renovate[bot]
6b1dabbc71
chore(deps): update dependency @swc/core to v1.3.67 ( #4169 )
...
[](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@swc/core](https://swc.rs )
([source](https://togithub.com/swc-project/swc )) | [`1.3.66` ->
`1.3.67`](https://renovatebot.com/diffs/npm/@swc%2fcore/1.3.66/1.3.67 ) |
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>swc-project/swc (@​swc/core)</summary>
###
[`v1.3.67`](https://togithub.com/swc-project/swc/blob/HEAD/CHANGELOG.md#1367---2023-06-29 )
[Compare
Source](https://togithub.com/swc-project/swc/compare/v1.3.66...v1.3.67 )
##### Bug Fixes
- **(es/minifier)** Don't drop assignments to unused top-level variables
([#​7581](https://togithub.com/swc-project/swc/issues/7581 ))
([a685c88](a685c88c61https://togithub.com/swc-project/swc/issues/7582 ))
([9d5dda1](9d5dda1299https://togithub.com/swc-project/swc/issues/7565 ))
([d86f8f6](d86f8f6a3chttps://togithub.com/swc-project/swc/issues/7532 ))
([3ad07a7](3ad07a7d2ehttps://togithub.com/swc-project/swc/issues/7535 ))
([07a8580](07a858030chttps://togithub.com/swc-project/swc/issues/7583 ))
([398e922](398e922ca0https://togithub.com/swc-project/swc/issues/7576 ))
([ab7b17c](ab7b17cf10https://togithub.com/swc-project/swc/issues/7590 ))
([9512ea3](9512ea31ffhttps://togithub.com/swc-project/swc/issues/7552 ))
([46fb461](46fb4619bahttps://togithub.com/swc-project/swc/issues/7560 ))
([c8d9338](c8d9338583https://togithub.com/swc-project/swc/issues/7533 ))
([724e75d](724e75d256https://togithub.com/swc-project/swc/issues/7589 ))
([c51eac6](c51eac6075https://togithub.com/swc-project/swc/issues/7571 ))
([95ac74e](95ac74e6e4https://togithub.com/swc-project/swc/issues/7564 ))
([d12dc70](d12dc70c91https://togithub.com/swc-project/swc/issues/7566 ))
([d57d0d3](d57d0d3ad3https://togithub.com/swc-project/swc/issues/7557 ))
([544100454410047fa📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNTkuNyIsInVwZGF0ZWRJblZlciI6IjM1LjE1OS43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-06 14:43:24 +00:00
Mateusz Kwasniewski
02fea44956
fix: initial playground env ( #4167 )
2023-07-06 16:04:33 +02:00
renovate[bot]
94bfa025c0
chore(deps): update dependency sass to v1.63.6 ( #4155 )
...
[](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [sass](https://togithub.com/sass/dart-sass ) | [`1.63.5` ->
`1.63.6`](https://renovatebot.com/diffs/npm/sass/1.63.5/1.63.6 ) |
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>sass/dart-sass (sass)</summary>
###
[`v1.63.6`](https://togithub.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1636 )
[Compare
Source](https://togithub.com/sass/dart-sass/compare/1.63.5...1.63.6 )
##### JavaScript API
- Fix `import sass from 'sass'` again after it was broken in the last
release.
##### Embedded Sass
- Fix the `exports` declaration in `package.json`.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNDQuMiIsInVwZGF0ZWRJblZlciI6IjM1LjE1OS43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-06 13:57:47 +00:00
Simon Hornby
79dd508485
fix: project tokens can now be created with the correct permissions ( #4165 )
2023-07-06 15:47:03 +02:00
Mateusz Kwasniewski
d7b7d93533
feat: user openapi spec ( #4162 )
2023-07-06 15:27:43 +02:00
Thomas Heartman
46b4030d47
bug: mark descriptions on strategies as nullable ( #4156 )
...
This was omitted by mistake.
Fixes 1-1086
2023-07-06 13:39:23 +02:00
Nuno Góis
0dec24722d
fix: disallow deletion of all login history entries ( #4159 )
...
https://linear.app/unleash/issue/2-1191/disallow-deletion-of-all-login-entries-in-history-ui
Disallows deletion of all login history entries on the UI.
2023-07-06 12:19:48 +01:00
Christopher Kolstad
e22662e140
fix: add change-edited event
2023-07-06 13:11:09 +02:00
Christopher Kolstad
7130270058
fix: added service-account events ( #4164 )
...
We're using this in enterprise as well, so we need to add events that
could happen there as well.
2023-07-06 10:51:32 +00:00
Thomas Heartman
d49626133e
tests: don't use multiple expect.stringContaining in one statement ( #4158 )
...
Apparently Jest doesn't like it when you use multiple stringContaining
statements for one property. Only the last `stringContaining`
statement is evaluated while the others are ignored.
This means that a lot of these assertions were never checked. To fix
that, I've extracted them into separate assertions.
2023-07-06 11:09:59 +02:00
Christopher Kolstad
b04545c25f
docs: Events tag ( #4152 )
...
### What
This PR adds documentation for our endpoints that are covered by our
"Events" tag. It also adds a type for all valid events, and then uses
this as valid values for type argument.
2023-07-06 08:57:09 +00:00
Gastón Fournier
51ffe02cfd
fix: update yarn.lock ( #4160 )
...
## About the changes
Update yarn.lock
2023-07-06 08:53:43 +00:00
Gastón Fournier
05c6f42f7b
fix: avoid expression injection ( #4157 )
...
## About the changes
Using toJSON should escape any potentially harmful content from the
username and email input
2023-07-06 07:52:50 +00:00
Nuno Góis
dd32e8ae0d
fix: disallow deletion of single login history entries ( #4149 )
...
https://linear.app/unleash/issue/2-1185/disallow-deletion-of-single-login-entries-in-history-ui
Disallows deletion of single login history entries on the UI.
