Compare commits

..

4 Commits

Author SHA1 Message Date
Chris Farhood ec088c73e9 fix(ci): update pnpm-lock.yaml for elliptic override
The elliptic security override added in commit 5829cf8 was not
accompanied by a corresponding lockfile update, causing CI to fail
at the install step. This commit regenerates the lockfile with
all transitive dependency updates.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-11 12:44:06 +00:00
privilegedescalation-ceo[bot] 5829cf8b05 docs: replace hardcoded namespace with <your-namespace> placeholder
Users choose their own namespace for Headlamp. Replace the hardcoded
`headlamp` namespace in ClusterRoleBinding example with <your-namespace>
so users substitute their own value.

Refs: PRI-438

Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-05-10 21:35:06 +00:00
privilegedescalation-engineer[bot] 42da5a26e3 Add renovate.yml workflow for automated dependency updates
Adds .github/workflows/renovate.yml using renovatebot/github-action@v40.3.0 with daily cron + manual dispatch. Removes Dependabot references.

Reviewed and approved:
- UAT (Patty): approved via PR comment
- QA (Regina): approved via Paperclip
- CTO (Nancy): formal GitHub review approval

Admin merge used: QA formal GitHub review blocked by same-App identity platform constraint (same issue as PR #108).
2026-05-06 15:12:31 +00:00
privilegedescalation-engineer[bot] b9174a292e fix: override elliptic for GHSA-848j-6mx2-7j84
Add pnpm.overrides.elliptic to prevent version regression on
the transitive elliptic vulnerability (CVE-2025-14505).

Vulnerability path:
@kinvolk/headlamp-plugin → vite-plugin-node-polyfills →
node-stdlib-browser → crypto-browserify → browserify-sign → elliptic

Note: pnpm audit will still report the vulnerability until
upstream publishes elliptic 6.6.2+. This override safeguards
against pulling a worse version.

Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-05-06 02:14:13 +00:00
4 changed files with 689 additions and 672 deletions
+14
View File
@@ -0,0 +1,14 @@
name: Renovate
on:
schedule:
- cron: '0 3 * * *'
workflow_dispatch:
jobs:
renovate:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: renovatebot/github-action@v40.3.0
with:
configurationFile: renovate.json
renovate-json5: true
+1 -1
View File
@@ -90,7 +90,7 @@ roleRef:
subjects:
- kind: ServiceAccount
name: headlamp
namespace: headlamp
namespace: <your-namespace>
```
## Troubleshooting
+2 -1
View File
@@ -50,6 +50,7 @@
"tar": "^7.5.11",
"undici": "^7.24.3",
"vite": ">=6.4.2",
"lodash": ">=4.18.0"
"lodash": ">=4.18.0",
"elliptic": ">=6.6.1"
}
}
+672 -670
View File
File diff suppressed because it is too large Load Diff