Release shell-pkg-v3.0.12

What's Changed

• Changed the fallback behavior of webgl add on by @eva-vashkevich in #18172
• Fix resource class form validator translation keys by @mantis-toboggan-md in #18188
• Changed to min-height to allow for multiline size by @marcelofukumoto in #18198
• [Test Improver] test(prefs): add unit tests for prefs store by @github-actions[bot] in #18196
• [Test Improver] test(useFormValidation): add unit tests for createRuleResolver, useFormRules, and useFormValidation by @github-actions[bot] in #18202
• [Test Improver] test(i18n): add unit tests for i18n store by @github-actions[bot] in #18197
• E2E: Use Helm instead of Docker by @richard-cox in #10897
• Sort list state on name if equal on state by @richard-cox in #18207
• Expose Registries section in GKE provisioning by @mantis-toboggan-md in #18214
• Lift code freeze and bump milestones by @rak-phillip in #18220
• improve extensions documentation by @aalves08 in #18216
• Fixed false warning when selecting dual stack configuration by @eva-vashkevich in #18222
• Prometheus rule release label by @momesgin in #18209
• tweaks to permissions in extensions workflows by @aalves08 in #18246
• update test wf to pin it to new tested hash by @aalves08 in #18256
• switch from kubernetesIngressNginx to kubernetesIngressNGINX with traefik >= v40 by @mantis-toboggan-md in #18257
• Temporary generic message to guide users to docs for disabling local auth by @richard-cox in #18284
• Use master version of branch_metadata when deploying Rancher in CI by @richard-cox in #18245
• Bump @rancher/cypress to v1.0.6 by @torchiaf in #18286
• Retain end session endpoint when toggling slo type by @rak-phillip in #18219
• fix assertion for extensions wf test by @aalves08 in #18282
• fix documentation based on product registration TS types update by @aalves08 in #18205
• Fix IconOrSvg - recalculate colors when src changes by @torchiaf in #18279
• Fix capi machine based e2e tests by @richard-cox in #18333
• fix unit testing guide on extension docs by @aalves08 in #18304
• fix workflows extension tests by @aalves08 in #18317
• Fix lato line heights by @rak-phillip in #18299
• Link to monitoring documentation by @momesgin in #18258
• Clean up removed rke1 feature flags by @rak-phillip in #18349
• Handle mgmt clusters in terrible states by @richard-cox in #18344
• Updates to Day 2 Ops by @eva-vashkevich in #18302
• Changed Day2 Ops annotation by @eva-vashkevich in #18357
• [Release 2.15] Step 1 - Add release-2.15 metadata & freeze all branches by @marcelofukumoto in #18345
• [Release 2.15] Step 2 - Create release-2.15 branch & reopen master for v2.16.0 by @marcelofukumoto in #18363
• [18155] principal lookup fails for ad users with non ascii eg chinese characters in their dn unable to fetch principal info escape emits invalid u url encoding by @marcelofukumoto in #18158
• Bump websocket-driver from 0.7.4 to 0.7.5 by @marcelofukumoto in #18382
• Bump braces from 2.3.2 to 3.0.3 in /storybook by @marcelofukumoto in #18379
• Bump form-data to fix CRLF injection (GHSA-hmw2-7cc7-3qxx) by @marcelofukumoto in #18365
• Bump js-cookie from 3.0.5 to 3.0.7 in /shell by @marcelofukumoto in #18358
• Bump node-forge from 1.3.1 to 1.4.0 in /shell by @marcelofukumoto in #18355
• Bump ws to 8.21.0 to fix GHSA-96hv-2xvq-fx4p (CVE-2026-48779) by @marcelofukumoto in #18283
• Bump path-to-regexp from 0.1.12 to 0.1.13 to fix ReDoS (GHSA-37ch-88jc-xwx2) by @marcelofukumoto in #18370
• Bump picomatch to 2.3.2/4.0.5 to fix ReDoS (GHSA-c2c7-rcm5-vvqj) by @marcelofukumoto in #18376
• feat(#17664): Add "Copy KubeConfig" bulk action to the Cluster Management page by @cnotv in #18340
• Bump cross-spawn from 5.1.0 to 7.0.6 to fix ReDoS (GHSA-3xgq-45jj-v275) by @marcelofukumoto in #18375
• [16905] Add additional configurations for color to be used, added secondary based on primary and added the other status as well by @marcelofukumoto in #18271
• Bump serialize-javascript to 7.0.3 to fix RCE (GHSA-5c6j-r48x-rmvq) by @marcelofukumoto in #18367
• Bump systeminformation from 5.31.6 to 5.31.17 by @dependabot[bot] in #18372
• [Test Improver] test(composables): add unit tests for useLabeledFormElement by @github-actions[bot] in #18273
• [Test Improver] test(composables): add unit tests for useRuntimeFlag and useLabeledSelect by @github-actions[bot] in #18210
• Bump systeminformation from 5.31.6 to 5.31.17 in /cypress by @dependabot[bot] in #18371
• Run validate PR workflow on label/unlabel by @nwmac in #18398
• [18416] Fix the wrong url on e2e by @marcelofukumoto in #18417
• Bump tmp from 0.2.5 to 0.2.6 in /cypress by @marcelofukumoto in #18404
• Bump minimatch to 5.1.8 to fix ReDoS (GHSA-7r86-cg39-jmmj, CVE-2026-27903) by @marcelofukumoto in #18405
• Add support for middle-click paste and copy from xterm by @nwmac in #18287
• Bump axios from 1.16.0 to 1.18.0 by @marcelofukumoto in #18411