2023-07-06 08:36:26 +01:00
Thomas Heartman
6d591fcd17
openapi: update API tokens tag ( #4137 )
...
This PR updates endpoints and schemas for the API tokens tag.
As part of that, they also handle oneOf openapi validation errors and improve the console output for the enforcer tests.
2023-07-06 07:30:31 +00:00
Ivar Conradi Østhus
9249f7459c
fix: add resolution for semver
2023-07-06 09:22:51 +02:00
Thomas Heartman
b65bfaa52f
chore: remove OpenAPI snapshot tests ( #4153 )
...
Background (general): I don’t think it creates any value. I don’t think
people check the snapshot explicitly (especially now that it’s so large
that it gets hidden by default), and it only creates an extra chore that
you forget to do all the time (at least I do).
Background (why now?): I’ve been fighting a weird issue with the
snapshot test for the [API tokens OpenAPI
PR](https://github.com/Unleash/unleash/pull/4137 ). The tests run fine
locally, but fail in CI. The tests seem to be using an old version of
the snapshot for the test. However, when I check the snapshot in the
files tab, it’s got the new and correct values. I’ve spent probably more
than an hour trying to fix and debug this today but to no avail.
2023-07-06 10:16:27 +03:00
Mateusz Kwasniewski
79b34121a4
feat: openapi schema for user admin ( #4146 )
2023-07-06 08:24:46 +02:00
renovate[bot]
5dc560f911
chore(deps): update dependency lint-staged to v13.2.3 ( #4154 )
...
[](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [lint-staged](https://togithub.com/okonet/lint-staged ) | [`13.2.2` ->
`13.2.3`](https://renovatebot.com/diffs/npm/lint-staged/13.2.2/13.2.3 ) |
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>okonet/lint-staged (lint-staged)</summary>
###
[`v13.2.3`](https://togithub.com/okonet/lint-staged/releases/tag/v13.2.3 )
[Compare
Source](https://togithub.com/okonet/lint-staged/compare/v13.2.2...v13.2.3 )
##### Bug Fixes
- the `--diff` option implies `--no-stash`
([66a716d](66a716d5a3📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNDQuMiIsInVwZGF0ZWRJblZlciI6IjM1LjE0NC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-05 18:17:32 +00:00
renovate[bot]
006317bdc6
chore(deps): update dependency @uiw/react-codemirror to v4.21.7 ( #4151 )
...
[](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@uiw/react-codemirror](https://uiwjs.github.io/react-codemirror )
([source](https://togithub.com/uiwjs/react-codemirror )) | [`4.21.3` ->
`4.21.7`](https://renovatebot.com/diffs/npm/@uiw%2freact-codemirror/4.21.3/4.21.7 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>uiwjs/react-codemirror (@​uiw/react-codemirror)</summary>
###
[`v4.21.7`](https://togithub.com/uiwjs/react-codemirror/releases/tag/v4.21.7 )
[Compare
Source](https://togithub.com/uiwjs/react-codemirror/compare/v4.21.6...v4.21.7 )
[](https://uiwjs.github.io/npm-unpkg/#/pkg/@​uiw/react-codemirror@4.21.7/file/README.md )
Documentation v4.21.7:
https://raw.githack.com/uiwjs/react-codemirror/89f5d3c/index.html \
Comparing Changes:
https://github.com/uiwjs/react-codemirror/compare/v4.21.6...v4.21.7
```shell
npm i @​uiw/react-codemirror@4.21.7
```
- 🎨 style(hyper-link): add mark hyper link underline style.
([#​525](https://togithub.com/uiwjs/react-codemirror/issues/525 ))
[`f59224c`](https://togithub.com/uiwjs/react-codemirror/commit/f59224c )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
###
[`v4.21.6`](https://togithub.com/uiwjs/react-codemirror/releases/tag/v4.21.6 )
[Compare
Source](https://togithub.com/uiwjs/react-codemirror/compare/v4.21.5...v4.21.6 )
[](https://uiwjs.github.io/npm-unpkg/#/pkg/@​uiw/react-codemirror@4.21.6/file/README.md )
Documentation v4.21.6:
https://raw.githack.com/uiwjs/react-codemirror/a1c9fc0/index.html \
Comparing Changes:
https://github.com/uiwjs/react-codemirror/compare/v4.21.5...v4.21.6
```shell
npm i @​uiw/react-codemirror@4.21.6
```
- 📖 doc: Update README.md
[`4d9890c`](https://togithub.com/uiwjs/react-codemirror/commit/4d9890c )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
- 🌟 feat(hyper-link): the callback function adds more params `(value,
input, from, to) => {}`.
[`ab58f5f`](https://togithub.com/uiwjs/react-codemirror/commit/ab58f5f )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
###
[`v4.21.5`](https://togithub.com/uiwjs/react-codemirror/releases/tag/v4.21.5 )
[Compare
Source](https://togithub.com/uiwjs/react-codemirror/compare/v4.21.4...v4.21.5 )
[](https://uiwjs.github.io/npm-unpkg/#/pkg/@​uiw/react-codemirror@4.21.5/file/README.md )
Documentation v4.21.5:
https://raw.githack.com/uiwjs/react-codemirror/a2ba8e9/index.html \
Comparing Changes:
https://github.com/uiwjs/react-codemirror/compare/v4.21.4...v4.21.5
```shell
npm i @​uiw/react-codemirror@4.21.5
```
- 📖 doc(zebra-stripes): fix doc package name error of
extensions/zebra-stripes
([#​526](https://togithub.com/uiwjs/react-codemirror/issues/526 ))
[`194e2ee`](https://togithub.com/uiwjs/react-codemirror/commit/194e2ee )
[@​gsw945](https://togithub.com/gsw945 )
- 🌟 feat(hyper-link): add `anchor` options.
