mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 18:18:55 +00:00
eb6830daa24258023c75e90199efd1441b0b714f
7743 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
dependabot[bot]
|
eb6830daa2 |
build(deps): bump flowbite-react from 0.11.7 to 0.11.8 in /rust/gui-client in the flowbite group (#9754)
Bumps the flowbite group in /rust/gui-client with 1 update: [flowbite-react](https://github.com/themesberg/flowbite-react/tree/HEAD/packages/ui). Updates `flowbite-react` from 0.11.7 to 0.11.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/themesberg/flowbite-react/releases">flowbite-react's releases</a>.</em></p> <blockquote> <h2>flowbite-react@0.11.8</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/themesberg/flowbite-react/pull/1579">#1579</a> <a href=" |
||
|
Thomas Eizinger
|
7689402c50 |
chore(snownet): print packets of unknown format (#9818)
When receiving UDP packets that we cannot decode we log an error. In order to identify, whether we might have bugs in our decoding logic, we now also print the hex-encoding of the packet for further analysis on DEBUG. |
||
|
Thomas Eizinger
|
b4b50b5615 |
fix(gui-client): move tslink metadata (#9817)
A recent release of `tslink` now supports configuration via the `package.metadata` table which resolved a warning about "unknown key" that we have seeing for a while. |
||
|
Thomas Eizinger
|
0c151a2a96 |
chore(gateway): include ID of unknown peer in error message (#9819)
This will help with diagnosing issues in Sentry. |
||
|
Thomas Eizinger
|
f98fcca542 |
refactor(connlib): directly implement async fn (#9806)
At present, and as a result of how `connlib` evolved, we still implement a `Poll`-based function for receiving data on our UDP socket. Ever since we moved to dedicated threads for the UDP socket, we can directly block on "block" on receiving datagrams and don't have to poll the socket. This simplifies the implementation a fair bit. Additionally, it made me reailise that we currently don't expose any errors on the UDP socket. Likely, those will be ephemeral but it is still better than completely silencing them. |
||
|
Thomas Eizinger
|
f659ee2c00 |
refactor(windows): move valueName to text in .admx (#9796)
With a real AD (and not Intune), it seems the `valueName` attribute is required for text elements. Supersedes: #9419 Co-authored-by: Antoine Labarussias <antoinelabarussias@gmail.com> |
||
|
Thomas Eizinger
|
d4ba045eec |
chore(gui-client): move log about existing session (#9813)
This log is misplaced within the current `try_connect` function because that will also be called when we didn't have Internet while we tried to first connect and then witnessed a network change (in which case the token is cached in the `WaitingForNetwork` session state). Thus, we move the log to the `Connect` msg handler where we shouldn't have any existing session. |
||
|
dependabot[bot]
|
32151b6b0d |
build(deps): bump tslink from 0.3.0 to 0.4.2 in /rust (#9485)
Bumps [tslink](https://github.com/icsmw/tslink) from 0.3.0 to 0.4.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/icsmw/tslink/blob/master/changelog.md">tslink's changelog</a>.</em></p> <blockquote> <h1>0.4.2 (08.06.2025)</h1> <h2>Changes</h2> <ul> <li>Migrate settings to <code>package.metadata.tslink</code></li> </ul> <h1>0.4.1 (08.06.2025)</h1> <h2>Changes</h2> <ul> <li>Add support arrays in the context of <code>const</code></li> </ul> <h1>0.4.0 (08.06.2025)</h1> <h2>Features</h2> <ul> <li>Add support of <code>const</code> for primitive types</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/icsmw/tslink/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Thomas Eizinger
|
55aef6ae11 | chore: publish gui-client 1.5.5 (#9811) | ||
|
Thomas Eizinger
|
df57e6c3da |
docs(website): add changelog entries (#9794)
We've not added changelog entries for several of the PRs that went in recently. This adds some for the more user-facing changes and fixes that we are shipping. |
||
|
Thomas Eizinger
|
a87485a4e0 |
chore(connlib): silence EHOSTDOWN errors (#9797)
Certain UNIX systems such as macOS also use the EHOSTDOWN error to signal that a packet cannot be sent to a certain IP. There is nothing we can do about this error so we downgrade it from a WARN to a DEBUG like we do for other kinds of "unreachable" errors. |
||
|
Thomas Eizinger
|
237bd62b20 |
fix(snownet): don't generate candidates of mixed IP version (#9804)
When we shipped the feature of optimistc server-reflexive candidates, we failed to add a check to only combine address and base such that they are the same IP version. This is not harmful but unnecessary noise. |
||
|
Thomas Eizinger
|
e5fb6adbb4 |
fix(connlib): always signal server-reflexive candidates (#9802)
When we create a new connection, we seed the local ICE agent with all known local candidates, i.e. host addresses and allocations on relays. Server-reflexive candidates are never added to the local agent because you cannot send directly from a server-reflexive addresses. Instead, an agent sends from the _base_ of a server-reflexive candidate which in turn is known as a host candidate. The server-reflexive candidate is however signaled to the remote so it can try and send packets to it. Those will then be mapped by the NAT to our host candidate. In case we have just performed a network reset, our own server-reflexive candidate may not be known yet and therefore the seeding doesn't add an candidates. With no candidates being seeded, we also can't signal them to the remote. For candidates discovered later in this process, the signalling happens as part of adding them to the local agent. Because server-reflexive candidates are not added to the local agent, we currently miss out on signaling those to the remote IF they weren't already present when the ICE agent got created. This scenario can happen right after a network reset. In practice, it shouldn't be much of an issue though. As soon as we start sending from our host candidate, the remote will create a peer-reflexive candidate for it. It is however cleaner to directly send the server-reflexive candidate once we discover it. |
||
|
dependabot[bot]
|
5a5843bfa7 |
build(deps): bump reqwest from 0.12.20 to 0.12.22 in /rust (#9799)