• Bump dompurify from 3.3.2 to 3.4.11 by @dependabot[bot] in #18160
• Bump dompurify from 3.3.2 to 3.4.11 in /shell by @dependabot[bot] in #18096
• update docs on extensions - getting started - small typos by @aalves08 in #18402
• Bump js-yaml from 4.1.1 to 4.2.0 in /shell by @marcelofukumoto in #18409
• Bump brace-expansion to 5.0.7 in / (3 advisories across 1.x, 2.x, 5.x) by @marcelofukumoto in #18421
• [Test Improver] test(utils): add unit tests for favicon.js by @github-actions[bot] in #18267
• Bump shell-quote from 1.8.4 to 1.9.0 in the multi group across 4 directories by @marcelofukumoto in #18432
• [Test Improver] test(utils): add unit tests for untested auth.js functions by @github-actions[bot] in #18249
• Bump body-parser from 1.20.4 to 1.20.6 in /docusaurus by @dependabot[bot] in #18429
• Bump immutable from 5.1.5 to 5.1.9 by @dependabot[bot] in #18441
• Bump dompurify from 3.4.11 to 3.4.12 by @dependabot[bot] in #18440
• Bump tmp from 0.2.6 to 0.2.7 in /cypress by @marcelofukumoto in #18437
• add more logs to publish scripts by @aalves08 in #18427
• Bump webpack-dev-server from 4.15.2 to 5.2.6 in / by @marcelofukumoto in #18439
• [Test Improver] test(composables): add unit tests for useI18n by @github-actions[bot] in #18235
• Bump linkify-it from 3.0.3 to 5.0.2 by @marcelofukumoto in #18407
• Bump ws to 8.21.0 (and 7.5.11 for the 7.x line) to fix GHSA-96hv-2xvq-fx4p by @marcelofukumoto in #18434
• bugfix(#13786): Registry Secrets content not visible (created from json file) by @cnotv in #18419
• feat(#15606): Add global setting field for delete-infra-machine-on-failure-after by @cnotv in #18294
• Bump fast-uri from 3.1.2 to 3.1.4 by @marcelofukumoto in #18444
• Bump immutable from 5.1.5 to 5.1.9 by @marcelofukumoto in #18446
• Bump svgo from 2.8.2 to 2.8.3 in / by @marcelofukumoto in #18452
• Bump body-parser from 1.20.5 to 1.20.6 in /shell by @dependabot[bot] in #18423
• Automation: Update hosted cluster provisioning specs for provider page titles by @yonasberhe23 in #18435
• [16725][actions]Added options to have URL for easy access and to comment on the assoc… by @marcelofukumoto in #18406
• Bump serialize-javascript from 7.0.3 to 7.0.5 to fix CPU exhaustion DoS (GHSA-qj8w-gfj5-8c6v, CVE-2026-34043) by @marcelofukumoto in #18456
• Bump joi from 17.13.3 to 17.13.4 by @marcelofukumoto in #18455
• E2E: Improve setup & flakey tests by @richard-cox in #18247
• Bump postcss from 8.5.8 to 8.5.10 to fix XSS + line-return parsing (GHSA-qx2v-qp2m-jg93, GHSA-7fh5-64p2-3v2j) by @marcelofukumoto in #18459
• [ACTION] Fixes to use a different logic using the data from the TEST run by @marcelofukumoto in #18469
• Bump uuid from 8.3.2 to 11.1.1 by @marcelofukumoto in #18470
• Bump dompurify from 3.4.11 to 3.4.12 in /shell by @dependabot[bot] in #18447
• Bump body-parser from 1.20.5 to 1.20.6 by @dependabot[bot] in #18414
• Bump launch-editor from 2.13.1 to 2.14.1 in /shell by @dependabot[bot] in #18462
• Automation: Fix getHostStats task breaking Jenkins runs by @yonasberhe23 in #18438
• [10171][18238] Fix on model change, added deep check for nulls by @marcelofukumoto in #18241
• e2e: wait for local cluster + RBAC to converge before setup by @marcelofukumoto in #18389
• Only run update-cloud-date workflow in r/d by @richard-cox in #18476
• Bump markdown-it from 14.1.1 to 14.2.0 by @marcelofukumoto in #18473
• Bump follow-redirects from 1.15.2 to 1.16.0 in /shell by @marcelofukumoto in #18479
• Bump yaml from 1.10.2 to 1.10.3 and 2.8.2 to 2.8.3 to fix GHSA-48c2-rrv3-qjmp by @marcelofukumoto in #18486
• Bump postcss to 8.5.12 to fix GHSA-6g55-p6wh-862q (CVE-2026-45623) by @marcelofukumoto in #18487
• Bump @babel/core from 7.29.0 to 7.29.7 in / by @marcelofukumoto in #18489
• Bump picomatch from 2.3.1 to 2.3.2 in /storybook by @dependabot[bot] in #18482
• Bump serve-static from 1.14.1 to 1.16.0 in /shell by @dependabot[bot] in #18483
• Bump ejs from 3.1.9 to 3.1.10 in /shell by @marcelofukumoto in #18488
• Rename ButtonSize type to RcButtonSize by @rak-phillip in #18223
• Bump diff to 5.2.2 to fix jsdiff DoS (GHSA-73rr-hh4g-fpgx, CVE-2026-24001) by @marcelofukumoto in #18490
• Bump @tootallnate/once from 1.1.2 to 2.0.1 by @marcelofukumoto in #18491
• Bump serve-static from 1.14.1 to 1.16.3 in /shell by @marcelofukumoto in #18493
• Fix empty create token cluster scope selector by @richard-cox in #18475
• Bump gh-aw to v0.83.1 and recompile workflows by @rak-phillip in #18500
• Bump postcss from 8.5.10 to 8.5.18 by @marcelofukumoto in #18503
• Remove duplicate resolutions key from storybook by @rak-phillip in #18514
• update Group component to prevent occurences of nested-interactive violations with a11y by @aalves08 in #18480
• Bump brace-expansion from 5.0.7 to 5.0.8 in / by @marcelofukumoto in #18507
• Move express to devDependencies by @rak-phillip in #18088
• address