([#​525](https://togithub.com/uiwjs/react-codemirror/issues/525 ))
[`097ad2e`](https://togithub.com/uiwjs/react-codemirror/commit/097ad2e )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
###
[`v4.21.4`](https://togithub.com/uiwjs/react-codemirror/releases/tag/v4.21.4 )
[Compare
Source](https://togithub.com/uiwjs/react-codemirror/compare/v4.21.3...v4.21.4 )
[](https://uiwjs.github.io/npm-unpkg/#/pkg/@​uiw/react-codemirror@4.21.4/file/README.md )
Documentation v4.21.4:
https://raw.githack.com/uiwjs/react-codemirror/faa6117/index.html \
Comparing Changes:
https://github.com/uiwjs/react-codemirror/compare/v4.21.3...v4.21.4
```shell
npm i @​uiw/react-codemirror@4.21.4
```
- 🌟 feat(hyper-link): add regexp/match/handle options.
([#​525](https://togithub.com/uiwjs/react-codemirror/issues/525 ))
[`4b356ab`](https://togithub.com/uiwjs/react-codemirror/commit/4b356ab )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNDQuMiIsInVwZGF0ZWRJblZlciI6IjM1LjE0NC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-05 15:16:41 +00:00
renovate[bot]
550f256922
chore(deps): update dependency @uiw/codemirror-theme-duotone to v4.21.7 ( #4150 )
...
[](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[@uiw/codemirror-theme-duotone](https://uiwjs.github.io/react-codemirror/#/theme/data/duotone/light )
([source](https://togithub.com/uiwjs/react-codemirror )) | [`4.21.3` ->
`4.21.7`](https://renovatebot.com/diffs/npm/@uiw%2fcodemirror-theme-duotone/4.21.3/4.21.7 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>uiwjs/react-codemirror
(@​uiw/codemirror-theme-duotone)</summary>
###
[`v4.21.7`](https://togithub.com/uiwjs/react-codemirror/releases/tag/v4.21.7 )
[Compare
Source](https://togithub.com/uiwjs/react-codemirror/compare/v4.21.6...v4.21.7 )
[](https://uiwjs.github.io/npm-unpkg/#/pkg/@​uiw/react-codemirror@4.21.7/file/README.md )
Documentation v4.21.7:
https://raw.githack.com/uiwjs/react-codemirror/89f5d3c/index.html \
Comparing Changes:
https://github.com/uiwjs/react-codemirror/compare/v4.21.6...v4.21.7
```shell
npm i @​uiw/react-codemirror@4.21.7
```
- 🎨 style(hyper-link): add mark hyper link underline style.
([#​525](https://togithub.com/uiwjs/react-codemirror/issues/525 ))
[`f59224c`](https://togithub.com/uiwjs/react-codemirror/commit/f59224c )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
###
[`v4.21.6`](https://togithub.com/uiwjs/react-codemirror/releases/tag/v4.21.6 )
[Compare
Source](https://togithub.com/uiwjs/react-codemirror/compare/v4.21.5...v4.21.6 )
[](https://uiwjs.github.io/npm-unpkg/#/pkg/@​uiw/react-codemirror@4.21.6/file/README.md )
Documentation v4.21.6:
https://raw.githack.com/uiwjs/react-codemirror/a1c9fc0/index.html \
Comparing Changes:
https://github.com/uiwjs/react-codemirror/compare/v4.21.5...v4.21.6
```shell
npm i @​uiw/react-codemirror@4.21.6
```
- 📖 doc: Update README.md
[`4d9890c`](https://togithub.com/uiwjs/react-codemirror/commit/4d9890c )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
- 🌟 feat(hyper-link): the callback function adds more params `(value,
input, from, to) => {}`.
[`ab58f5f`](https://togithub.com/uiwjs/react-codemirror/commit/ab58f5f )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
###
[`v4.21.5`](https://togithub.com/uiwjs/react-codemirror/releases/tag/v4.21.5 )
[Compare
Source](https://togithub.com/uiwjs/react-codemirror/compare/v4.21.4...v4.21.5 )
[](https://uiwjs.github.io/npm-unpkg/#/pkg/@​uiw/react-codemirror@4.21.5/file/README.md )
Documentation v4.21.5:
https://raw.githack.com/uiwjs/react-codemirror/a2ba8e9/index.html \
Comparing Changes:
https://github.com/uiwjs/react-codemirror/compare/v4.21.4...v4.21.5
```shell
npm i @​uiw/react-codemirror@4.21.5
```
- 📖 doc(zebra-stripes): fix doc package name error of
extensions/zebra-stripes
([#​526](https://togithub.com/uiwjs/react-codemirror/issues/526 ))
[`194e2ee`](https://togithub.com/uiwjs/react-codemirror/commit/194e2ee )
[@​gsw945](https://togithub.com/gsw945 )
- 🌟 feat(hyper-link): add `anchor` options.
([#​525](https://togithub.com/uiwjs/react-codemirror/issues/525 ))
[`097ad2e`](https://togithub.com/uiwjs/react-codemirror/commit/097ad2e )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
###
[`v4.21.4`](https://togithub.com/uiwjs/react-codemirror/releases/tag/v4.21.4 )
[Compare
Source](https://togithub.com/uiwjs/react-codemirror/compare/v4.21.3...v4.21.4 )
[](https://uiwjs.github.io/npm-unpkg/#/pkg/@​uiw/react-codemirror@4.21.4/file/README.md )
Documentation v4.21.4:
https://raw.githack.com/uiwjs/react-codemirror/faa6117/index.html \
Comparing Changes:
https://github.com/uiwjs/react-codemirror/compare/v4.21.3...v4.21.4
```shell
npm i @​uiw/react-codemirror@4.21.4
```
- 🌟 feat(hyper-link): add regexp/match/handle options.
