Skip to content

Repository navigation

GateFlow v0.3.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Jul 16:48
· 290 commits to master since this release
v0.3.1
2132685

Workspace

  • [Client-Dashboard] suppress hydration warning for password-manager DOM injection on login

  • [Client-Dashboard] add loading skeletons for routes that lacked one

  • [Client-Dashboard] show next billing date on the billing settings page

  • [Client-Dashboard] fix legacy dashboard route redirects

  • [Ui] register ds-* design tokens as real Tailwind utilities

  • [Client-Dashboard] polish header search input

  • [Deps] revert eslint and typescript bumps that broke shared-package lint

  • [Deps] bump @prisma/client to ^6.19.3 to match prisma CLI

  • [Deps] repair pnpm-lock.yaml broken by CodeRabbit autofix merge

  • [Ui] register packages/ui as a Tailwind v4 source

  • [Ui] enforce items-center on login shell flexbox container to fix full-width stretching

  • [Security] update tar override in pnpm.overrides to >=7.5.21

  • [Ui] redesign login page with clean modern SaaS web app layout

  • [Ui] use semantic bg-background token in login-shell to pass ADS check

  • [Ui] constrain login shell container to compact 380px width

  • [Ui] elevate design tokens and login page layout

  • [Ui] update create QR code button and KPI card links to use org-scoped paths

  • [Ui] create organization dashboard overview page at /dashboard/organizations/[orgId]

  • [Ui] suppress React 19 DEV script warning for next-themes in theme-provider

  • [Ui] add client mounted guard to ThemeProvider to prevent React 19 SSR script warning

  • [Ui] pass scriptProps to ThemeProvider inside theme-provider client component

  • [Ui] encapsulate ThemeProvider in client component to prevent RSC script warning

  • [Ui] pass scriptProps to ThemeProvider to silence script hydration warning

  • [Ui] add use client directive to components index and suppress layout hydration warning

  • [Scripts] harden workflow-v2 guide parsing and docs alignment

  • [Workflow-V2] bootstrap guide status/next/prompt/delivery

  • [Build] complete Tailwind v4 migration — production builds were broken

  • [Security] complete audit remediation 2026 (phases 1–3 shipped; Phase 4 still open in Active plan TASKS) — P0 containment, request-local fail-closed tenant isolation, trustworthy CI scanners

  • [Security] address PR #155 review findings (CMS public GET exception, bearer-key API access, bounded admin-login throttle)

  • [Security] harden Phase 4 high-risk APIs and HTTP headers (withApiGuards, requireAdminApi, cron fail-closed)

  • [Security] request-local fail-closed tenant isolation (AsyncLocalStorage db)

  • [CI] restore trustworthy repo scanners (root resolution, nonzero coverage, history secrets, advisory unavailable≠clean)

  • [CI] restore full dashboard typecheck in preflight/CI; add skipped-test/--forceExit budgets

  • [CI] fix broken template literal in Lighthouse PR-comment script

  • [Deps] replace faker and restore working ESLint toolchain

  • [Deps] pin js-yaml overrides to patched 3.15.0 / 4.3.0 (GHSA-52cp-r559-cp3m)

  • [Deps] pin tar override to >=7.5.19 (node-tar DoS advisories)

  • [Deps] bump brace-expansion override to patched 5.0.7+

  • [Client-Dashboard] fix typecheck breaks from lucide-react/framer-motion bumps

  • [Deploy] wire Vercel ignoreCommand to skip Dependabot and automatic Preview builds (Hobby quota)

  • [DB] unblock production migrate after failed platform_evolution

  • [DB] clear production P3009 on 20260405135145_platform_evolution (no-op migration + db-migrate workflow)

AI Tools

  • [I18n] correct orgType translation namespace lookup syntax

  • [Workflow v2] add single-app pilot focus, evidence-based page scoring,
    deterministic local gates, specialist contracts, composable skills, and
    certification-locked app sequencing

  • [Workflow v2] add bounded /dev loop plan/task execution, /pilot loop
    profile, durable task approvals/checkpoints, ownership-safe local delivery,
    and SHA/commit-bound merge and release gates

  • [Workflow v2] add a workspace-aware Guide renderer with live evidence,
    one safe next command, and complete agent/CLI handoff prompts

Apps

  • [Client-Dashboard] preserve email on failed login
  • [Security] audit remediation phase 4 — admin/CMS/CRM API auth, rate limits, shared HSTS+CSP headers
  • [Security] audit remediation phase 3 — trustworthy CI scanners + full typecheck
  • [Security] audit remediation phase 2 — request-local fail-closed tenant db (ALS)
  • [Security] audit remediation phase 1 — remove bootstrap reset route; sanitize CMS HTML/branding CSS
  • [Admin] publish CMS pages by id or slug

📦 GateFlow — Gate access management platform
🤖 Release automated by ralph-docs.js

Assets 2
Loading