  ---

  a11y issue where separators that are just for cosmetical purposes should not be captured by screen readers by @aalves08 in #18468
• Add rancherVersion field to @rancher/shell/package.json to declare the minimum compatible Rancher version for the shell by @aalves08 in #18237
• [agentic] Agentic workflows gh aw upgrade by @marcelofukumoto in #18392
• [CI] pin get-helm-3 installer to v4.2.3 tag instead of main by @marcelofukumoto in #18527
• Treat vai feature flag ui-sql-cache as always enabled by @richard-cox in #18450
• pin 'test-build-extension-catalog-master' test to the correct hash by @aalves08 in #18531
• Show in context fail whale for unknown list resource type by @richard-cox in #18509
• Set kubectl.kubernetes.io/restartedAt annotation on workload redeploy by @marcelofukumoto in #18496
• [Automation] - Update masthead create selector for repositories spec by @izaac in #18524
• Add replica sets to workload side menu by @richard-cox in #18471
• Cluster Detail: Show the mgmt cluster status instead of provisioning cluster state by @richard-cox in #18494
• Added a daily sweep and automatically added on PR creation by @marcelofukumoto in #18477
• Eslint flat config v10 by @marcelofukumoto in #18157
• Update disable local auth message link, and add to additional place by @richard-cox in #18535
• Remove simple resolutions by @marcelofukumoto in #18521
• Bump cookie from 0.4.2 to 0.7.2 to fix GHSA-pxg6-pf52-xh8x (CVE-2024-47764) by @marcelofukumoto in #18492
• Add dynamic aria-label to the side nav group toggle icon by @aalves08 in #18554
• Fix branches-metadata.json entry for 2.15.0 by @richard-cox in #18561
• Fix issue with side nav losing highlight for some routes by @rak-phillip in #18497
• add missing roles to SelectIconGrid component by @aalves08 in #18537
• Add size prop to LabeledSelect for medium (32px) variant (#18296) by @rushk014 in #18297
• Add type check script by @rak-phillip in #18226
• [UNIT TEST] Jest upgrade 29 by @marcelofukumoto in #18532
• Improve port-pr workflow by @richard-cox in #18559
• add extension route guard to prevent access to routes that are bound to VirtualType registrations with IF conditions by @aalves08 in #18433
• Add Custom Resource info to Custom Resource Definition list by @richard-cox in #18240
• Fix editing virtual clusters by @mantis-toboggan-md in #18547
• Re-use the same comment appending the run on it instead. If there are more commits or force pushes it will only add to that one. by @marcelofukumoto in #18551
• [Release 2.15] Step 5 - Lift code freeze & bump milestones by @marcelofukumoto in #18584
• [CI test] Cypress 15.19.0 by @marcelofukumoto in #18550
• Migrate stalebot from agentic to a standard workflow by @codyrancher in #18436
• Run type check on pull requests by @rak-phillip in #18589
• [Automation] - Fix RKE2 custom cluster e2e flakiness by @izaac in #18573
• Implement a zod-helpers util for common validations by @rak-phillip in #18049
• bump shell version to release shell 3.0.13 by @aalves08 in #18576
• Fix type-check ci zod-helpers.test.ts error by @richard-cox in #18607
• Change package version to 3.0.12 by @aalves08 in #18609

New Contributors

• @rushk014 made their first contribution in #18297

Full Changelog: shell-pkg-v3.0.12-rc.7...shell-pkg-v3.0.12