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.20 to 0.12.22. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/releases">reqwest's releases</a>.</em></p> <blockquote> <h2>v0.12.22</h2> <h2>tl;dr</h2> <ul> <li>Fix socks proxies when resolving IPv6 destinations.</li> </ul> <h2>What's Changed</h2> <ul> <li>fix(socks): bracket IPv6 addresses when formatting destination host by <a href="https://github.com/0x676e67"><code>@0x676e67</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2753">seanmonstar/reqwest#2753</a></li> <li>Prepare v0.12.22 by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2754">seanmonstar/reqwest#2754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.21...v0.12.22">https://github.com/seanmonstar/reqwest/compare/v0.12.21...v0.12.22</a></p> <h2>v0.12.21</h2> <h2>tl;dr</h2> <ul> <li>Fix socks proxy to use <code>socks4a://</code> instead of <code>socks4h://</code>.</li> <li>Fix <code>Error::is_timeout()</code> to check for hyper and IO timeouts too.</li> <li>Fix request <code>Error</code> to again include URLs when possible.</li> <li>Fix socks connect error to include more context.</li> <li>(wasm) implement <code>Default</code> for <code>Body</code>.</li> </ul> <h2>What's Changed</h2> <ul> <li>chore: remove unused slab dep by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2729">seanmonstar/reqwest#2729</a></li> <li>docs: mention requiring Tokio by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2731">seanmonstar/reqwest#2731</a></li> <li>Fix Typos in Comments for Multipart and Redirect Tests by <a href="https://github.com/leopardracer"><code>@leopardracer</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2738">seanmonstar/reqwest#2738</a></li> <li>fix: request errors should include url by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2741">seanmonstar/reqwest#2741</a></li> <li>fix: consider timeout from hyper::Error by <a href="https://github.com/flisky"><code>@flisky</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2742">seanmonstar/reqwest#2742</a></li> <li>feat: add Default impl for wasm::Body by <a href="https://github.com/jpopesculian"><code>@jpopesculian</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2746">seanmonstar/reqwest#2746</a></li> <li>fix: Fix SOCKS4a proxy protocol matching by <a href="https://github.com/0x676e67"><code>@0x676e67</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2732">seanmonstar/reqwest#2732</a></li> <li>fix: add more context and description to SOCKS errors by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2750">seanmonstar/reqwest#2750</a></li> <li>Prepare v0.12.21 by <a href="https://github.com/seanmonstar"><code>@seanmonstar</code></a> in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2751">seanmonstar/reqwest#2751</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/leopardracer"><code>@leopardracer</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2738">seanmonstar/reqwest#2738</a></li> <li><a href="https://github.com/jpopesculian"><code>@jpopesculian</code></a> made their first contribution in <a href="https://redirect.github.com/seanmonstar/reqwest/pull/2746">seanmonstar/reqwest#2746</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/seanmonstar/reqwest/compare/v0.12.20...v0.12.21">https://github.com/seanmonstar/reqwest/compare/v0.12.20...v0.12.21</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md">reqwest's changelog</a>.</em></p> <blockquote> <h2>v0.12.22</h2> <ul> <li>Fix socks proxies when resolving IPv6 destinations.</li> </ul> <h2>v0.12.21</h2> <ul> <li>Fix socks proxy to use <code>socks4a://</code> instead of <code>socks4h://</code>.</li> <li>Fix <code>Error::is_timeout()</code> to check for hyper and IO timeouts too.</li> <li>Fix request <code>Error</code> to again include URLs when possible.</li> <li>Fix socks connect error to include more context.</li> <li>(wasm) implement <code>Default</code> for <code>Body</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
b3372370e8 |
build(deps): bump tokio from 1.45.1 to 1.46.1 in /rust (#9800)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.45.1 to 1.46.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tokio-rs/tokio/releases">tokio's releases</a>.</em></p> <blockquote> <h2>Tokio v1.46.1</h2> <h1>1.46.1 (July 4th, 2025)</h1> <p>This release fixes incorrect spawn locations in runtime task hooks for tasks spawned using <code>tokio::spawn</code> rather than <code>Runtime::spawn</code>. This issue only effected the spawn location in <code>TaskMeta::spawned_at</code>, and did not effect task locations in Tracing events.</p> <h2>Unstable</h2> <ul> <li>runtime: add <code>TaskMeta::spawn_location</code> tracking where a task was spawned (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7440">#7440</a>)</li> </ul> <p><a href="https://redirect.github.com/tokio-rs/tokio/issues/7440">#7440</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7440">tokio-rs/tokio#7440</a></p> <h2>Tokio v1.46.0</h2> <h1>1.46.0 (July 2nd, 2025)</h1> <h3>Fixed</h3> <ul> <li>net: fixed <code>TcpStream::shutdown</code> incorrectly returning an error on macOS (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7290">#7290</a>)</li> </ul> <h2>Added</h2> <ul> <li>sync: <code>mpsc::OwnedPermit::{same_channel, same_channel_as_sender}</code> methods (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7389">#7389</a>)</li> <li>macros: <code>biased</code> option for <code>join!</code> and <code>try_join!</code>, similar to <code>select!</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7307">#7307</a>)</li> <li>net: support for cygwin (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7393">#7393</a>)</li> <li>net: support <code>pope::OpenOptions::read_write</code> on Android (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7426">#7426</a>)</li> <li>net: add <code>Clone</code> implementation for <code>net::unix::SocketAddr</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7422">#7422</a>)</li> </ul> <h2>Changed</h2> <ul> <li>runtime: eliminate unnecessary lfence while operating on <code>queue::Local<T></code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7340">#7340</a>)</li> <li>task: disallow blocking in <code>LocalSet::{poll,drop}</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7372">#7372</a>)</li> </ul> <h2>Unstable</h2> <ul> <li>runtime: add <code>TaskMeta::spawn_location</code> tracking where a task was spawned (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7417">#7417</a>)</li> <li>runtime: removed borrow from <code>LocalOptions</code> parameter to <code>runtime::Builder::build_local</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7346">#7346</a>)</li> </ul> <h2>Documented</h2> <ul> <li>io: clarify behavior of seeking when <code>start_seek</code> is not used (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7366">#7366</a>)</li> <li>io: document cancellation safety of <code>AsyncWriteExt::flush</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7364">#7364</a>)</li> <li>net: fix docs for <code>recv_buffer_size</code> method (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7336">#7336</a>)</li> <li>net: fix broken link of <code>RawFd</code> in <code>TcpSocket</code> docs (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7416">#7416</a>)</li> <li>net: update <code>AsRawFd</code> doc link to current Rust stdlib location (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7429">#7429</a>)</li> <li>readme: fix double period in reactor description (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7363">#7363</a>)</li> <li>runtime: add doc note that <code>on_*_task_poll</code> is unstable (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7311">#7311</a>)</li> <li>sync: update broadcast docs on allocation failure (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7352">#7352</a>)</li> <li>time: add a missing panic scenario of <code>time::advance</code> (<a href="https://redirect.github.com/tokio-rs/tokio/issues/7394">#7394</a>)</li> </ul> <p><a href="https://redirect.github.com/tokio-rs/tokio/issues/7290">#7290</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7290">tokio-rs/tokio#7290</a> <a href="https://redirect.github.com/tokio-rs/tokio/issues/7307">#7307</a>: <a href="https://redirect.github.com/tokio-rs/tokio/pull/7307">tokio-rs/tokio#7307</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
