Skip to content

Weekly: Promote nightly to main (2026-05-11)#1008

Merged
Wikid82 merged 206 commits into
mainfrom
nightly
May 11, 2026
Merged

Weekly: Promote nightly to main (2026-05-11)#1008
Wikid82 merged 206 commits into
mainfrom
nightly

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

🚀 Weekly Nightly to Main Promotion

Date: 2026-05-11
Trigger: Scheduled weekly promotion
Commits: 206 commits to promote
Changes: 245 files changed, 26093 insertions(+), 2031 deletions(-)


Commits Being Promoted

Showing first 50 of 206 commits:

58d200c7 Merge pull request #1005 from Wikid82/renovate/non-major-updates
a4d2d0d5 chore(deps): update non-major-updates
ffc86b07 fix(deps): update golang.org/x/sys to version 0.44.0
869be07d fix(deps): update golang.org/x/crypto, golang.org/x/net, golang.org/x/text, golang.org/x/sys, and modernc.org/libc to latest versions
ed18a139 fix(deps): update semver to version 7.8.0
905eb3f9 fix(deps): update @tailwindcss/node, @tailwindcss/oxide, and tailwindcss to version 4.3.0; update enhanced-resolve and semver to latest versions
3ca5f25a Merge pull request #1004 from Wikid82/renovate/non-major-updates
7894845c fix(deps): update @types/estree and get-east-asian-width to latest versions
6a043b09 Merge branch 'development' into renovate/non-major-updates
43a89bf8 Merge pull request #1003 from Wikid82/renovate/docker-build-push-action-7.x
49dff9bf fix: update Go version to 1.26.3 in go.work
9b95d302 fix: reorder module usage in go.work to include backend after agent
789331ab test: fix invite user test broken by jsdom 29.1.1 email input regression
21c5ee6b fix(deps): update non-major-updates
eaa9b43c chore: update dependencies in package-lock.json
1c6ce026 fix: update Go version to 1.26.3 across workflows and modules
1a43cbad fix: reorder module usage in go.work to include backend
d32b1bf7 chore(deps): update docker/build-push-action action to v7
d452b351 Merge pull request #1002 from Wikid82/renovate/non-major-updates
dd1f2f6c fix(ci): surface package-level failures and panics in test failure summary
9dec44d3 Merge branch 'development' into renovate/non-major-updates
61ce5d3f fix: update package versions in package-lock.json
4f10bd07 fix(deps): update non-major-updates
b8b14cf5 Merge pull request #1001 from Wikid82/renovate/non-major-updates
d876981b Merge pull request #983 from Wikid82/feature/hecate
5f1b8483 Merge branch 'development' into feature/hecate
857bba2f Merge branch 'development' into renovate/non-major-updates
2cebcde2 fix: resolve Renovate go datasource lookup failure for jackc/pgx v4
1004befc Merge branch 'development' into renovate/non-major-updates
1abcd1a1 Merge branch 'development' into feature/hecate
30aaecfc fix: poll correct health endpoint in CrowdSec integration test
c9cf52ea chore(deps): update dependency tar to ^7.5.14
e4138157 fix: remove debug mode from CrowdSec integration test container
5edefca3 fix: resolve CrowdSec integration test container startup timeout
2d54def2 Merge branch 'development' into feature/hecate
2f22c05c fix: prevent crowdsec integration test from failing on slow geoip mmdb download
14767ffd fix: override bundled syft version in sbom-action to restore CI
12661825 fix(deps): update react-router-dom to v7.15.0
ef705ecc fix(deps): update react-router-dom to v7.15.0
2a19b08e fix(deps): improve Renovate package lookup for gorm.io dependencies
4c15950b fix(hecate): fix stale E2E selectors, close unit test gaps, and polish UX
e81f4acc feat(hecate): enhance UX with provider assignment features, fix E2E tests, and add unit tests
bd00f163 Merge branch 'development' into feature/hecate
70037a15 fix(deps): upgrade xz-libs to address CVE-2026-34743 DoS vulnerability
041dd505 fix(deps): update go-ntlmssp to v0.1.1 to address CVE-2026-32952 DoS vulnerability
6b746d38 Merge pull request #1000 from Wikid82/renovate/actions-add-to-project-2.x
6cc4565c fix(tests): update provider button interactions in HecateProviders tests
a8ef77cc chore(deps): update actions/add-to-project action to v2
6d7caa59 fix(deps): remove gopkg.in/yaml.v3 dependency and add modernc.org/libc
b3a583ed fix(deps): remove deprecated yamux dependency and add modernc.org/libc

...and 156 more commits


Pre-Merge Checklist

  • All status checks pass
  • No critical security issues identified
  • Changelog is up-to-date (auto-generated via workflow)
  • Version bump is appropriate (if applicable)

Merge Instructions

This PR promotes changes from nightly to main. Once all checks pass:

