Skip to content

Releases: jshields-ca/Docubil

Release list

v0.1.0

v0.1.0 Latest
Latest

Choose a tag to compare

View all tags
@jshields-ca jshields-ca released this 21 Sep 03:53
v0.1.0
fc6955d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Real critical/moderate/minor severity breakdown in /api/analyze and /api/remediate responses, plus per-issue fixed/remaining detail, replacing a hardcoded proportional guess in the old UI.
  • Full frontend rebuild: React + Vite + Tailwind CSS + Framer Motion, replacing the vanilla HTML/CSS/JS app, with accessibility (Vitest + Testing Library + jest-axe) enforced in CI.
  • CodeQL scanning, npm audit / pip-audit CI gates, and Dependabot for npm, pip, GitHub Actions, and Docker.
  • CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub issue/PR templates, and CODEOWNERS.
  • PLAN.md, a phased roadmap tracking project direction for contributors.
  • Multi-stage Docker build and a release pipeline publishing versioned, multi-arch images to GitHub Container Registry (see RELEASING.md).

Changed

  • BREAKING: Renamed the project from "PDF Accessibility Tool" (pdf-accessibility) to Docubil. Updated package name, Docker image/container names, and all documentation references.
  • BREAKING: Relicensed from MIT to AGPL-3.0-only.

Fixed

  • Resolved all npm audit findings in production dependencies (multer 1.x→2.x, uuid 9.x→11.1.1) and all pip-audit findings (pdfplumber upgrade, which pulled in a patched pdfminer.six).

Security

  • Removed 8 previously committed remediated PDF files from git tracking under output/.
  • Pruned requirements.txt from 12 packages to the 2 actually imported by the analysis code, reducing image size and attack surface.
📋 Full commit details

chore(deps): migrate root ESLint to flat config, bump to 10.x

ESLint 9+ removed the eslintrc-compat loader in v10, so the legacy
.eslintrc.js would simply stop being read -- there's no
ESLINT_USE_FLAT_CONFIG=false escape hatch left. Migrates the root config
to eslint.config.js (mirroring client/'s flat config), drops the now-
invalid --ext .js from the lint scripts, and bumps eslint to ^10.10.0 /
@eslint/js to ^10.0.1.

eslint:recommended's new preserve-caught-error rule caught 3 real spots
re-throwing an error without attaching { cause }, losing the original
stack trace on rethrow -- fixed by attaching it. Also dropped two unused
catch (_) bindings in favor of bindingless catch, which is what they
actually meant.

Verified against real Node 20 (matching CI): npm ci, lint, and the full
jest suite (37/37) all pass.

Supersedes #10 (a version-only Dependabot bump that couldn't work
without this migration).

Claude-Session: https://claude.ai/code/session_013x5pTFRUCur8PvBXHhKoXt

Co-authored-by: Claude noreply@anthropic.com

chore(deps-dev): bump lint-staged from 15.5.2 to 17.5.1 (#16)

Bumps lint-staged from 15.5.2 to 17.5.1.

updated-dependencies:

  • dependency-name: lint-staged
    dependency-version: 17.5.1
    dependency-type: direct:development
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump express-rate-limit from 7.5.1 to 8.7.0 (#15)

Bumps express-rate-limit from 7.5.1 to 8.7.0.

updated-dependencies:

  • dependency-name: express-rate-limit
    dependency-version: 8.7.0
    dependency-type: direct:production
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps-dev): bump husky from 8.0.3 to 9.1.7 (#11)

Bumps husky from 8.0.3 to 9.1.7.

updated-dependencies:

  • dependency-name: husky
    dependency-version: 9.1.7
    dependency-type: direct:development
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump pino-http from 10.5.0 to 11.0.0 (#12)

Bumps pino-http from 10.5.0 to 11.0.0.

updated-dependencies:

  • dependency-name: pino-http
    dependency-version: 11.0.0
    dependency-type: direct:production
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps-dev): bump jest from 29.7.0 to 30.5.1 (#18)

Bumps jest from 29.7.0 to 30.5.1.

updated-dependencies:

  • dependency-name: jest
    dependency-version: 30.5.1
    dependency-type: direct:development
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump helmet from 7.2.0 to 8.3.0 (#14)

Bumps helmet from 7.2.0 to 8.3.0.

updated-dependencies:

  • dependency-name: helmet
    dependency-version: 8.3.0
    dependency-type: direct:production
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump dotenv from 16.6.1 to 18.0.0 (#17)

Bumps dotenv from 16.6.1 to 18.0.0.

updated-dependencies:

  • dependency-name: dotenv
    dependency-version: 17.4.2
    dependency-type: direct:production
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps-dev): bump vitest from 4.1.11 to 5.0.1 in /client (#21)

Bumps vitest from 4.1.11 to 5.0.1.

updated-dependencies:

  • dependency-name: vitest
    dependency-version: 5.0.1
    dependency-type: direct:development
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps-dev): bump @testing-library/jest-dom in /client (#24)

Bumps @testing-library/jest-dom from 6.9.1 to 7.0.1.

updated-dependencies:

  • dependency-name: "@testing-library/jest-dom"
    dependency-version: 7.0.1
    dependency-type: direct:development
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump pikepdf from 8.7.1 to 10.13.0.post1 (#7)

Bumps pikepdf from 8.7.1 to 10.13.0.post1.

updated-dependencies:

  • dependency-name: pikepdf
    dependency-version: 10.13.0.post1
    dependency-type: direct:production
    update-type: version-update:semver-major
    ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump the npm-minor-patch group across 1 directory with 5 updates (#8)

Bumps the npm-minor-patch group with 5 updates in the / directory:

Package From To
compression 1.8.1 1.8.2
cors 2.8.5 2.8.6
swagger-jsdoc 6.2.8 6.3.0
cz-git 1.12.0 1.14.0
prettier 3.6.2 3.9.8

Updates compression from 1.8.1 to 1.8.2

Read more
Assets 2
Loading