Thomas Eizinger
|
ced0579f93 |
fix(ci): use outcome instead of conclusion (#9792)
According to the documentation [0]: > When a `continue-on-error step` fails, the `outcome` is `failure`, but the final `conclusion` is `success`. We update the action accordingly to make our retry mechanism work. [0]: https://docs.github.com/es/actions/reference/contexts-reference#steps-context Signed-off-by: Thomas Eizinger <thomas@eizinger.io> |
||
|
Jamil
|
b20c141759 |
feat(portal): add batch-insert to change logs (#9733)
Inserting a change log incurs some minor overhead for sending query over the network and reacting to its response. In many cases, this makes up the bulk of the actual time it takes to run the change log insert. To reduce this overhead and avoid any kind of processing delay in the WAL consumers, we introduce batch insert functionality with size `500` and timeout `30` seconds. If either of those two are hit, we flush the batch using `insert_all`. `insert_all` does not use `Ecto.Changeset`, so we need to be a bit more careful about the data we insert, and check the inserted LSNs to determine what to update the acknowledged LSN pointer to. The functionality to determine when to call the new `on_flush/1` callback lives in the replication_connection module, but the actual behavior of `on_flush/1` is left to the child modules to implement. The `Events.ReplicationConnection` module does not use flush behavior, and so does not override the defaults, which is not to use a flush mechanism. Related: #949 |
||
|
Thomas Eizinger
|
c48ed2a1a0 |
feat(connlib): introduce 2s grace-period upon ICE disconnect (#9793)
When Firezone detects that the user is switching networks, we perform an internal reset where we clear all connections and also all local candidates. As part of the reset, we then send STUN requests to our relays to re-discover our host and server-reflexive candidates. In this scenario, the Gateway is still connected to its network and is therefore able to send its candidates as soon as it receives the connection intent from the portal. This opens us up to the following race condition which leads to a false-positive "ICE timeout": 1. Client roams network and clears all local state. 2. Client sends STUN binding requests to relays. 3. Client initiates a new connection. 4. Gateway acknowledges connection. 5. Client creates new ICE agent and attempts to seed it with local candidates. We don't have a response from the relays yet and therefore don't have any local candidates. 6. Client receives remote candidates and adds them to the agent. 7. ICE agent is unable to form pairs and therefore concludes that it is disconnected. 8. We treat the disconnected event as a connection failure and clear the connection. 9. Relays respond to STUN binding requests but we cannot add the new candidates to the connection because it is already cleared. The ICE spec states that after an agent transitions into the "disconnected" state, it may transition back to "connected" if e.g. new candidates are added as those allow the forming of new pairs. In general, it is recommended to not treat "disconnected" as a permanent state. To honor this recommendation, we introduce a 2s grace-period in which we can recover from such a "disconnected" state. |
||
|
Jamil
|
4a02e89b43 | ci: publish headless 1.5.1 (#9791) | ||
|
Jamil
|
c869bcfe13 |
chore(portal): tag Relay WAL todos (#9767)
These aren't a priority to clean up right now, but I wanted to tag them so I don't forget to do it later on. |
||
|
Jamil
|
2a38c532af |
chore(portal): remove gateway masquerade option (#9790)
AFAIK these are ignored by connlib. Instead, we configure masquerading on the host. |
||
|
Thomas Eizinger
|
f04c23c8d9 |
ci: retry authentication with GCP (#9786)
At present, it appears that `actions/toolkit` has a bug where it isn't always able to correctly fetch an ID token. See https://github.com/actions/toolkit/issues/2098 for the upstream issue. As a result, our CI often fails relatively often. A simple restart usually fixes the issue. This however is annoying because it means PRs get de-queued from the merge-queue or don't queue in the first place and therefore require baby-sitting. To fix this, we attempt to build a retry-mechanism from within the action. Using `continue-on-error`, we tell the "auth" step to continue, even if it fails. Following that, we try to authenticate again but only if the previous one failed. We do this up to 3 times before actually giving up. --------- Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com> |
||
|
Thomas Eizinger
|
a6796fe8b2 |
fix(telemetry): always use hex-encoded ID as user ID (#9781)
We are currently in the process of transitioning the Firezone Clients away from always hashing the ID before sending it to the portal. This will make lookups and correlation of data between our systems much easier. The way we are performing this migration is that new installations of Firezone will directly generate a 64 char hex-string as the Firezone ID. If the ID looks like a UUID (which is the old format), we still hash it and send it to the portal, otherwise we send it as-is. Presently, the telemetry integration with Sentry and PostHog do the opposite. They always sets the Firezone ID as-is and includes an `external_id` that is the hashed form if it detects that it is a UUID (or in the case of PostHog, create an alias). It is much better to flip this around and always set the hex-string as the user id. That way, we can simply always filter by the `user.id` attribute in Sentry and always refer to the ID that we are seeing in the portal. |
||
|
Thomas Eizinger
|
8b001b3e8b |
refactor(telemetry): use atomics for feature-flags (#9783)
Feature flags may be accessed _very_ often such as on every log statement with #9780. To make sure this is as performant as possible, we move from an `RwLock` to atomic booleans with relaxed ordering. |
||
|
Thomas Eizinger
|
