Skip to content

Release v2.12.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Sep 09:15
· 24 commits to main since this release
v2.12.4
99372b3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Combine Dependabot updates and fix open security alerts

Summary

  • Combine grouped Dependabot updates from #313, #315, #317, #318, #319, #320, #321, and #322 onto one CI-verified branch (no VERSION bump).
  • Land lockfile security floors the grouped PRs missed: js-yaml ≥ 4.3.1, nanoid ≥ 3.3.18, postcss ≥ 8.5.23, plus pypdf ≥ 6.16.1 (resolved to 6.17.0) and brace-expansion 5.0.9.
  • Fix CodeQL #21/#22 by navigating the cloud admin UI only to same-origin relative paths after login and organisation/tenant hard-reloads.

Test plan

  • Cloud backend pytest (610 passed)
  • Pi backend pytest (404 passed)
  • Cloud frontend tests + typecheck (365 passed)
  • Pi frontend tests (470 passed)
  • Website tests (8 passed)
  • ./scripts/lint.sh
  • After merge, confirm GitHub Dependabot alerts 63, 68–71, 73–74, 76–79 and Code scanning #21/#22 clear (may wait for dependency-graph refresh)
Assets 2
Loading