([#​525](https://togithub.com/uiwjs/react-codemirror/issues/525 ))
[`4b356ab`](https://togithub.com/uiwjs/react-codemirror/commit/4b356ab )
[@​jaywcjlove](https://togithub.com/jaywcjlove )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNDQuMiIsInVwZGF0ZWRJblZlciI6IjM1LjE0NC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-05 13:14:24 +00:00
Simon Hornby
b0e4c8a57e
chore: remove group root role toggle ( #4026 )
2023-07-05 14:33:33 +02:00
Christopher Kolstad
9f5b7b610a
chore: add paths-ignore to more workflows ( #4041 )
...
### What
To reduce the work needed, this PR adds paths-ignore to avoid building
unnecessary workflows.
Co-authored-by: Gastón Fournier <gaston@getunleash.io>
2023-07-05 14:29:37 +02:00
renovate[bot]
d104571b20
chore(deps): update dependency @types/node to v16.18.37 ( #4148 )
...
[](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[@types/node](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node )
([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped )) |
[`16.18.36` ->
`16.18.37`](https://renovatebot.com/diffs/npm/@types%2fnode/16.18.36/16.18.37 )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNDQuMiIsInVwZGF0ZWRJblZlciI6IjM1LjE0NC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-05 12:23:49 +00:00
Gastón Fournier
1f7a948f6d
chore: avoids code injection through git commit ( #4147 )
...
## About the changes
Avoids code injection via the committer name or email
Also removes pushing to s3 on `main` folder as it's not used and we're
already pushing to `commits` folder
2023-07-05 13:35:12 +02:00
renovate[bot]
321265e0ed
chore(deps): update dependency got to v13 ( #3952 )
...
[](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [got](https://togithub.com/sindresorhus/got ) | [`^11.8.5` ->
`^13.0.0`](https://renovatebot.com/diffs/npm/got/11.8.6/13.0.0 ) |
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>sindresorhus/got</summary>
###
[`v13.0.0`](https://togithub.com/sindresorhus/got/releases/tag/v13.0.0 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.6.1...v13.0.0 )
As a reminder, Got continues to require ESM. For TypeScript users, this
includes having [`"module": "node16", "moduleResolution": "node16"` in
your
tsconfig](https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c#how-can-i-make-my-typescript-project-output-esm ).
##### Breaking
- Require Node.js 16
[`52a1063`](https://togithub.com/sindresorhus/got/commit/52a1063 )
- Change the
[`enableUnixSockets`](https://togithub.com/sindresorhus/got/blob/main/documentation/2-options.md#enableunixsockets )
option to be `false` by default
[`852c312`](https://togithub.com/sindresorhus/got/commit/852c312 )
- Most users don't need it.
##### Improvements
- Allow specifying `undefined` for options
([#​2258](https://togithub.com/sindresorhus/got/issues/2258 ))
[`1cefe8b`](https://togithub.com/sindresorhus/got/commit/1cefe8b )
###
[`v12.6.1`](https://togithub.com/sindresorhus/got/releases/tag/v12.6.1 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.6.0...v12.6.1 )
- Fix `get-stream` import statement
([#​2266](https://togithub.com/sindresorhus/got/issues/2266 ))
[`67d5039`](https://togithub.com/sindresorhus/got/commit/67d5039 )
###
[`v12.6.0`](https://togithub.com/sindresorhus/got/releases/tag/v12.6.0 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.5.3...v12.6.0 )
- Update dependencies
[`88c88fb`](https://togithub.com/sindresorhus/got/commit/88c88fb )
[`979272e`](https://togithub.com/sindresorhus/got/commit/979272e )
- Loosen URL validation strictness
([#​2200](https://togithub.com/sindresorhus/got/issues/2200 ))
[`0ca0b7f`](https://togithub.com/sindresorhus/got/commit/0ca0b7f )
###
[`v12.5.3`](https://togithub.com/sindresorhus/got/releases/tag/v12.5.3 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.5.2...v12.5.3 )
- Fix abort event listeners not always being cleaned up
([#​2162](https://togithub.com/sindresorhus/got/issues/2162 ))
[`3cc40b5`](https://togithub.com/sindresorhus/got/commit/3cc40b5 )
###
[`v12.5.2`](https://togithub.com/sindresorhus/got/releases/tag/v12.5.2 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.5.1...v12.5.2 )
- Improve TypeScript 4.9 compatibility
([#​2163](https://togithub.com/sindresorhus/got/issues/2163 ))
[`39f83b6`](https://togithub.com/sindresorhus/got/commit/39f83b6 )
###
[`v12.5.1`](https://togithub.com/sindresorhus/got/releases/tag/v12.5.1 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.5.0...v12.5.1 )
- Fix compatibility with TypeScript and ESM
[`3b3ea67`](https://togithub.com/sindresorhus/got/commit/3b3ea67 )
- Fix request body not being properly cached
([#​2150](https://togithub.com/sindresorhus/got/issues/2150 ))
[`3e9d3af`](https://togithub.com/sindresorhus/got/commit/3e9d3af )
###
[`v12.5.0`](https://togithub.com/sindresorhus/got/releases/tag/v12.5.0 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.4.1...v12.5.0 )
- Disable method rewriting on 307 and 308 status codes
([#​2145](https://togithub.com/sindresorhus/got/issues/2145 ))
[`e049e94`](https://togithub.com/sindresorhus/got/commit/e049e94 )
- Upgrade dependencies
[`8630815`](https://togithub.com/sindresorhus/got/commit/8630815 )
[`f0ac0b3`](https://togithub.com/sindresorhus/got/commit/f0ac0b3 )
