v3.0.0
3.0.0 (2026-07-06)
BREAKING CHANGES
- Nuxt app removed; use pnpm,
supabase start,pnpm run db:seed, andpnpm run dev. Publish onv*tag uses prod Supabase
(SUPABASE_DB_URL, SUPABASE_URL, SUPABASE_PUBLISHABLE_KEY secrets). CI keeps
local Supabase. Output isout/(not.output/public). npm lockfile removed.
Co-authored-by: Cursor cursoragent@cursor.com
- fix(docker): pass Supabase credentials via BuildKit secrets
Avoid ARG/ENV for SUPABASE_* so credentials do not persist in image
layers and Docker scanner warnings clear. Update CI/publish workflows
and compose; fix add-hosts and Percy Playwright import.
Co-authored-by: Cursor cursoragent@cursor.com
- fix(ci): harden secrets in logs and unblock Docker build
Silence supabase start output, pass BuildKit credentials via secret files
with masking, and use 172.17.0.1 instead of host-gateway for buildx.
Fix HU static export via direct ui-messages lookup for section labels.
Co-authored-by: Cursor cursoragent@cursor.com