ci: refresh runner state for PR #26

Trigger fresh CI run to rule out stale runner cache. Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: add elliptic override for GHSA-848j-6mx2-7j84
2026-05-05 18:36:41 +00:00 · 2026-05-05 18:07:58 +00:00 · 2026-05-05 10:30:37 +00:00 · 2026-05-05 10:29:59 +00:00 · 2026-05-05 10:29:55 +00:00 · 2026-05-05 10:29:51 +00:00
4 changed files with 13 additions and 7 deletions
@@ -1,4 +1,4 @@
-version: "0.1.0"
+version: "0.1.2"
 name: headlamp-argocd
 displayName: ArgoCD Headlamp Plugin
 createdAt: "2026-04-21T00:00:00Z"
@@ -26,8 +26,8 @@ maintainers:
 provider:
  name: privilegedescalation
 annotations:
-  headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-argocd-plugin/releases/download/v0.1.0/headlamp-argocd-0.1.0.tar.gz"
-  headlamp/plugin/archive-checksum: "sha256:1f4df43f79b795bdf4f70e1e3aa5bacadf689ea5584fdadf92fb677faab21c2c"
+  headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-argocd-plugin/releases/download/v0.1.2/privilegedescalation-headlamp-argocd-plugin-0.1.2.tar.gz"
+  headlamp/plugin/archive-checksum: sha256:e71f84913eed1fd7e2d074912e3bfa668c4b1fefcbb069731a4e4277a998ca28
  headlamp/plugin/version-compat: ">=0.26"
  headlamp/plugin/distro-compat: "in-cluster"
 changes:
@@ -1,6 +1,6 @@
 {
  "name": "@privilegedescalation/headlamp-argocd-plugin",
-  "version": "0.1.0",
+  "version": "0.1.2",
  "description": "Headlamp plugin for ArgoCD visibility — monitors ArgoCD Applications, Rollouts, and health status",
  "repository": {
    "type": "git",
@@ -33,7 +33,8 @@
    "overrides": {
      "tar": "^7.5.11",
      "undici": "^7.24.3",
-      "flatted": "^3.4.2"
+      "flatted": "^3.4.2",
+      "elliptic": ">=6.6.1"
    }
  },
  "devDependencies": {
@@ -8,6 +8,7 @@ overrides:
  tar: ^7.5.11
  undici: ^7.24.3
  flatted: ^3.4.2
+  elliptic: '>=6.6.1'

 importers:

@@ -6232,7 +6233,7 @@ snapshots:
      material-react-table: 2.13.3(0078ddeddc9e779fa84c03996c1db10e)
      monaco-editor: 0.52.2
      msw: 2.4.9(typescript@5.6.2)
-      msw-storybook-addon: 2.0.3(msw@2.4.9(typescript@5.6.3))
+      msw-storybook-addon: 2.0.3(msw@2.4.9(typescript@5.6.2))
      notistack: 3.0.2(csstype@3.2.3)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
      path-browserify: 1.0.1
      prettier: 2.8.8
@@ -10237,7 +10238,7 @@ snapshots:

  ms@2.1.3: {}

-  msw-storybook-addon@2.0.3(msw@2.4.9(typescript@5.6.3)):
+  msw-storybook-addon@2.0.3(msw@2.4.9(typescript@5.6.2)):
    dependencies:
      is-node-process: 1.2.0
      msw: 2.4.9(typescript@5.6.2)
@@ -0,0 +1,4 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>privilegedescalation/.github:renovate-config"]
+}
Author	SHA1	Message	Date
Chris Farhood	1c8ae3ac53	ci: refresh runner state for PR #26 Trigger fresh CI run to rule out stale runner cache. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-05 18:36:41 +00:00
Chris Farhood	44d96aef57	fix: add elliptic override for GHSA-848j-6mx2-7j84 Add pnpm.overrides.elliptic to prevent version regression on the transitive elliptic vulnerability (CVE-2025-14505). Vulnerability path: @kinvolk/headlamp-plugin → vite-plugin-node-polyfills → node-stdlib-browser → crypto-browserify → browserify-sign → elliptic Note: pnpm audit will still report the vulnerability until upstream publishes elliptic 6.6.2+. This override safeguards against pulling a worse version. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-05 18:07:58 +00:00
privilegedescalation-ceo[bot]	5b5ed9897b	Merge pull request #16 from privilegedescalation/gandalf/pri-589-cleanup fix: add markdownlint config to resolve CI failures (PRI-589)	2026-05-05 10:30:37 +00:00
privilegedescalation-ceo[bot]	6aefdb00a8	Merge pull request #10 from privilegedescalation/chore/add-renovate-config chore: add renovate.json extending org preset	2026-05-05 10:29:59 +00:00
privilegedescalation-ceo[bot]	5db792f0a7	Merge pull request #11 from privilegedescalation/release/v0.1.2 release: v0.1.2	2026-05-05 10:29:55 +00:00
privilegedescalation-ceo[bot]	413634a01e	Merge pull request #12 from privilegedescalation/dev docs: redirect headlamp install namespace to headlamp (PRI-439)	2026-05-05 10:29:51 +00:00
Chris Farhood	de8a20f99a	fix: add markdownlint config to resolve CI failures (PRI-589) Cherry-picked from PR #9 original commit, removing out-of-scope tar/undici dependency changes that should not have been included. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-04 21:19:09 +00:00
Chris Farhood	827b4f31cc	docs: confirm headlamp namespace audit (PRI-439) Audit of headlamp-argocd-plugin for kube-system → headlamp namespace redirect. No in-scope kube-system references found. In-scope files audited (all clean): - README.md: no install snippet referencing kube-system - CLAUDE.md: no kube-system references - artifacthub-pkg.yml: no kube-system references Out-of-scope upstream-workload references verified untouched: - ArgoCD server lives in 'argocd' namespace (upstream watched workload) - Plugin install path is via Headlamp plugin manager (ArtifactHub), not Helm No code/text changes required. PR opened for SDLC sign-off. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-04 08:31:11 +00:00
github-actions[bot]	c648b43493	release: v0.1.2	2026-05-04 06:38:54 +00:00
Chris Farhood	01c37a85d7	chore: add renovate.json extending org preset Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-04 05:35:28 +00:00