v1.0.14

v1.0.14 - Homepage Performance, Smarter Login & Security Hardening

Homepage Delivery & Performance

This release improves homepage delivery while preserving the existing visual experience.

• Converted the Features section to an async Server Component
• Moved Features translations to server-side rendering
• Added a Suspense streaming boundary for the Features section
• Deferred the Footer client chunk until it approaches the viewport
• Removed unused homepage state and React imports

Last-Used Login Method

• Added a “Last used” badge for email, Google, and GitHub login
• Remembers the successful login method in a secure HTTP-only cookie
• Added English, Ukrainian, and Polish translations
• Added accessible descriptions for login buttons
• Added unit coverage for badge rendering

Redirect Security

• Hardened post-login redirect validation
• Rejected duplicate returnTo values
• Blocked external and protocol-relative redirects
• Blocked backslash and control-character normalization bypasses
• Added regression tests for malicious redirect inputs

About Page Metrics

• Updated LinkedIn followers to 2.4k
• Refreshed the platform statistics cache key

Test Tooling & Supply-Chain Safety

• Updated Vitest and the V8 coverage provider to patched 4.1.10
• Closed the critical Vitest Dependabot alert
• Regenerated the lockfile with npm 10 for reproducible GitHub Actions installs
• Passed safe-chain and CodeQL checks on both the release PR and main

---

Database: No schema changes
Dependencies: No new direct runtime packages
Hosting: Vercel / Netlify
Live: https://devlovers.net