[`4c3762a`](https://togithub.com/sindresorhus/got/commit/4c3762a )
###
[`v12.4.1`](https://togithub.com/sindresorhus/got/releases/tag/v12.4.1 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.4.0...v12.4.1 )
##### Fixes
- Fix `options.context` being not extensible
[`b671480`](b671480715693de217b0https://togithub.com/sindresorhus/got/releases/tag/v12.4.0 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.3.1...v12.4.0 )
##### Improvements
- Support FormData without known length
([#​2120](https://togithub.com/sindresorhus/got/issues/2120 ))
[`850773c`](https://togithub.com/sindresorhus/got/commit/850773c )
##### Fixes
- Don't call `beforeError` hooks with `HTTPError` if the
`throwHttpErrors` option is `false`
([#​2104](https://togithub.com/sindresorhus/got/issues/2104 ))
[`3927348`](https://togithub.com/sindresorhus/got/commit/3927348 )
###
[`v12.3.1`](https://togithub.com/sindresorhus/got/releases/tag/v12.3.1 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.3.0...v12.3.1 )
- Don't freeze signal when freezing Options
([#​2100](https://togithub.com/sindresorhus/got/issues/2100 ))
[`43b1467`](https://togithub.com/sindresorhus/got/commit/43b1467 )
###
[`v12.3.0`](https://togithub.com/sindresorhus/got/releases/tag/v12.3.0 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.2.0...v12.3.0 )
- Add `.off()` method for events
([#​2092](https://togithub.com/sindresorhus/got/issues/2092 ))
[`88056be`](https://togithub.com/sindresorhus/got/commit/88056be )
###
[`v12.2.0`](https://togithub.com/sindresorhus/got/releases/tag/v12.2.0 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.1.0...v12.2.0 )
- [Support
`AbortController`](https://togithub.com/sindresorhus/got/blob/main/documentation/2-options.md#signal )
([#​2020](https://togithub.com/sindresorhus/got/issues/2020 ))
[`6a6d2a9`](https://togithub.com/sindresorhus/got/commit/6a6d2a9 )
- Add
[`enableUnixSockets`](https://togithub.com/sindresorhus/got/blob/main/documentation/2-options.md#enableunixsockets )
option
([#​2062](https://togithub.com/sindresorhus/got/issues/2062 ))
[`461b3d4`](https://togithub.com/sindresorhus/got/commit/461b3d4 )
###
[`v12.1.0`](https://togithub.com/sindresorhus/got/releases/tag/v12.1.0 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.0.4...v12.1.0 )
##### Improvements
- Add `response.ok`
([#​2043](https://togithub.com/sindresorhus/got/issues/2043 ))
[`22d58fb`](https://togithub.com/sindresorhus/got/commit/22d58fb )
- This is only useful if you have [`{throwHttpErrors:
false}`](https://togithub.com/sindresorhus/got/blob/main/documentation/2-options.md#throwhttperrors )
##### Fixes
- Do not redirect to UNIX sockets
([#​2047](https://togithub.com/sindresorhus/got/issues/2047 ))
[`861ccd9`](https://togithub.com/sindresorhus/got/commit/861ccd9 )
- [CVE-2022-33987](https://nvd.nist.gov/vuln/detail/CVE-2022-33987 )
- [Also back ported to
v11](https://togithub.com/sindresorhus/got/releases/tag/v11.8.5 )
###
[`v12.0.4`](https://togithub.com/sindresorhus/got/releases/tag/v12.0.4 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.0.3...v12.0.4 )
- Remove stream lock - unreliable since Node 17.3.0
[`bb8eca9`](bb8eca924chttps://togithub.com/sindresorhus/got/releases/tag/v12.0.3 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.0.2...v12.0.3 )
- Allow more types in the `json` option
([#​2015](https://togithub.com/sindresorhus/got/issues/2015 ))
[`eb045bf`](https://togithub.com/sindresorhus/got/commit/eb045bf )
###
[`v12.0.2`](https://togithub.com/sindresorhus/got/releases/tag/v12.0.2 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.0.1...v12.0.2 )
- Fix `encoding` option with `{responseType: 'json'}`
([#​1996](https://togithub.com/sindresorhus/got/issues/1996 ))
[`0703318`](https://togithub.com/sindresorhus/got/commit/0703318 )
###
[`v12.0.1`](https://togithub.com/sindresorhus/got/releases/tag/v12.0.1 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v12.0.0...v12.0.1 )
- Fix `nock` compatibility
([#​1959](https://togithub.com/sindresorhus/got/issues/1959 ))
[`bf39d2c`](https://togithub.com/sindresorhus/got/commit/bf39d2c )
- Fix missing export of `Request` TypeScript type
([#​1940](https://togithub.com/sindresorhus/got/issues/1940 ))
[`0f9f2b8`](https://togithub.com/sindresorhus/got/commit/0f9f2b8 )
###
[`v12.0.0`](https://togithub.com/sindresorhus/got/releases/tag/v12.0.0 )
[Compare
Source](https://togithub.com/sindresorhus/got/compare/v11.8.6...v12.0.0 )
##### Introducing Got v12.0.0 🎉
Long time no see! The latest Got version (v11.8.2) was released just in
February ❄️
We have been working hard on squashing bugs and improving overall
experience.
If you find Got useful, you might want to [sponsor the Got
maintainers](https://togithub.com/sindresorhus/got?sponsor=1 ).
##### This package is now pure ESM
**Please [read
this](https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c ).**
Also see
[https://github.com/sindresorhus/got/issues/1789 ](https://togithub.com/sindresorhus/got/issues/1789 ).
- **Please don't open issues about `[ERR_REQUIRE_ESM]` and `Must use
import to load ES Module` errors.** This is a problem with your setup,
not Got.
- Please don't open issues about using Got with Jest. Jest does not
fully support ESM.