ec2599d545 |
chore(rust): simplify stream logs feature (#9780)
Instead of conditionally enabling the `logs` feature in the Sentry client, we always enable it and control via the `tracing` integration, which events should get forwarded to Sentry. The feature-flag check accesses only shared-memory and is therefore really fast. We already re-evaluate feature flags on a timer which means this boolean will flip over automatically and logs will be streamed to Sentry. |
||
|
Thomas Eizinger
|
0617c96b69 |
chore(nix): follow system release channel (#9784)
In order to avoid glibc mismatches, the dev-shell started by the nix flake should follow the system channel instead of pinning a version by itself. |
||
|
Thomas Eizinger
|
abfdda18d8 |
fix(gui-client): allow disabling telemetry (#9785)
Resolves: #9778 |
||
|
Thomas Eizinger
|
a556b39136 | chore: remove duplicate labels from actionlint configuration (#9789) | ||
|
Thomas Eizinger
|
cb9b087bf3 |
refactor(ci): reuse gcp-docker-login action (#9787)
It appears the code for authenticating with GCP is duplicated in some of our workflows. |
||
|
Thomas Eizinger
|
01e3fea0ac |
fix(gui-client): don't panic on existing session (#9779)
Customer hit what seems to be a rare race condition where we try to connect whilst we already have a session. I don't know which state it is in so I am replacing it with a WARN log to learn more about this in Sentry in case it gets hit again. |
||
|
Thomas Eizinger
|
4be8e5458a |
chore(telemetry): don't fmt fields from the log crate (#9774)
Those are internal to `tracing` and don't need to be formatted into the message we send to Sentry. |
||
|
Thomas Eizinger
|
e0c607dd57 |
chore(gui-client): remove unnecessary identify call (#9775)
It is unnecessary to call this in the GUI client because the tunnel service will already do this _and_ supply the `account_slug` with it as well. |
||
|
dependabot[bot]
|
fc256d7e37 |
build(deps): bump phoenix_ecto from 4.6.4 to 4.6.5 in /elixir (#9755)
Bumps [phoenix_ecto](https://github.com/phoenixframework/phoenix_ecto) from 4.6.4 to 4.6.5. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/phoenixframework/phoenix_ecto/blob/main/CHANGELOG.md">phoenix_ecto's changelog</a>.</em></p> <blockquote> <h2>v4.6.5</h2> <ul> <li>Bug fixes <ul> <li>Unallow existing allowances when attempting to allow a Plug to access a connection</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/phoenixframework/phoenix_ecto/commits/v4.6.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Thomas Eizinger
|
17a1d36eae |
fix(gui-client): set IO error type for missing non-tunnel routes (#9777)
On Windows - in order to prevent routing loops - we resolve the best "non-tunnel" route to a particular host for each IP address. The resulting source IP is then used as source for packets leaving our interface. In case the system doesn't have IPv6 connectivity or are simply no routes available, we fail this "source IP resolver" with an IO error. Presently, this uses the "other" IO error type which causes this to be logged on a WARN level in the event-loop. The IO error types `HostUnreachable` and `NetworkUnreachable` are expected during normal operation of Firezone and are therefore only logged on DEBUG. By changing this IO error type, we fix the WARN log spam on Windows for machines without IPv6 connectivity. |
||
|
Brian Manifold
|
83e71f45b8 |
fix(portal): catch all errors when sending welcome email (#9776)
Why: * We were previously only catching the `:rate_limited` error when sending welcome emails. This update adds a catch-all case to gracefully handle the error and alert us. --------- Signed-off-by: Brian Manifold <bmanifold@users.noreply.github.com> Co-authored-by: Jamil <jamilbk@users.noreply.github.com> |
||
|
Thomas Eizinger
|
94660cbb2c |
chore(gui-smoke-test): wait for tunnel service to boot (#9766)
The tunnel service creates the Firezone ID upon start-up. With recent changes to the GUI client, we now require reading the ID file when starting the GUI client. This exposes a race condition in our smoke-tests where we start them both at roughly the same time. To fix this, we sleep for 500ms after starting the tunnel process. |
||
|
Thomas Eizinger
|
7e25027c73 | ci: fix automated PR creation on publish (#9739) | ||
|
dependabot[bot]
|
29eb16393a |
build(deps): bump gradle/actions from 4.4.0 to 4.4.1 in /.github/actions/setup-android (#9741)
Bumps [gradle/actions](https://github.com/gradle/actions) from 4.4.0 to 4.4.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gradle/actions/releases">gradle/actions's releases</a>.</em></p> <blockquote> <h2>v4.4.1</h2> <p>This patch release fixes a bug in Develocity Injection with a custom plugin repository. The <code>gradle-plugin-repository-*</code> action parameters were not being correctly mapped to environment variables that are read by the Develocity Injection init script.</p> <p>This issue has been fixed by setting the correct environment variables:</p> <ul> <li><code>gradle-plugin-repository-url</code> is mapped to <code>DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_URL</code></li> <li><code>gradle-plugin-repository-username</code> is mapped to <code>DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_USERNAME</code></li> <li><code>gradle-plugin-repository-password</code> is mapped to <code>DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_PASSWORD</code></li> </ul> <p>Additionally, these parameters can now be used to configure a custom plugin repository for the GitHub Dependency Graph Gradle Plugin, required for dependency submission.</p> <h2>What's Changed</h2> <ul> <li>Dependency updates by <a href="https://github.com/bigdaz"><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/667">gradle/actions#667</a></li> <li>Fix plugin repository env vars by <a href="https://github.com/bigdaz"><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/669">gradle/actions#669</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gradle/actions/compare/v4.4.0...v4.4.1">https://github.com/gradle/actions/compare/v4.4.0...v4.4.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
0c274d3e36 |
build(deps): bump the tauri group in /rust/gui-client with 2 updates (#9740)
Bumps the tauri group in /rust/gui-client with 2 updates: [@tauri-apps/api](https://github.com/tauri-apps/tauri) and [@tauri-apps/cli](https://github.com/tauri-apps/tauri). Updates `@tauri-apps/api` from 2.5.0 to 2.6.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tauri-apps/tauri/releases"><code>@tauri-apps/api</code>'s releases</a>.</em></p> <blockquote> <h2><code>@tauri-apps/api</code> v2.6.0</h2> <!-- raw HTML omitted --> <pre><code>No known vulnerabilities found </code></pre> <!-- raw HTML omitted --> <h2>[2.6.0]</h2> <h3>New Features</h3> <ul> <li><a href=" |
||
|
dependabot[bot]
|
8ed950fcc0 |
