Skip to content

1.35.0

Choose a tag to compare

View all tags
@butschster butschster released this 07 Nov 08:32
1.35.0
5c57ab5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Built with harnsy — the Buggregator team runs its AI agents in harnsy.

Before you upgrade

  • Needs Buggregator server v2.6.0 or later for clearing Sentry data per project, for the Sentry project, period and server-side filters, and for live refresh of the Sentry Traces, Logs and Metrics tabs. With an older server, Clear and those filters do not work as described, and those tabs refresh only when an error event arrives.
  • Newer browsers only. The UI now needs Chrome/Edge 107, Firefox 104, Safari 16 or newer.

Added

  • Mock server page: create and edit mock rules and watch matching requests live. (#306)
  • Xdebug page: a read-only view of a paused debug session — stack, variables and watches. (#312)
  • Installable app (PWA) with a new-events badge on the app icon. (#296)
  • Sentry: filter by period, scoped to the selected project; metrics and logs are filtered on the server, so a filter no longer misses rows past the first page. (#290, #294)
  • Sentry live tabs: Traces, Logs and Metrics refresh by themselves when new rows arrive, not only when an error event comes in; each tab reloads only for its own kind of data. (#311)
  • Single-key shortcuts (j/k, x, 0–9) can be turned off in Settings; Ctrl/Alt/Cmd combinations no longer trigger them. (#301)
  • Confirmation before Clear and before deleting an event. (#300)

Changed

  • Faster start: pages load on demand and the feed draws only the visible cards. (#310, #313)
  • Accessibility: text contrast meets WCAG AA in light and dark themes; better keyboard and screen-reader support (focus on cards, a skip link, one main region per page). (#315, #316)
  • HTML in Ray and VarDumper dumps is sanitised, and captured emails render in a sandboxed frame. Your own Tailwind text-* classes inside Ray html() content are styled only if the UI uses the same class. (#299, #302, #305)

Fixed

  • Copy as cURL works again: the command has the full URL with its query, every header value and the form fields; a proxied request keeps its host and https (with server v2.6.0). (#327)
  • With SSO on, the user menu with your profile and the logout link appears after login; it never showed with the Go server. (#326)
  • Inspector transactions show their real date instead of January 1970. (#325, #326, fixes #292)
  • With SSO on, the live feed sends your login token when it connects, so it keeps working with server v2.6.0, which requires it. (#324)
  • Clear removes only the chosen type; the REST delete route works again. (#298)
  • The Monolog event page shows extra. (#297, fixes #288)
  • The event list stays in step with the server after reconnects; loading and error states are shown instead of the welcome screen. (#308, #309)
  • Sentry lists no longer flicker on background refresh; Sentry Clear works on the current project and keeps pinned events. (#291, #307)
  • Sentry messages, tab titles, a «Metrics are off» page, and small display fixes. (#314)

Security

  • Copy as cURL is safe to paste. Everything in an HTTP dump comes from the sender, and before this release a crafted request could make the copied command run other shell commands or read local files. Now the method, body and form fields are quoted so that curl only resends the same bytes; files are named in a comment instead of being attached. If you copied cURL commands of untrusted dumps with an older version, check them before running. (#327)

Known limits

  • Find-in-page (Ctrl+F) sees only the cards drawn on screen.
  • Expanded dump trees collapse when their card scrolls out of view and back.

Thanks to @tsan88 and @temp for their contributions, and to @Feolius for the report.

Full Changelog: 1.34.0...1.35.0

Contributors

temp, tsan88, and Feolius
Assets 3
Loading