v5.2.1

5.2.1 (2026-09-26)

Bug Fixes

• functions: add real-project sign-up env so the deploy resolves the allowlist param (d4220fa)

Retired — usersrole archive

Retirement archive for jdwillmsen/usersrole (GCP project usersrole), captured 2026-09-25/26 before the project is deleted.

The full record — why it was retired, the option analysis, the console/app walkthrough index, security findings, and how to run your own copy — is in docs/retirement/README.md and REPLICATE.md.

Assets: 30 mp4 recordings of the live app flows and the Firebase/GCP console tour (user emails/UIDs blurred), plus SHA256SUMS. Blank headless-OAuth popup clips were omitted; OAuth config is evidenced by screenshots in the repo.

🤖 Generated with Claude Code

v5.2.0

5.2.0 (2026-09-25)

Features

• functions: close sign-up unless an allowlist admits the address (fe6704f)
• run the whole app on the Firebase Emulator Suite (04d5f04)

Bug Fixes

• functions: let only an admin caller change roles (a8c9d10)
• ignore useEmulators outside a demo project (c504829)
• storage: confine each user to their own folder (2659024)

v5.1.0

5.1.0 (2026-09-25)

Features

• retirement-capture: headed, recorded capture browser for the consoles (8d81d51)

Bug Fixes

• retirement-capture: harden passfile path, v6 bind, teardown and blur note (f69ece7)

v5.0.2

5.0.2 (2026-09-23)

Dependencies

• deps: update all non-major dependencies (ee1a6b4)

v5.0.1

5.0.1 (2026-09-22)

Bug Fixes

• ci: install dependencies in coverage aggregation job (#101) (f6a08ed)
• ci: keep majors out of dependency groups so the rest can auto-merge (#132) (656c908)
• ci: make the Angular dependency group actually match (#135) (498019f)
• ci: prevent coverage artifact path collision in merge job (#100) (efef7fe)
• ci: use rebase, the only merge method these repositories allow (73ae011)
• deps: clear the advisory backlog, mostly by deleting dead tooling (6053d3a)
• deps: drop cypress-parallel, which was the whole remaining advisory tree (9e8003d)
• deps: patch the functions lockfile, which had its own copies (084cbed)
• deps: pin js-yaml to patched releases so Dependabot can run again (#125) (2ac786f)
• functions: allow only known origins through CORS (2b62685), closes #48
• ts: stop typechecking dependencies' own declaration files (d4e2701)

Release v5.0.0

Highlights

• Angular 16 → 22 — stepwise framework upgrade with Material 22, CDK 22, TypeScript 6
• Zoneless change detection — Zone.js removed; auth/theme/permissions/breakpoint state refactored to signals
• Firebase 9 → 12 — AngularFire removed in favor of rxfire + firebase SDK; App Check enabled
• Public /about page — build metadata (version, commit, build time), framework versions, runtime flags
• Tooling — Cypress 13 → 15, ESLint flat config, AG Grid v35, GitHub Actions refreshed; e2e stability fixes (token memoization for Firebase quota, exact-row scoping, unfocused specs)

What's Changed

• Develop by @jdwillmsen in #79
• ci: fix CI failures on Dependabot PRs + migrate artifact actions to v4 by @jdwillmsen in #89
• Harden env-file handling and drop unused App Check debug token by @jdwillmsen in #92
• Bump js-yaml from 4.1.0 to 4.2.0 in /functions by @dependabot[bot] in #90
• Bump protobufjs-cli and firebase-admin in /functions by @dependabot[bot] in #84
• Bump form-data and @cypress/request by @dependabot[bot] in #85
• Bump launch-editor from 2.6.0 to 2.14.1 by @dependabot[bot] in #87
• Bump protobufjs from 7.2.4 to 7.6.3 by @dependabot[bot] in #88
• chore(deps): upgrade to Angular 22 + latest stack, resolve vulnerabilities by @jdwillmsen in #94
• ci: pin live-deploy firebase-tools to 15.22.1 for ADC auth by @jdwillmsen in #95
• ci: track firebase-tools latest for hosting deploys by @jdwillmsen in #96
• feat: public /about page with build & runtime info by @jdwillmsen in #97
• chore: bump version to 5.0.0 by @jdwillmsen in #98
• test: unfocus roles and sign-up Cypress specs by @jdwillmsen in #99

Full Changelog: v4.1.0...v5.0.0

Release v4.1.0

• Added Workflow & Code Coverage Badges to Readme
• Added GitHub Icon to header
• Added GitHub Sign In Option
• Added Twitter Sign In Option
• Enabled App Check Enforcement for Cloud Firestore
• Increased Users Role font size on Header
• Added Formatting, Lint, Jest, Cypress, and Code Coverage workflows to CI/CD
• Standardized Cypress Data Tags (kebab-case)
• Other small improvements and enhancements to testing

Full Changelog: v4.0.0...v4.1.0

Release v4.0.0

• Added Custom Theme Selection for Users
• Added Responsive Design to Pages
• Converted App into a Progressive Web App (PWA)
• Added Roles Assignment Page for Admins
• Revamped the Home Page
• Added Read Only Role
• Added Tooltips
• Added Extra Light and Dark Palette Support
• Revamped the Users (Admin) Page
• Fixed Sign In Hidden Button Toggle Issue
• Fixed TypeError Issue
• Patched Create User Vulnerability
• Fixed Broken Testing
• Fixed Mat-Error Forms Issue
• Fixed Button Styling Issue
• Refactored All Services/Components into Different Modules
• Converted All Components to Standalone
• Enhanced/Added Testing:
  • Jest (Unit)
  • Cypress (Component)
  • Cypress (E2E)
• And other minor fixes/improvements

Full Changelog: v3.0.0...v4.0.0

Release v3.0.0

What's Changed

• Added Alert Service and Alerts Testing Page
• Refactored/Enhanced Snackbars to match New Alerts
• Added 4 additional palettes to all themes:
  • Warn
  • Error
  • Success
  • Info
• Added Multi-Role Support for Users
• All created accounts now are given the "user" role
• Adjusted header size to be more slim and modern
• Adjusted Red-Teal theme
• Adjusted Black-White theme
• Fixed Firestore DB excessive writes bug

Full Changelog: v2.1.0...v3.0.0