  1. Review the commit summary above
  2. Approve if changes look correct
  3. Merge using "Merge commit" to preserve history

This PR was automatically created by the Weekly Nightly Promotion workflow.

actions-user and others added 30 commits April 26, 2026 17:22
…ifecycle operations

refactor: update function signatures for clarity and consistency across services
fix: improve security annotations in various service methods
- Updated function signatures in backup_service_wave4_test.go and backup_service_wave7_test.go for better readability.
- Changed variable assignments in certificate_helpers_test.go to use named return values.
- Modified permission settings in certificate_service_sync_coverage_test.go for consistency with octal notation.
- Enhanced error handling in notification_service_json_test.go and notification_service_test.go with comments for security linting.
- Introduced new test cases for Hecate and Orthrus services, ensuring comprehensive coverage of functionality.
- Cleaned up code in emergency_token_service.go to simplify token validation logic.
- Added comments to clarify controlled test paths in various test files to address security linting warnings.
- Register Hecate TunnelManager with all provider factories in routes
- Add Orthrus CA initialization and WebSocket endpoint registration
- Introduce OrthrusAddrResolver interface to break caddy to orthrus import cycle
- Implement resolveOrthrusHosts for dynamic orthrus:<uuid> upstream resolution
- Add SetOrthrusServer to caddy.Manager for live agent proxy addr injection
- Fix race condition in Orthrus WebSocket session registration test
…or tunnel logs

Co-authored-by: Copilot <copilot@github.com>
Wikid82 and others added 27 commits May 5, 2026 23:34
feat: Hecate Tunnel & Pathway Manager
chore(deps): update dependency tar to ^7.5.14
…mmary

The previous grep pattern never matched package-level failures from
gotestsum --format pkgname, which emits FAIL<tab><package> with no colon.
Panics and data race reports were also silently swallowed, causing the
CI failure summary to always print "No specific failures captured in output"
even when the test binary crashed.

Replace with a pattern covering individual assertion failures, package-level
failures, race detector reports, and test binary panics.

---

fix(test): guard goroutine lifecycle in server tests to prevent silent crashes

Three test hygiene gaps in the Orthrus test suite caused the package binary
to exit non-zero without emitting any --- FAIL: line, making CI failures
invisible until the grep fix above:

- A read-only keys directory test created a 0o555 subdirectory without
  restoring permissions before cleanup, triggering a TempDir removal panic.
  Added a t.Cleanup to mirror the pattern already used in the adjacent test.

- The WatchHeartbeat closed-session test started yamux goroutines without
  registering srv.Stop(), allowing goroutines to race against TempDir and
  DB cleanups after the test function returned.

- The handler test setup helper never cancelled the OrthrusServer context.
  Added t.Cleanup(srv.Stop) so every test using this helper benefits,
  consistent with the pattern established in the server test suite.
- @reduxjs/toolkit: immer updated from 11.1.6 to 11.1.7
- @types/estree updated from 1.0.8 to 1.0.9
- @types/node updated from 25.6.0 to 25.6.2
- @vitest/eslint-plugin updated from 1.6.16 to 1.6.17
- brace-expansion updated from 5.0.5 to 5.0.6
- electron-to-chromium updated from 1.5.351 to 1.5.352
- enhanced-resolve updated from 5.21.0 to 5.21.1
- i18next updated from 26.0.9 to 26.0.10
- knip updated from 6.11.0 to 6.12.1
- jiti updated from 2.6.0 to 2.7.0
- react updated from 19.2.5 to 19.2.6
- react-dom updated from 19.2.5 to 19.2.6
- react-i18next updated from 17.0.6 to 17.0.7
- @oxc-project/types updated from 0.127.0 to 0.128.0
- @rolldown/binding-* updated from 1.0.0-rc.17 to 1.0.0-rc.18
- tar updated from 7.5.14 to 7.5.15
- vite updated from 8.0.10 to 8.0.11
The `invites a new user` and `hides invite link when backend returns
a redacted URL` tests in UsersPage were asserting 0 calls to inviteUser
because jsdom 29.1.1 silently suppresses change events on email inputs
when using userEvent.type(). The email state never updated, leaving the
submit button permanently disabled.

Replaced both userEvent.type() calls with fireEvent.change(), consistent
with five identical fixes already present in the same test file from prior
commits. Also corrected a pre-existing afterEach import reference error
that was masking the suite in some environments.

No production code was changed.
…on-7.x

chore(deps): update docker/build-push-action action to v7
…css to version 4.3.0; update enhanced-resolve and semver to latest versions
…/text, golang.org/x/sys, and modernc.org/libc to latest versions
@github-actions github-actions Bot added automated Automatically generated by CI/CD weekly-promotion Weekly promotion from nightly to main labels May 11, 2026
@Wikid82 Wikid82 merged commit 57e8ad9 into main May 11, 2026
33 of 34 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automatically generated by CI/CD weekly-promotion Weekly promotion from nightly to main

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants