v1.3.0

What's Changed

• chore(ci): Node 24 in Actions by @RaminNietzsche in #115
• test(sonar): mock-pool integration tests; trim coverage exclusions by @RaminNietzsche in #116
• Add expressApiRateLimit tests and Mergify automerge gate by @RaminNietzsche in #117
• Fix GitHub Pages deploy after release and HTTPS docs by @RaminNietzsche in #118
• Add README roadmap and sync README.fa (#126) by @RaminNietzsche in #130
• test(integration): NVD pagination fixtures (#78) by @RaminNietzsche in #131
• feat(tests,notifications,db): #78 integration+E2E, #127 NotificationService, #128 Drizzle by @RaminNietzsche in #132
• test + docs: coverage ~94%, code-to-docs-sync rule, tsconfig fix by @RaminNietzsche in #133
• docs: self-hosted ×6, README sync, fix overview icon paths by @RaminNietzsche in #140
• fix(docs): site-root paths for overview brand icons by @RaminNietzsche in #141
• docs: sync extended-docs and README with code (v1 API, OpenAPI, health) by @RaminNietzsche in #142
• test: SonarCloud S2699 — add missing test assertions (#134) by @RaminNietzsche in #144
• refactor(sonar): Readonly React component props (S6759) by @RaminNietzsche in #147
• docs(seo): robots.txt, sitemap, schema, and on-page meta for GitHub Pages by @RaminNietzsche in #151
• refactor(sonar): batch debt — complexity, a11y, Toast, minor smells by @RaminNietzsche in #150
• feat(db): migrate tenant and scan-history queries to Drizzle by @RaminNietzsche in #152
• docs(seo): fix homepage title, per-page meta, og:image, and hreflang by @RaminNietzsche in #178
• feat(feeds): harden core sources with detailed health diagnostics (#161) by @RaminNietzsche in #180
• feat(airgap): OSV bulk sync via OSV_BULK_PATH (#159) by @RaminNietzsche in #181
• fix(scan): report GitHub advisories failures in sources_failed by @RaminNietzsche in #182
• fix(github): date-only updated filter for advisories API by @RaminNietzsche in #184
• fix(runtime): wire OSV bulk and sources_failed into Docker and UI by @RaminNietzsche in #183
• feat(feeds): GitLab Advisory Database integration (#154) by @RaminNietzsche in #187
• feat(feeds): Linux distro sources and release v1.3.0 (#153) by @RaminNietzsche in #188

