
/>
2025-04-10 15:50:51 +02:00
Github Actions Bot
57b1f406bc
6.9.1
2025-04-10 12:48:12 +00:00
Github Actions Bot
a80b65cd56
docs: Update CHANGELOG.md
2025-04-10 12:48:00 +00:00
Nuno Góis
8313f15281
docs: add Go impression data support ( #9728 )
...
https://linear.app/unleash/issue/2-3494/go-sdk-impression-event-support
Adds Go impression data support.
See: https://github.com/Unleash/unleash-client-go/pull/194
2025-04-10 11:52:27 +01:00
Tymoteusz Czech
1043eb8f03
feat: flag lifecycle status - first pass ( #9736 )
...
Resolving "status" column for flags overview page
2025-04-10 12:02:25 +02:00
Jaanus Sellin
67c0ffa1ab
feat: segment chip recoloring ( #9742 )
2025-04-10 12:51:09 +03:00
Jaanus Sellin
5d64d0ff4b
feat: styling of info box for release plans ( #9741 )
2025-04-10 12:22:07 +03:00
Ivar Conradi Østhus
3f5f43933a
fix: flag-resolver context type
2025-04-10 10:44:18 +02:00
Mateusz Kwasniewski
8f117ac18e
feat: add milestones to search results ( #9739 )
2025-04-10 10:25:39 +02:00
