Skip to content

BugPin 1.2.1

Latest

Choose a tag to compare

@github-actions github-actions released this 27 Aug 18:55
20e271d

Features

  • The Admin Console sidebar now displays live item counts for Reports and Projects. Report counts are visible to all users, while project counts remain admin-only.
  • Added a Security & Privacy console section with EU Privacy Mode controls, documentation link, and per-project activity-trail settings.
  • Added server-enforced privacy sanitization that disables activity trails instance-wide in EU Privacy Mode, strips query strings and fragments from diagnostic URLs, and removes disallowed activity data before storage.
  • Updated widget activity capture and report diagnostics/export behavior to honor the effective privacy settings.

Fixes

  • Prevented privacy settings from being changed when the current server settings cannot be loaded, with a safe retry path.
  • Refined sensitive-data redaction to preserve ordinary long hashes and slugs while continuing to mask labeled tokens and Bearer credentials.
  • Fixed annotation text editing so spaces can be entered normally.

Upgrade

  • Upgraded and pinned the production runtime, Docker images, and release workflow to Bun 1.4.0.
  • Updated all Community Edition and Enterprise Edition dependencies to their latest stable releases.
  • Upgraded TypeScript 7, Vite 8, React Router 7, TipTap 3, Zod 4, Hono, and related tooling.
  • Replaced the vulnerable npm SheetJS package with the official SheetJS 0.20.3 distribution.

Security

  • Resolved all dependency advisories reported by bun audit.
    • Community Edition graph reduced from 83 advisories to zero.
    • Enterprise Edition graph reduced from 30 advisories to zero.
  • Updated patched transitive dependency overrides for archive handling, HTML sanitization, URL processing, Markdown, CSS, and XML parsing.

Maintenance

  • Migrated validation schemas, router configuration, declaration generation, code splitting, and widget minification for the upgraded packages.
  • Added clean frozen-lockfile verification for both dependency graphs.
  • Verified all typechecks, 1,146 automated tests, Community and Enterprise production builds, and the Bun 1.4.0 production image.

Compare: v1.2.0...v1.2.1