- Pretty much any problem with loading this package is a problem with
your bundler, test framework, etc, not Got.
- If you use TypeScript, you will want to stay on Got v11 until
TypeScript 4.6 is out.
[Why.](https://togithub.com/microsoft/TypeScript/issues/46452 )
- If you use a bundler, make sure it supports ESM and that you have
correctly configured it for ESM.
- The Got issue tracker is not a support channel for your favorite
build/bundler tool.
##### Required Node.js >=14
While working with streams, we encountered more Node.js bugs that needed
workarounds.
In order to keep our code clean, we had to drop Node.js v12 as the code
would get more messy.
We strongly recommend that you update Node.js to **v14 LTS**.
##### HTTP/2 support
Every Node.js release, the native `http2` module gets more stable.
Unfortunately there are still some issues on the Node.js side, so we
decided to keep HTTP/2 disabled for now.
We may enable it by default in Got v13. It is still possible to turn it
on via the `http2` option.
To run HTTP/2 requests, it is required to use Node.js **v15.10** or
above.
##### Bug fixes
Woah, we possibly couldn't make a release if we didn't fix some bugs!
- Do not throw on custom stack traces
([#​1491](https://togithub.com/sindresorhus/got/issues/1491 ))
[`49c16ee`](49c16ee54fhttps://togithub.com/sindresorhus/got/issues/1510 ))
[`472b8ef`](472b8ef9d9https://togithub.com/sindresorhus/got/issues/1543 ))
[`ff918fb`](ff918fb6de1107cc625e51d88a0efehttps://togithub.com/sindresorhus/got/issues/1487 ))
[`462bc63`](462bc63001https://togithub.com/sindresorhus/got/issues/1492 ))
[`a59fac4`](a59fac415ahttps://togithub.com/sindresorhus/got/issues/1527 ))
[`77df9c3`](77df9c33dbhttps://togithub.com/sindresorhus/got/issues/1507 ))
[`62305d7`](62305d77d306a2d3d7d8https://togithub.com/sindresorhus/got/issues/1768 ))
[`1e1e506`](1e1e50647e9e15d887da226cc3995f3c23eea5a03c23eea5a0https://togithub.com/sindresorhus/got/issues/1574 ))
[`3c23eea`](3c23eea5a0https://togithub.com/sindresorhus/got/issues/1567 ))
[`3c23eea`](3c23eea5a0https://togithub.com/sindresorhus/got/issues/1803 ))
[`9ecc5ee`](9ecc5ee76fhttps://togithub.com/sindresorhus/got/issues/1814 ))
[`1018c20`](1018c2029e732e9bd940https://togithub.com/sindresorhus/got/issues/1737 ))
[`2453e5e`](2453e5e421439fb82d2ahttps://togithub.com/sindresorhus/got/issues/1818 ))
[`eda69ff`](eda69ff924https://togithub.com/sindresorhus/got/issues/1169 )
[#​1317](https://togithub.com/sindresorhus/got/issues/1317 ))
[`d65d0ca`](d65d0caf621c4cefc9b4https://togithub.com/sindresorhus/got/commit/cbc8902 )
- Fix `https.alpnProtocols` not having an effect
[`e1099fb`](https://togithub.com/sindresorhus/got/commit/e1099fb )
##### Improvements
- Make the `context` option mergeable
([#​1459](https://togithub.com/sindresorhus/got/issues/1459 ))
[`2b8ed1f`](2b8ed1f5a1https://togithub.com/sindresorhus/got/issues/1589 ))
[`6fc04a9`](6fc04a9b92https://togithub.com/sindresorhus/got/issues/1518 ))
[`e943672`](e9436720fchttps://github.com/nodejs/node/issues/35923 ](https://togithub.com/nodejs/node/issues/35923 ))*
- Improve the pagination API
([#​1644](https://togithub.com/sindresorhus/got/issues/1644 ))
[`2675046`](2675046a83https://togithub.com/sindresorhus/got/issues/1645 ))
[`1120370`](1120370e054f21eb3db741c4136632e83007704683575d590afe723a0477https://togithub.com/Giotino ))
- Define `error.code`
[`f27e8d3`](f27e8d33168d6a6807882db5ec5d36854430f0133df52f38ed3c23eea5a03c23eea5a03c23eea5a03c23eea5a03c23eea5a0a5dd9aa37ehttps://httpbin.org/anything ', {
thisOptionDoesNotExist: true
});
} catch (error) {
console.error(error);
console.error(error.options.url.href);
// Unexpected option: thisOptionDoesNotExist
// https://httpbin.org/anything
}
```
- The `init` hook now accepts a second argument: `self`, which points to
an `Options` instance.
In order to define your own options, you have to move them to
`options.context` in an [`init`
hook](https://togithub.com/sindresorhus/got/blob/main/documentation/lets-make-a-plugin.md#authorization )
or store them in `options.context` directly.
- The `init` hooks are ran only when passing an options object
explicitly.
```diff
- await got('https://example.com '); // this will *not* trigger the init hooks
+ await got('https://example.com ', {}); // this *will** trigger init hooks
```
- [`options.merge()`](2-options.md) replaced `got.mergeOptions` and
`Request.normalizeArguments`
```diff
- got.defaults.options = got.mergeOptions(got.defaults.options, {…});
+ got.defaults.options.merge(…);
```
This fixes issues like
[#​1450](https://togithub.com/sindresorhus/got/issues/1450 )
- Legacy `Url` instances are not supported anymore. You need to use
WHATWG URL instead.
```diff
- await got(string, {port: 8443});
+ const url = new URL(string);
+ url.port = 8443;
+ await got(url);
```
- No implicit timeout declaration.
```diff
- await got('https://example.com ', {timeout: 5000})
+ await got('https://example.com ', {timeout: {request: 5000})
```
- No implicit retry declaration.