build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#9745)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.10.0 to 3.11.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's releases</a>.</em></p> <blockquote> <h2>v3.11.1</h2> <ul> <li>Fix <code>keep-state</code> not being respected by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/429">docker/setup-buildx-action#429</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.11.0...v3.11.1">https://github.com/docker/setup-buildx-action/compare/v3.11.0...v3.11.1</a></p> <h2>v3.11.0</h2> <ul> <li>Keep BuildKit state support by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/427">docker/setup-buildx-action#427</a></li> <li>Remove aliases created when installing by default by <a href="https://github.com/hashhar"><code>@hashhar</code></a> in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/139">docker/setup-buildx-action#139</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.56.0 to 0.62.1 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/422">docker/setup-buildx-action#422</a> <a href="https://redirect.github.com/docker/setup-buildx-action/pull/425">docker/setup-buildx-action#425</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.10.0...v3.11.0">https://github.com/docker/setup-buildx-action/compare/v3.10.0...v3.11.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
5440235d3e |
build(deps): bump actions/cache from 4.2.0 to 4.2.3 in /.github/actions/setup-elixir (#9742)
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.0 to 4.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/releases">actions/cache's releases</a>.</em></p> <blockquote> <h2>v4.2.3</h2> <h2>What's Changed</h2> <ul> <li>Update to use <code>@actions/cache</code> 4.0.3 package & prepare for new release by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1577">actions/cache#1577</a> (SAS tokens for cache entries are now masked in debug logs)</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1577">actions/cache#1577</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v4.2.2...v4.2.3">https://github.com/actions/cache/compare/v4.2.2...v4.2.3</a></p> <h2>v4.2.2</h2> <h2>What's Changed</h2> <blockquote> <p>[!IMPORTANT] As a reminder, there were important backend changes to release v4.2.0, see <a href="https://github.com/actions/cache/releases/tag/v4.2.0">those release notes</a> and <a href="https://github.com/actions/cache/discussions/1510">the announcement</a> for more details.</p> </blockquote> <ul> <li>Bump <code>@actions/cache</code> to v4.0.2 by <a href="https://github.com/robherley"><code>@robherley</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1560">actions/cache#1560</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v4.2.1...v4.2.2">https://github.com/actions/cache/compare/v4.2.1...v4.2.2</a></p> <h2>v4.2.1</h2> <h2>What's Changed</h2> <blockquote> <p>[!IMPORTANT] As a reminder, there were important backend changes to release v4.2.0, see <a href="https://github.com/actions/cache/releases/tag/v4.2.0">those release notes</a> and <a href="https://github.com/actions/cache/discussions/1510">the announcement</a> for more details.</p> </blockquote> <ul> <li>docs: GitHub is spelled incorrectly in caching-strategies.md by <a href="https://github.com/janco-absa"><code>@janco-absa</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1526">actions/cache#1526</a></li> <li>docs: Make the "always save prime numbers" example more clear by <a href="https://github.com/Tobbe"><code>@Tobbe</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1525">actions/cache#1525</a></li> <li>Update force deletion docs due a recent deprecation by <a href="https://github.com/sebbalex"><code>@sebbalex</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1500">actions/cache#1500</a></li> <li>Bump <code>@actions/cache</code> to v4.0.1 by <a href="https://github.com/robherley"><code>@robherley</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1554">actions/cache#1554</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/janco-absa"><code>@janco-absa</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1526">actions/cache#1526</a></li> <li><a href="https://github.com/Tobbe"><code>@Tobbe</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1525">actions/cache#1525</a></li> <li><a href="https://github.com/sebbalex"><code>@sebbalex</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1500">actions/cache#1500</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v4.2.0...v4.2.1">https://github.com/actions/cache/compare/v4.2.0...v4.2.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's changelog</a>.</em></p> <blockquote> <h1>Releases</h1> <h3>4.2.3</h3> <ul> <li>Bump <code>@actions/cache</code> to v4.0.3 (obfuscates SAS token in debug logs for cache entries)</li> </ul> <h3>4.2.2</h3> <ul> <li>Bump <code>@actions/cache</code> to v4.0.2</li> </ul> <h3>4.2.1</h3> <ul> <li>Bump <code>@actions/cache</code> to v4.0.1</li> </ul> <h3>4.2.0</h3> <p>TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability. <a href="https://github.com/actions/cache">actions/cache</a> now integrates with the new cache service (v2) APIs.</p> <p>The new service will gradually roll out as of <strong>February 1st, 2025</strong>. The legacy service will also be sunset on the same date. Changes in these release are <strong>fully backward compatible</strong>.</p> <p><strong>We are deprecating some versions of this action</strong>. We recommend upgrading to version <code>v4</code> or <code>v3</code> as soon as possible before <strong>February 1st, 2025.</strong> (Upgrade instructions below).</p> <p>If you are using pinned SHAs, please use the SHAs of versions <code>v4.2.0</code> or <code>v3.4.0</code></p> <p>If you do not upgrade, all workflow runs using any of the deprecated <a href="https://github.com/actions/cache">actions/cache</a> will fail.</p> <p>Upgrading to the recommended versions will not break your workflows.</p> <h3>4.1.2</h3> <ul> <li>Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - <a href="https://redirect.github.com/actions/cache/pull/1474">#1474</a></li> <li>Security fix: Bump braces from 3.0.2 to 3.0.3 - <a href="https://redirect.github.com/actions/cache/pull/1475">#1475</a></li> </ul> <h3>4.1.1</h3> <ul> <li>Restore original behavior of <code>cache-hit</code> output - <a href="https://redirect.github.com/actions/cache/pull/1467">#1467</a></li> </ul> <h3>4.1.0</h3> <ul> <li>Ensure <code>cache-hit</code> output is set when a cache is missed - <a href="https://redirect.github.com/actions/cache/pull/1404">#1404</a></li> <li>Deprecate <code>save-always</code> input - <a href="https://redirect.github.com/actions/cache/pull/1452">#1452</a></li> </ul> <h3>4.0.2</h3> <ul> <li>Fixed restore <code>fail-on-cache-miss</code> not working.</li> </ul> <h3>4.0.1</h3> <ul> <li>Updated <code>isGhes</code> check</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
78a2c4dcef |
build(deps): bump the sentry group in /rust/gui-client with 2 updates (#9744)
Bumps the sentry group in /rust/gui-client with 2 updates: [@sentry/core](https://github.com/getsentry/sentry-javascript) and [@sentry/react](https://github.com/getsentry/sentry-javascript). Updates `@sentry/core` from 9.27.0 to 9.33.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-javascript/releases"><code>@sentry/core</code>'s releases</a>.</em></p> <blockquote> <h2>9.33.0</h2> <h3>Important Changes</h3> <ul> <li><strong>feat: Add opt-in <code>vercelAiIntegration</code> to cloudflare & vercel-edge (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16732">#16732</a>)</strong></li> </ul> <p>The <code>vercelAiIntegration</code> is now available as opt-in for the Cloudflare and the Next.js SDK for Vercel Edge. To use it, add the integration in <code>Sentry.init</code></p> <pre lang="js"><code>Sentry.init({ tracesSampleRate: 1.0, integrations: [Sentry.vercelAIIntegration()], }); </code></pre> <p>And enable telemetry for Vercel AI calls</p> <pre lang="js"><code>const result = await generateText({ model: openai('gpt-4o'), experimental_telemetry: { isEnabled: true, }, }); </code></pre> <ul> <li><strong>feat(node): Add postgresjs instrumentation (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16665">#16665</a>)</strong></li> </ul> <p>The Node.js SDK now includes instrumentation for <a href="https://www.npmjs.com/package/postgres">Postgres.js</a>.</p> <ul> <li><strong>feat(node): Use diagnostics channel for Fastify v5 error handling (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16715">#16715</a>)</strong></li> </ul> <p>If you're on Fastify v5, you no longer need to call <code>setupFastifyErrorHandler</code>. It is done automatically by the node SDK. Older versions still rely on calling <code>setupFastifyErrorHandler</code>.</p> <h3>Other Changes</h3> <ul> <li>feat(cloudflare): Allow interop with OpenTelemetry emitted spans (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16714">#16714</a>)</li> <li>feat(cloudflare): Flush after <code>waitUntil</code> (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16681">#16681</a>)</li> <li>fix(nextjs): Remove <code>ai</code> from default server external packages (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16736">#16736</a>)</li> </ul> <p>Work in this release was contributed by <a href="https://github.com/0xbad0c0d3"><code>@0xbad0c0d3</code></a>. Thank you for your contribution!</p> <h2>Bundle size 📦</h2> <table> <thead> <tr> <th>Path</th> <th>Size</th> </tr> </thead> <tbody> <tr> <td><code>@sentry/browser</code></td> <td>23.42 KB</td> </tr> <tr> <td><code>@sentry/browser</code> - with treeshaking flags</td> <td>23.2 KB</td> </tr> <tr> <td><code>@sentry/browser</code> (incl. Tracing)</td> <td>37.93 KB</td> </tr> <tr> <td><code>@sentry/browser</code> (incl. Tracing, Replay)</td> <td>75.18 KB</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md"><code>@sentry/core</code>'s changelog</a>.</em></p> <blockquote> <h2>9.33.0</h2> <h3>Important Changes</h3> <ul> <li><strong>feat: Add opt-in <code>vercelAiIntegration</code> to cloudflare & vercel-edge (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16732">#16732</a>)</strong></li> </ul> <p>The <code>vercelAiIntegration</code> is now available as opt-in for the Cloudflare and the Next.js SDK for Vercel Edge. To use it, add the integration in <code>Sentry.init</code></p> <pre lang="js"><code>Sentry.init({ tracesSampleRate: 1.0, integrations: [Sentry.vercelAIIntegration()], }); </code></pre> <p>And enable telemetry for Vercel AI calls</p> <pre lang="js"><code>const result = await generateText({ model: openai('gpt-4o'), experimental_telemetry: { isEnabled: true, }, }); </code></pre> <ul> <li><strong>feat(node): Add postgresjs instrumentation (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16665">#16665</a>)</strong></li> </ul> <p>The Node.js SDK now includes instrumentation for <a href="https://www.npmjs.com/package/postgres">Postgres.js</a>.</p> <ul> <li><strong>feat(node): Use diagnostics channel for Fastify v5 error handling (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16715">#16715</a>)</strong></li> </ul> <p>If you're on Fastify v5, you no longer need to call <code>setupFastifyErrorHandler</code>. It is done automatically by the node SDK. Older versions still rely on calling <code>setupFastifyErrorHandler</code>.</p> <h3>Other Changes</h3> <ul> <li>feat(cloudflare): Allow interop with OpenTelemetry emitted spans (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16714">#16714</a>)</li> <li>feat(cloudflare): Flush after <code>waitUntil</code> (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16681">#16681</a>)</li> <li>fix(nextjs): Remove <code>ai</code> from default server external packages (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16736">#16736</a>)</li> </ul> <p>Work in this release was contributed by <a href="https://github.com/0xbad0c0d3"><code>@0xbad0c0d3</code></a>. Thank you for your contribution!</p> <h2>9.32.0</h2> <h3>Important Changes</h3> <ul> <li>feat(browser): Add CLS sources to span attributes (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/16710">#16710</a>)</li> </ul> <p>Enhances CLS (Cumulative Layout Shift) spans by adding attributes detailing the elements that caused layout shifts.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
ad126f72ba |
build(deps): bump nimble_csv from 1.2.0 to 1.3.0 in /elixir (#9757)
Bumps [nimble_csv](https://github.com/dashbitco/nimble_csv) from 1.2.0 to 1.3.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/dashbitco/nimble_csv/blob/master/CHANGELOG.md">nimble_csv's changelog</a>.</em></p> <blockquote> <h2>v1.3.0 (2025-06-24)</h2> <ul> <li>Require Elixir 1.15+</li> <li>Add <code>generated: true</code> to <code>newlines_separator</code> macro</li> <li>Fix warnings on Elixir 1.20+</li> <li>Document OWASP official recommendations for CSV injections</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
afbadf1acb |
build(deps-dev): bump mix_audit from 2.1.4 to 2.1.5 in /elixir (#9753)
Bumps [mix_audit](https://github.com/mirego/mix_audit) from 2.1.4 to 2.1.5. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mirego/mix_audit/blob/main/CHANGELOG.md">mix_audit's changelog</a>.</em></p> <blockquote> <h2>2.1.5 (2025-06-09)</h2> <ul> <li>Update dependencies</li> <li>Use <code>System.stop/1</code> instead of <code>System.halt/1</code></li> <li>Use <code>System.user_home()</code> instead of <code>System.get_env("HOME")</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
386df2c62b |
build(deps): bump framer-motion from 12.16.0 to 12.20.2 in /website (#9747)
Bumps [framer-motion](https://github.com/motiondivision/motion) from 12.16.0 to 12.20.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/motiondivision/motion/blob/main/CHANGELOG.md">framer-motion's changelog</a>.</em></p> <blockquote> <h2>[12.20.2] 2025-07-01</h2> <h3>Fixed</h3> <ul> <li>Updated <code>Transition</code> type to be more permissive.</li> </ul> <h2>[12.20.1] 2025-06-30</h2> <h3>Fixed</h3> <ul> <li>Updated <code>Target</code> type to match previous definition.</li> </ul> <h2>[12.20.0] 2025-06-30</h2> <h3>Added</h3> <ul> <li>Pass a shadow DOM root element via <code>AnimatePresence</code> <code>root</code> prop to attach <code>"popLayout"</code> styles to a different root element.</li> </ul> <h2>[12.19.4] 2025-06-30</h2> <h3>Fixed</h3> <ul> <li>Ensure animations are removed from scope when finished.</li> </ul> <h2>[12.19.3] 2025-06-27</h2> <h3>Fixed</h3> <ul> <li>Restore some deprecated types.</li> <li>Add <code>transformPerspective</code> to <code>TargetAndTransition</code>.</li> <li>Filter number-indexed and function props from <code>CSSStyleDeclaration</code>.</li> </ul> <h2>[12.19.2] 2025-06-27</h2> <h3>Fixed</h3> <ul> <li>React: Prevent duplicate layout animation commits within Suspense boundaries.</li> </ul> <h2>[12.19.1] 2025-06-23</h2> <h3>Fixed</h3> <ul> <li>React: Fix <code>export *</code> error message in Next.js.</li> </ul> <h2>[12.19.0] 2025-06-23</h2> <h3>Added</h3> <ul> <li>React: <code>usePageInView</code> for tracking document visibility.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
64819e43b8 |
build(deps): bump postcss from 8.5.4 to 8.5.6 in /website (#9746)
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.4 to 8.5.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.6</h2> <ul> <li>Fixed <code>ContainerWithChildren</code> type discriminating (by <a href="https://github.com/Goodwine"><code>@Goodwine</code></a>).</li> </ul> <h2>8.5.5</h2> <ul> <li>Fixed <code>package.json</code>→<code>exports</code> compatibility with some tools (by <a href="https://github.com/JounQin"><code>@JounQin</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.6</h2> <ul> <li>Fixed <code>ContainerWithChildren</code> type discriminating (by <a href="https://github.com/Goodwine"><code>@Goodwine</code></a>).</li> </ul> <h2>8.5.5</h2> <ul> <li>Fixed <code>package.json</code>→<code>exports</code> compatibility with some tools (by <a href="https://github.com/JounQin"><code>@JounQin</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
c700d30371 |
build(deps): bump ecto_sql from 3.12.1 to 3.13.2 in /elixir (#9748)
Bumps [ecto_sql](https://github.com/elixir-ecto/ecto_sql) from 3.12.1 to 3.13.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/elixir-ecto/ecto_sql/blob/master/CHANGELOG.md">ecto_sql's changelog</a>.</em></p> <blockquote> <h2>v3.13.2 (2025-06-24)</h2> <h3>Enhancements</h3> <ul> <li>[sandbox] Allow passing through opts in <code>Ecto.Adapters.SQL.Sandbox.allow/4</code> calls</li> <li>[sql] Add support for <code>ON DELETE SET DEFAULT</code></li> </ul> <h3>Bug fixes</h3> <ul> <li>[postgres] Fix nested array generated time columns</li> </ul> <h2>v3.13.1 (2025-06-20)</h2> <h3>Bug fixes</h3> <ul> <li>[postgres] Fix nested array generated columns</li> </ul> <h2>v3.13.0 (2025-06-18)</h2> <h3>Enhancements</h3> <ul> <li>[Ecto.Migration] Add support for index directions</li> <li>[sql] Support <code>:log_stacktrace_mfa</code> for filtering or modifying stacktrace-derived info in query logs</li> <li>[mysql] Support arrays using JSON for MariaDB</li> <li>[mysql] Allow to specify <code>:prepare</code> per operation</li> <li>[postgres] Add support for collations in Postgres</li> <li>[postgres] Allow source fields in <code>json_extract_path</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
c26e1a39f5 |
build(deps): bump @next/third-parties from 15.3.3 to 15.3.4 in /website (#9762)
Bumps
[@next/third-parties](https://github.com/vercel/next.js/tree/HEAD/packages/third-parties)
from 15.3.3 to 15.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases"><code>@next/third-parties</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v15.3.4</h2>
<blockquote>
<p>[!NOTE]<br />
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>[metadata] render streaming metadata on the top level (<a
href="https://github.com/vercel/next.js/tree/HEAD/packages/third-parties/issues/80566">#80566</a>)</li>
<li>[fix] clone the config module to avoid mutation (<a
href="https://github.com/vercel/next.js/tree/HEAD/packages/third-parties/issues/80573">#80573</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/huozhi"><code>@huozhi</code></a> for
helping!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="
|
||
|
dependabot[bot]
|
306d30271a |
build(deps): bump actions/cache from 4.2.0 to 4.2.3 in /.github/actions/setup-tauri-v2 (#9761)
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.0 to 4.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/releases">actions/cache's releases</a>.</em></p> <blockquote> <h2>v4.2.3</h2> <h2>What's Changed</h2> <ul> <li>Update to use <code>@actions/cache</code> 4.0.3 package & prepare for new release by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1577">actions/cache#1577</a> (SAS tokens for cache entries are now masked in debug logs)</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1577">actions/cache#1577</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v4.2.2...v4.2.3">https://github.com/actions/cache/compare/v4.2.2...v4.2.3</a></p> <h2>v4.2.2</h2> <h2>What's Changed</h2> <blockquote> <p>[!IMPORTANT] As a reminder, there were important backend changes to release v4.2.0, see <a href="https://github.com/actions/cache/releases/tag/v4.2.0">those release notes</a> and <a href="https://github.com/actions/cache/discussions/1510">the announcement</a> for more details.</p> </blockquote> <ul> <li>Bump <code>@actions/cache</code> to v4.0.2 by <a href="https://github.com/robherley"><code>@robherley</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1560">actions/cache#1560</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v4.2.1...v4.2.2">https://github.com/actions/cache/compare/v4.2.1...v4.2.2</a></p> <h2>v4.2.1</h2> <h2>What's Changed</h2> <blockquote> <p>[!IMPORTANT] As a reminder, there were important backend changes to release v4.2.0, see <a href="https://github.com/actions/cache/releases/tag/v4.2.0">those release notes</a> and <a href="https://github.com/actions/cache/discussions/1510">the announcement</a> for more details.