Commit Graph

20 Commits

Author SHA1 Message Date
Gandalf the Greybeard ba6ddc1366 Fix node-forge to ^1.4.0 (patch security vulnerabilities)
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-15 00:58:16 +00:00
Gandalf the Greybeard af87036ef0 Fix package.json formatting - restore proper indentation
The package.json was accidentally minified to a single line. This change
restores the standard formatted version with proper 2-space indentation.
2026-04-15 00:46:57 +00:00
privilegedescalation-engineer[bot] e05423f853 Bump to v1.0.1 — fix ArtifactHub checksum
Bumps version to 1.0.1 and updates artifacthub-pkg.yml with the
correct archive URL for v1.0.1. The archive-checksum is intentionally
left blank so the release workflow can compute it after rebuilding the
tarball (fixes the v1.0.0 ordering bug fixed in PR #80).

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-15 00:46:32 +00:00
privilegedescalation-engineer[bot] 2c17512372 fix: update node-forge to 1.4.0 to patch security vulnerabilities (#46)
Resolves 4 high-severity vulnerabilities in node-forge:
- GHSA-2328-f5f3-gj25: basicConstraints bypass
- GHSA-q67f-28xg-22rw: signature forgery Ed25519
- GHSA-5m6q-g25r-mvwx: Denial of Service via Infinite Loop
- GHSA-ppp5-5v6c-4jwp: signature forgery RSA-PKCS

Fixes PRI-21

Co-authored-by: Pawla Abdul (Bot) <pawla@groombook.dev>
2026-04-15 00:14:40 +00:00
Gandalf the Greybeard a2ac69c764 feat: add Playwright E2E smoke tests
Follows the pattern established in headlamp-intel-gpu-plugin (PR #25):
- e2e/sealed-secrets.spec.ts: 5 smoke tests covering sidebar navigation,
  list view, sealing keys view, cross-view navigation, and plugin settings
- e2e/auth.setup.ts: shared OIDC + token auth setup
- playwright.config.ts: fail-fast if HEADLAMP_URL not set (no prod URL fallback)
- scripts/deploy-e2e-headlamp.sh: ConfigMap-based plugin injection to privilegedescalation-dev
- scripts/teardown-e2e-headlamp.sh: clean teardown of all E2E resources
2026-03-24 23:19:20 +00:00
Gandalf the Greybeard 2d7b73466a fix: add packageManager field to package.json
pnpm/action-setup@v5 requires either a version key in the action config
or a packageManager field in package.json. Add the field to unblock the
release workflow.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-24 22:12:39 +00:00
Gandalf the Greybeard a7adee4e54 fix(ci): remove typescript from overrides, keep only as devDep
npm/pnpm rejects a package.json that specifies the same package in both
overrides and devDependencies (EOVERRIDE). Since typescript is now a
direct devDependency pinned at ~5.6.2, remove it from overrides.
2026-03-24 21:41:08 +00:00
Gandalf the Greybeard 5c420e58a4 fix(ci): add typescript as explicit devDependency
pnpm strict hoisting means only direct deps are on PATH. The overrides
entry pins the version but does not install tsc as a binary. Without an
explicit devDependency entry pnpm run tsc fails with "tsc: not found".
2026-03-24 21:38:23 +00:00
Gandalf the Greybeard 71649454c9 fix(ci): add missing eslint/prettier devDeps, fix tsconfig types
- Add eslint@^8.57.0, @headlamp-k8s/eslint-config@^0.6.0, prettier@^2.8.8
  as explicit devDependencies — without these the lint and format:check CI
  steps fail with "eslint: not found" / "prettier: not found"
- Remove vite/client and vite-plugin-svgr/client from tsconfig types — these
  are transitive deps that pnpm does not hoist; polaris plugin omits them too
  and tsc passes cleanly without them
- Update pnpm-lock.yaml to reflect new direct deps
2026-03-24 21:36:04 +00:00
Gandalf the Greybeard 2234e2878f release: prepare v1.0.0
- Bump version to 1.0.0 in package.json and artifacthub-pkg.yml
- Add explicit devDependencies: vitest, @testing-library/react,
  @testing-library/jest-dom, @testing-library/user-event, jsdom,
  react, react-dom, @types/react, @types/react-dom, react-router-dom,
  @mui/material, notistack — resolves phantom-dep test failures
- Add process.env.NODE_ENV define to vitest.config.mts (fixes
  "act() not supported in production builds" failures)
- Switch to pnpm lockfile (pnpm-lock.yaml), drop package-lock.json
- Remove install-plugin.sh (violates ArtifactHub-only install policy)
- Fill in CHANGELOG entries for v0.2.22, v0.2.23, v0.2.24
- Update CHANGELOG [1.0.0] and version comparison links
- All 233 tests pass

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-24 21:25:26 +00:00
github-actions[bot] 0fed41a466 release: v0.2.24 2026-03-19 21:39:34 +00:00
Hugh Hackman 9558542d9d fix: add npm overrides for tar and undici security advisories
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-18 22:55:42 +00:00
github-actions[bot] 39b0d5dbbe release: v0.2.23 2026-03-09 03:21:30 +00:00
DevContainer User 9d9bc5f22f fix: remove any types, dead code, unused exports; add comprehensive tests
- Fix handleRotate bug ignoring Result from rotateSealedSecret()
- Fix dead code branch in useControllerHealth
- Replace all `any` types with `unknown` + type guards
- Delete unused functions/exports (452 lines removed)
- Add 18 new test files covering all hooks, libs, and components
- 233 tests passing, zero tsc errors, zero lint issues

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-04 17:13:00 +00:00
DevContainer User 3dc2f92a87 release: v0.2.21
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-04 12:44:35 +00:00
github-actions[bot] 2cf339ea2c release: v0.2.20 2026-03-04 02:45:42 +00:00
github-actions[bot] c68442f6d3 release: v0.2.19 2026-03-04 02:13:03 +00:00
DevContainer User 2b3b574130 Revert "release: v0.2.19"
This reverts commit f46f940617.
2026-03-04 02:08:03 +00:00
github-actions[bot] f46f940617 release: v0.2.19 2026-03-04 02:05:19 +00:00
DevContainer User af95c3795c chore: move source to repo root and standardize config
Phase 1 — Structural overhaul:
- Move all source from headlamp-sealed-secrets/ subdirectory to repo root
- Delete 23 AI-generated docs, 8 pre-built tarballs, release snapshots dir
- Remove all working-directory refs from CI/release workflows
- Update install-plugin.sh and typedoc.json paths

Phase 2 — Config standardization:
- Create .eslintrc.js and .prettierrc.js (standard Headlamp configs)
- Remove inline eslintConfig/prettier from package.json (drop jsx-a11y, prettier extends)
- Rewrite tsconfig.json (package name extend, add compilerOptions.types)
- Create vitest.config.mts and vitest.setup.ts (standard from polaris)
- Replace headlamp-plugin CLI scripts with direct tool invocation
- Rewrite .gitignore with standard baseline

Phase 3 — MCP & Claude settings:
- Create .mcp.json with github/kubernetes/flux/playwright servers
- Create .claude/settings.local.json
- Remove 7 specialized agents, keep 3 meta-orchestration agents

Phase 4 — Documentation:
- Rewrite CLAUDE.md (remove subdirectory refs, standard format)
- Add ArtifactHub badge, Architecture section, standardized install methods to README.md
- Create CONTRIBUTING.md and SECURITY.md
- Fix pre-existing test bugs in validators.test.ts (isValidNamespace returns boolean,
  not ValidationResult; error message string mismatches)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-03 21:31:12 +00:00