Full Changelog: v1.2.1...v1.3.0

v1.2.1

What's Changed

• chore: release v1.2.1 by @RaminNietzsche in #113

Full Changelog: v1.2.0...v1.2.1

v1.2.0

What's Changed

• fix(security): block SSRF in customFeeds URLs by @RaminNietzsche in #44
• fix(security): rate limit uses socket IP unless TRUST_PROXY_HOPS by @RaminNietzsche in #45
• fix(server): reliability — NVD pagination, cache, GitHub retry, i18n errors by @RaminNietzsche in #46
• fix(frontend): CORS allowlist, SetupWizard autoRefresh, useVulnScan deps by @RaminNietzsche in #47
• chore(docs,ci): CONTRIBUTING, translation guide, workflow improvements by @RaminNietzsche in #48
• chore: commit agent/ rules and skills catalog by @RaminNietzsche in #49
• chore(ops): Docker smoke test + watch mode documentation by @RaminNietzsche in #50
• feat: export, alerts, detailed health, storage migration, icon sync by @RaminNietzsche in #51
• refactor: split App and SubNav into feature modules (#17) by @RaminNietzsche in #52
• chore: rename default branch to main (#39) by @RaminNietzsche in #53
• fix(ci): CodeQL on main and harden issue summary workflow by @RaminNietzsche in #54
• chore(docker): version-only Hub tags and prune extras by @RaminNietzsche in #61
• build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #57
• build(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #59
• build(deps-dev): bump @types/react from 19.2.16 to 19.2.17 in the development-dependencies group by @dependabot[bot] in #60
• build(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #55
• build(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #56
• build(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in #58
• feat(auth): optional API_SECRET for /api routes (Closes #62) by @RaminNietzsche in #79
• feat(cache): Redis-backed shared cache (Closes #66) by @RaminNietzsche in #82
• feat(secrets): Docker/K8s secret file loading and ops docs (Closes #63) by @RaminNietzsche in #80
• chore(ci): categorize workflows and path-based triggers by @RaminNietzsche in #87
• feat(audit): structured JSON logging for scan/watch (Closes #64) by @RaminNietzsche in #81
• feat(db): PostgreSQL scan history and trends API (Closes #67) by @RaminNietzsche in #83
• feat(scan): SSE progress stream for full scans (Closes #68) by @RaminNietzsche in #84
• feat(docker): persistent DATA_DIR volume (Closes #69) by @RaminNietzsche in #85
• feat(airgap): local NVD/OSV/KEV mirrors (Closes #77) by @RaminNietzsche in #86
• feat(security): Helmet HTTP headers for production (Closes #65) by @RaminNietzsche in #93
• feat(tenants): multi-tenancy with isolated stacks (Closes #70) by @RaminNietzsche in #94
• feat(rbac): role-based API access control (Closes #71) by @RaminNietzsche in #95
• feat(k8s): Kubernetes stack discovery (Closes #72) by @RaminNietzsche in #96
• feat(metrics): Prometheus /metrics and Grafana dashboard (Closes #73) by @RaminNietzsche in #97
• feat(epss): EPSS enrichment and combined risk score (Closes #74) by @RaminNietzsche in #98
• feat(compliance): NIST/PCI-DSS mapping by CWE (Closes #75) by @RaminNietzsche in #99
• docs: all features open source — rename enterprise to self-hosted by @RaminNietzsche in #100
• docs: multilingual self-hosted chapter in extended-docs by @RaminNietzsche in #102
• fix(sonar): set Python 3.12 for SonarCloud analysis by @RaminNietzsche in #103
• ci(Mergify): configuration update by @RaminNietzsche in #106
• ci: Codecov coverage from Node test runner by @RaminNietzsche in #105
• fix(ci): restore CodeQL workflow path for code scanning by @RaminNietzsche in #101
• ci(mergify): upgrade configuration to current format by @mergify[bot] in #108
• feat(sonar): SonarCloud CI workflow, config, and setup docs by @RaminNietzsche in #109
• feat(codecov): dedicated CI workflow, codecov.yml, and setup docs by @RaminNietzsche in #110
• ci: Mergify Test Insights via Node JUnit (not pytest) by @RaminNietzsche in #104
• fix(security): CodeQL baselines, rate limits, dependency graph by @RaminNietzsche in #111

New Contributors

• @RaminNietzsche made their first contribution in #44
• @mergify[bot] made their first contribution in #108

Full Changelog: v1.1.0...v1.2.0

v1.1.0

What's Changed

• build(deps): update mkdocs-material requirement from >=9.6.0 to >=9.7.6 in /extended-docs by @dependabot[bot] in #1
• build(deps): update pymdown-extensions requirement from >=10.7 to >=10.21.3 in /extended-docs by @dependabot[bot] in #2
• build(deps): bump the production-dependencies group with 5 updates by @dependabot[bot] in #3
• build(deps): bump actions/configure-pages from 5 to 6 by @dependabot[bot] in #5
• build(deps): bump actions/ai-inference from 1 to 2 by @dependabot[bot] in #6
• build(deps): bump actions/upload-pages-artifact from 3 to 5 by @dependabot[bot] in #7
• build(deps-dev): bump the development-dependencies group with 11 updates by @dependabot[bot] in #8
• build(deps): bump actions/deploy-pages from 4 to 5 by @dependabot[bot] in #9

New Contributors

• @dependabot[bot] made their first contribution in #1

Full Changelog: https://github.com/RaminNietzsche/CVE-Radar/commits/v1.1.0