</p> </blockquote> <ul> <li>docs: GitHub is spelled incorrectly in caching-strategies.md by <a href="https://github.com/janco-absa"><code>@janco-absa</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1526">actions/cache#1526</a></li> <li>docs: Make the "always save prime numbers" example more clear by <a href="https://github.com/Tobbe"><code>@Tobbe</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1525">actions/cache#1525</a></li> <li>Update force deletion docs due a recent deprecation by <a href="https://github.com/sebbalex"><code>@sebbalex</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1500">actions/cache#1500</a></li> <li>Bump <code>@actions/cache</code> to v4.0.1 by <a href="https://github.com/robherley"><code>@robherley</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1554">actions/cache#1554</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/janco-absa"><code>@janco-absa</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1526">actions/cache#1526</a></li> <li><a href="https://github.com/Tobbe"><code>@Tobbe</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1525">actions/cache#1525</a></li> <li><a href="https://github.com/sebbalex"><code>@sebbalex</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1500">actions/cache#1500</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v4.2.0...v4.2.1">https://github.com/actions/cache/compare/v4.2.0...v4.2.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's changelog</a>.</em></p> <blockquote> <h1>Releases</h1> <h3>4.2.3</h3> <ul> <li>Bump <code>@actions/cache</code> to v4.0.3 (obfuscates SAS token in debug logs for cache entries)</li> </ul> <h3>4.2.2</h3> <ul> <li>Bump <code>@actions/cache</code> to v4.0.2</li> </ul> <h3>4.2.1</h3> <ul> <li>Bump <code>@actions/cache</code> to v4.0.1</li> </ul> <h3>4.2.0</h3> <p>TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability. <a href="https://github.com/actions/cache">actions/cache</a> now integrates with the new cache service (v2) APIs.</p> <p>The new service will gradually roll out as of <strong>February 1st, 2025</strong>. The legacy service will also be sunset on the same date. Changes in these release are <strong>fully backward compatible</strong>.</p> <p><strong>We are deprecating some versions of this action</strong>. We recommend upgrading to version <code>v4</code> or <code>v3</code> as soon as possible before <strong>February 1st, 2025.</strong> (Upgrade instructions below).</p> <p>If you are using pinned SHAs, please use the SHAs of versions <code>v4.2.0</code> or <code>v3.4.0</code></p> <p>If you do not upgrade, all workflow runs using any of the deprecated <a href="https://github.com/actions/cache">actions/cache</a> will fail.</p> <p>Upgrading to the recommended versions will not break your workflows.</p> <h3>4.1.2</h3> <ul> <li>Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - <a href="https://redirect.github.com/actions/cache/pull/1474">#1474</a></li> <li>Security fix: Bump braces from 3.0.2 to 3.0.3 - <a href="https://redirect.github.com/actions/cache/pull/1475">#1475</a></li> </ul> <h3>4.1.1</h3> <ul> <li>Restore original behavior of <code>cache-hit</code> output - <a href="https://redirect.github.com/actions/cache/pull/1467">#1467</a></li> </ul> <h3>4.1.0</h3> <ul> <li>Ensure <code>cache-hit</code> output is set when a cache is missed - <a href="https://redirect.github.com/actions/cache/pull/1404">#1404</a></li> <li>Deprecate <code>save-always</code> input - <a href="https://redirect.github.com/actions/cache/pull/1452">#1452</a></li> </ul> <h3>4.0.2</h3> <ul> <li>Fixed restore <code>fail-on-cache-miss</code> not working.</li> </ul> <h3>4.0.1</h3> <ul> <li>Updated <code>isGhes</code> check</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |
||
|
dependabot[bot]
|
b8b255c79f |
build(deps): bump taiki-e/install-action from 2.52.6 to 2.55.3 (#9749)
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.52.6 to 2.55.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.55.3</h2> <ul> <li>Update <code>dprint@latest</code> to 0.50.1.</li> </ul> <h2>2.55.2</h2> <ul> <li> <p>Update <code>zizmor@latest</code> to 1.11.0.</p> </li> <li> <p>Update <code>cargo-dinghy@latest</code> to 0.8.1.</p> </li> </ul> <h2>2.55.1</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.17.1.</p> </li> <li> <p>Update <code>typos@latest</code> to 1.34.0.</p> </li> </ul> <h2>2.55.0</h2> <ul> <li> <p>Support <code>vacuum</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1016">#1016</a>, thanks <a href="https://github.com/jayvdb"><code>@jayvdb</code></a>)</p> </li> <li> <p>Update <code>cargo-shear@latest</code> to 1.3.2.</p> </li> </ul> <h2>2.54.3</h2> <ul> <li>Update <code>cargo-careful@latest</code> to 0.4.8.</li> </ul> <h2>2.54.2</h2> <ul> <li> <p>Update <code>rclone@latest</code> to 1.70.2.</p> </li> <li> <p>Update <code>zizmor@latest</code> to 1.10.0.</p> </li> </ul> <h2>2.54.1</h2> <ul> <li> <p>Update <code>wasmtime@latest</code> to 34.0.1.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.32.8.</p> </li> <li> <p>Update <code>knope@latest</code> to 0.21.0.</p> </li> </ul> <h2>2.54.0</h2> <ul> <li> <p>Add <code>cyclonedx</code> (<a href="https://redirect.github.com/taiki-e/install-action/pull/1000">#1000</a>, thanks <a href="https://github.com/jayvdb"><code>@jayvdb</code></a>)</p> </li> <li> <p>Update <code>wasmtime@latest</code> to 34.0.0.</p> </li> <li> <p>Update <code>rclone@latest</code> to 1.70.1.</p> </li> <li> <p>Update <code>cargo-binstall@latest</code> to 1.14.1.</p> </li> <li> <p>Update <code>release-plz@latest</code> to 0.3.136.</p> </li> </ul> <h2>2.53.2</h2> <ul> <li> <p>Fix <code>cargo-nextest</code> installation failure on Ubuntu 24.04 due to HTTP 403 error on requests to crates.io. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1007">#1007</a>)</p> </li> <li> <p>Update <code>rclone@latest</code> to 1.70.0.</p> </li> </ul> <h2>2.53.1</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>This project adheres to <a href="https://semver.org">Semantic Versioning</a>.</p> <!-- raw HTML omitted --> <h2>[Unreleased]</h2> <ul> <li> <p>Update <code>trivy@latest</code> to 0.64.0.</p> </li> <li> <p>Update <code>just@latest</code> to 1.41.0.</p> </li> </ul> <h2>[2.55.3] - 2025-06-30</h2> <ul> <li>Update <code>dprint@latest</code> to 0.50.1.</li> </ul> <h2>[2.55.2] - 2025-06-30</h2> <ul> <li> <p>Update <code>zizmor@latest</code> to 1.11.0.</p> </li> <li> <p>Update <code>cargo-dinghy@latest</code> to 0.8.1.</p> </li> </ul> <h2>[2.55.1] - 2025-06-30</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.17.1.</p> </li> <li> <p>Update <code>typos@latest</code> to 1.34.0.</p> </li> </ul> <h2>[2.55.0] - 2025-06-30</h2> <ul> <li> <p>Support <code>vacuum</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1016">#1016</a>, thanks <a href="https://github.com/jayvdb"><code>@jayvdb</code></a>)</p> </li> <li> <p>Update <code>cargo-shear@latest</code> to 1.3.2.</p> </li> </ul> <h2>[2.54.3] - 2025-06-28</h2> <ul> <li>Update <code>cargo-careful@latest</code> to 0.4.8.</li> </ul> <h2>[2.54.2] - 2025-06-27</h2> <ul> <li> <p>Update <code>rclone@latest</code> to 1.70.2.</p> </li> <li> <p>Update <code>zizmor@latest</code> to 1.10.0.</p> </li> </ul> <h2>[2.54.1] - 2025-06-25</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href=" |