Regenerate lockfile for lodash override

- Explicitly add lodash@4.18.1 to ensure override is respected
- Regenerated pnpm-lock.yaml with resolved lodash@4.18.1 (CVE fix)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

.github/workflows/dual-approval.yaml

@@ -16,3 +16,5 @@ jobs:
   dual-approval:
     uses: privilegedescalation/.github/.github/workflows/dual-approval-check.yaml@main
     secrets: inherit
+    with:
+      pr_number: ${{ github.event.pull_request.number }}

.github/workflows/release.yaml

@@ -7,6 +7,8 @@ on:
         description: 'Release version (e.g. 1.0.0)'
         required: true
         type: string
+  repository_dispatch:
+    types: [release]
 
 permissions:
   contents: write
@@ -19,5 +21,5 @@ jobs:
       RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
       RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
     with:
-      version: ${{ inputs.version }}
-      upstream-repo: 'rook/rook'
+      version: ${{ inputs.version || github.event.client_payload.version }}
+

artifacthub-pkg.yml

@@ -1,4 +1,4 @@
-version: "1.0.0"
+version: "1.0.2"
 name: headlamp-rook-plugin
 displayName: Rook Plugin
 createdAt: "2026-02-18T00:00:00Z"
@@ -24,7 +24,7 @@ provider:
   name: privilegedescalation
 changes:
   - kind: changed
-    description: "Bump to v1.0.0 stable release"
+    description: "Bump to v1.0.1 patch release — fix ArtifactHub checksum"
   - kind: added
     description: "Test infrastructure: add vitest, @testing-library/react, jsdom, and related devDependencies so CI tests pass"
   - kind: added
@@ -35,7 +35,7 @@ changes:
     description: "Renovate: extend org-level config preset and add pinDigests for SHA pinning of GitHub Actions"
 
 annotations:
-  headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-rook-plugin/releases/download/v1.0.0/rook-1.0.0.tar.gz"
-  headlamp/plugin/archive-checksum: sha256:36a62cda46194fd88335e3b3af12e7c89bb1ec21671c747e0bc2e1e3cd02d0fc
+  headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-rook-plugin/releases/download/v1.0.2/rook-1.0.2.tar.gz"
+  headlamp/plugin/archive-checksum: sha256:4f16cec3297968c7eb06e475a1c175503abf17134bd411fc86be1f18d9d27a48
   headlamp/plugin/distro-compat: ""
   headlamp/plugin/version-compat: ">=0.20"

package.json

@@ -1,6 +1,6 @@
 {
   "name": "rook",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Headlamp plugin for Rook-Ceph cluster visibility and CSI driver monitoring",
   "repository": {
     "type": "git",
@@ -35,6 +35,7 @@
     "@types/react-dom": "^18.0.0",
     "eslint": "^8.57.0",
     "jsdom": "^24.0.0",
+    "lodash": "4.18.1",
     "notistack": "^3.0.0",
     "prettier": "^2.8.8",
     "react": "^18.3.1",
@@ -45,6 +46,8 @@
   },
   "overrides": {
     "tar": "^7.5.11",
-    "undici": "^7.24.3"
+    "undici": "^7.24.3",
+    "vite": ">=6.4.2",
+    "lodash": ">=4.18.0"
   }
-}
+}