```diff
- await got('https://example.com ', {retry: 5})
+ await got('https://example.com ', {retry: {limit: 5})
```
- `dnsLookupIpVersion` is now a number (4 or 6) or undefined
```diff
- await got('https://example.com ', {dnsLookupIpVersion: 'ipv4'})
+ await got('https://example.com ', {dnsLookupIpVersion: 4})
```
- `redirectUrls` and `requestUrl` now give URL instances
```diff
- request.requestUrl
+ request.requestUrl.origin
+ request.requestUrl.href
+ request.requestUrl.toString()
```
```diff
- request.redirectUrls[0]
+ request.redirectUrls[0].origin
+ request.redirectUrls[0].href
+ request.redirectUrls[0].toString()
```
- Renamed `request.aborted` to `request.isAborted`
```diff
- request.aborted
+ request.isAborted
```
Reason: consistency with `options.isStream`.
- Renamed the `lookup` option to `dnsLookup`
```diff
- await got('https://example.com ', {lookup: cacheable.lookup})
+ await got('https://example.com ', {dnsLookup: cacheable.lookup})
```
- The `beforeRetry` hook now accepts only two arguments: `error` and
`retryCount`
```diff
await got('https://example.com ', {
hooks: {
beforeRetry: [
- (options, error, retryCount) => {
- console.log(options, error, retryCount);
- }
+ (error, retryCount) => {
+ console.log(error.options, error, retryCount);
+ }
]
}
})
```
The `options` argument has been removed, however it's still accessible
via `error.options`. All modifications on `error.options` will be
reflected in the next requests (no behavior change, same as with Got
11).
- The `beforeRedirect` hook's first argument (options) is now a cloned
instance of the Request options.
This was done to make retrieving the original options possible:
`plainResponse.request.options`.
```diff
await got('http://szmarczak.com ', {
hooks: {
beforeRedirect: [
(options, response) => {
- console.log(options === response.request.options); //=> true [invalid! our original options were overriden]
+ console.log(options === response.request.options); //=> false [we can access the original options now]
}
]
}
})
```
- The `redirect` event now takes two arguments in this order:
`updatedOptions` and `plainResponse`.
```diff
- stream.on('redirect', (response, options) => …)
+ stream.on('redirect', (options, response) => …)
```
Reason: consistency with the `beforeRedirect` hook.
- The `socketPath` option has been removed. Use the `unix:` protocol
instead.
```diff
- got('/containers/json', {socketPath: '/var/run/docker.sock'})
+ got('unix:/var/run/docker.sock:/containers/json')
+ got('http://unix:/var/run/docker.sock:/containers/json ')
```
- The `retryWithMergedOptions` function in an `afterResponse` hook no
longer returns a `Promise`.
It now throws `RetryError`, so this should this should be the last
function being executed.
This was done to allow `beforeRetry` hooks getting called.
- You can no longer set `options.agent` to `false`.
To do so, you need to define all the `options.agent` properties: `http`,
`https` and `http2`.
```diff
await got('https://example.com ', {
- agent: false
+ agent: {
+ http: false,
+ https: false,
+ http2: false
+ }
})
```
- When passing a `url` option when paginating, it now needs to be an
absolute URL - the `prefixUrl` option is always reset from now on. The
same when retrying in an `afterResponse` hook.
```diff
- return {url: '/location'};
+ return {url: new URL('/location', response.request.options.url)};
```
There was confusion around the `prefixUrl` option. It was
counterintuitive if used with the Pagination API. For example, it worked
fine if the server replied with a relative URL, but if it was an
absolute URL then the `prefixUrl` would end up duplicated. In order to
fix this, Got now requires an absolute URL - no `prefixUrl` will be
applied.
- `got.extend(…)` will throw when passing some options that don't accept
undefined - undefined no longer retains the old value, as setting
undefined explicitly may reset the option
##### Documentation
We have redesigned the documentation so it's easier to navigate and find
exactly what you are looking for. We hope you like it ❤️
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/Unleash/unleash ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xMTAuMCIsInVwZGF0ZWRJblZlciI6IjM1LjEzMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-05 13:25:45 +02:00
Gastón Fournier
661cbf2b91
fix: some security vulnerabilities ( #4143 )
...
## About the changes
This should address:
https://github.com/Unleash/unleash/security/code-scanning/1 ,
https://github.com/Unleash/unleash/security/code-scanning/49 and
https://github.com/Unleash/unleash/security/code-scanning/52
Refs:
-
https://securitylab.github.com/research/github-actions-untrusted-input/
-
https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS
- https://datatracker.ietf.org/doc/html/rfc5321#section-4.5.3.1.1
---------
Co-authored-by: Christopher Kolstad <chriswk@getunleash.ai>
2023-07-05 11:51:27 +02:00
Nuno Góis
8707c2f7d9
fix: ensure userId context exists when running demo ( #4144 )
...
https://linear.app/unleash/issue/2-1168/demo-ensure-userid-context-field-in-setup-steps
This ensures that the `userId` context field exists when we reach
specific demo topics that require it in order to be successfully
completed. This uses the `setup` property on those topics, where we'll
check for the existence of this context field and create it if it's not
found.
2023-07-05 10:49:18 +01:00
Tymoteusz Czech
de8e9a03ae
Inline endpoint descriptions ( #4145 )
...
Update OpenApi docs
2023-07-05 11:25:58 +02:00
Christopher Kolstad
186fda1657
task: Add customHeaders as possible parameter. ( #4139 )
...
###What
Adds an optional sensitive parameter for customHeaders to all current
addons. It is sensitive because the user might be including api key headers.
2023-07-05 09:42:17 +02:00
Nuno Góis
8ff10aac29
fix: hide users list extra searchable columns ( #4142 )
...
https://linear.app/unleash/issue/2-1187/fix-two-extra-columns-in-users-list
This fixes a regression introduced in
https://github.com/Unleash/unleash/pull/4131 where two extra columns
were added for search only but were not properly hidden.
Thanks @nicolaesocaciu for the heads up!
Before:
After:
2023-07-05 08:39:59 +01:00
Thomas Heartman
451c67a24b
refactor: use requestType instead of isAdmin, optionalIncludes ( #4115 )
...
This removes the burden of knowing what optionalIncludes is and also
prevents weird edge cases like isAdmin with optionalIncludes.
2023-07-05 09:32:42 +02:00
Gastón Fournier
28cafd6e06
fix: change to the proper author ( #4141 )
...
## About the changes
Based on the information displayed here
https://github.com/Unleash/unleash/actions/runs/5456442710/jobs/9929252672#step:3:11
this is how we should get the email and name of the committer
2023-07-04 19:44:10 +02:00
Gastón Fournier
148842e867
chore: Add debug information ( #4140 )
...
## About the changes
Debug information to get the best way of fetching the commit author and
use that to trigger a workflow
2023-07-04 17:34:35 +02:00
Ivar Conradi Østhus
f2f63e9e0d
fix: add resolution for semver
2023-07-04 17:02:38 +02:00
Ivar Conradi Østhus
71be28c1df
semver: pin at ^7.5.3
2023-07-04 16:55:40 +02:00
andreas-unleash
64c1527213
chore: document endpoint tagged Unstable ( #4118 )
...
Adds description and summary to all endpoints with Unstable tag
2023-07-04 14:41:16 +00:00
Jaanus Sellin
523122d184
feat: hovering over feature shows full feature name ( #4138 )
2023-07-04 15:57:07 +03:00
Thomas Heartman
f799f72697
openapi: strategies tag ( #4116 )
...
Update OpenAPI schemas and operation descriptions for the strategies
tag.
2023-07-04 14:21:09 +02:00
Thomas Heartman
9c7eadded0
docs: switch order of api doc sidebar items; put legacy docs under legacy header ( #4135 )
...
Also adds a caution admonition to the legacy doc index page
2023-07-04 14:19:34 +02:00
Mateusz Kwasniewski
1bee81b475
feat: advanced playground UI tweaks ( #4136 )
2023-07-04 11:37:50 +02:00
Gastón Fournier
13def9a3a3
docs: Documentation around metrics API ( #4134 )
...
## About the changes
Mark some legacy endpoints as deprecated (they are long deprecated but
documentation was out of date) and fix some of the URLs
2023-07-04 11:16:05 +02:00
Christopher Kolstad
0b18491237
docs: Auth tag ( #4126 )
...
## What
This adds openapi documentation for the Auth tagged operations and
connected schemas.
## Discussion points
Our user schema seems to be exposing quite a bit of internal fields, I
flagged the isApi field as deprecated, I can imagine quite a few of
these fields also being deprecated to prepare for removal in next major
version, but I was unsure which ones were safe to do so with.
## Observation
We have some technical debt around the shape of the schema we're
claiming we're returning and what we actually are returning. I believe
@gastonfournier also observed this when we turned on validation for our
endpoints.
---------
Co-authored-by: Thomas Heartman <thomas@getunleash.ai>
2023-07-04 08:31:54 +00:00
Nuno Góis
95a02158e8
fix: improve users search ( #4131 )
...
https://linear.app/unleash/issue/2-1183/improve-users-list-search
This adapts the users list to use the new `useSearch` hook so you can
have a better search that also includes "username" and "email" as
fields. It's also more extensible in case we'd like to add filters in
the future.
2023-07-04 09:30:40 +02:00
Nuno Góis
6a3965f57a
feat: improve demo welcome screen options ( #4132 )
...
https://linear.app/unleash/issue/2-1166/demo-welcome-screen-improvement
Improves UI/UX of the demo welcome screen dialog by adding the "Explore
on my own" button and renaming the "Try Unleash demo" button to "Go for
a guided tour".
This also adds UTM links to both the demo website URL and QR code.
2023-07-04 08:10:34 +01:00
Tymoteusz Czech
ce900830cb
Fix: change request info ( #3971 )
...
<!-- Thanks for creating a PR! To make it easier for reviewers and
everyone else to understand what your changes relate to, please add some
relevant content to the headings below. Feel free to ignore or delete
sections that you don't think are relevant. Thank you! ❤️ -->
## About the changes
- fixed spacing in sidebar
- consolidated info into one banner
closes
[#1-969/change-requests-ui-inconsistency](https://linear.app/unleash/issue/1-969/change-requests-ui-inconsistency )
2023-07-04 09:09:05 +02:00
Mateusz Kwasniewski
b50b06c257
feat: Frontend api openapi spec ( #4133 )
2023-07-03 15:48:09 +02:00
Mateusz Kwasniewski
d3b3652984
docs: not on latest unleash with openapi enabeld ( #4024 )
2023-07-03 13:48:46 +02:00
David Leek
aa7627bc0b
feat/admin menu reorganize ( #4129 )
...
## About the changes
<!-- Describe the changes introduced. What are they and why are they
being introduced? Feel free to also add screenshots or steps to view the
changes if they're visual. -->
Reorganizes the items in the menu to align with the tabs on the admin
page.
Also makes admin menu available to all users, they can get there anyways
when using API access link, and all admin-only pages are disabled for
non-admins.
Also adds API access to the mobile drawer menu, in accordance with how
the configure menu is laid out.
2023-07-03 12:36:49 +01:00
dependabot[bot]
6145d9d71e
chore(deps-dev): bump semver from 7.5.2 to 7.5.3 in /frontend ( #4088 )
2023-07-03 11:11:52 +02:00
