Feature stage sync - #67
Merged
Merged
Conversation
Introduce TDEI branding: add tdei-logo.png, import Lato/Open Sans/Montserrat fonts, update theme primary color to #32006e, and add extensive utility CSS (color variables, button/link styles, layout helpers, accessibility focus styles) in main.scss. Replace many Bootstrap button/variant uses across components/pages with new tdei-* classes (tdei-primary-button, tdei-secondary-button, maroon-bg, tdei-primary-link) and adjust dialog button classes/confirm styles to match the new design system. These changes unify styling and apply the updated TDEI visual identity across the app.
Add new asset (osw-type.svg) and update global styles and pages to improve layout and mobile UX. Main changes: - components/AppNavbar.vue: Rework navbar into a responsive, sticky header with a mobile side menu and updated user dropdown. Adds state and lifecycle hooks to manage mobile menu visibility, accessibility attributes, and dedicated mobile interactions (close button, backdrop, logout flow). Extensive SCSS added to style the navbar, side menu, and responsive behaviors. - pages/index.vue: Make the primary CTA conditional on authentication (redirect to dashboard when signed in), import auth in the script, and update hero styling to use CSS variables and refined colors/hover states. - assets/scss/main.scss: Update font imports (remove Lato, ensure Open Sans and Montserrat are imported). - assets/img/osw-type.svg: Add new SVG asset. These changes are intended to improve navigation on small screens, unify header styling, and make the landing CTA reflect user authentication state.
Revamp dashboard workspace list and toolbar styling: remove duplicate Montserrat font import; rename toolbar button classes to tdei-toolbar-primary-button and add scoped styles for toolbar buttons and grouped button radii. Overhaul WorkspaceItem into a card-style layout (new markup, styles, responsive adjustments), show workspace ID, format type/status labels, and simplify class logic. Update dashboard page to add a page header subtitle, adjust Project Group label styling, wrap workspace list in a template, and add getLastProjectGroupName + selectedProjectGroupName computed to derive the displayed project group name from sessionStorage or project groups.
Add flex and pathways SVG icons and update WorkspaceItem.vue to select the correct icon based on workspace.type. Imports osw, flex, and pathways assets, introduces a computed typeIconSrc that maps types to their icons (falls back to osw), and replaces the hardcoded img src with a bound :src. Enables showing the appropriate icon for different workspace types.
Refactor the homepage template and SCSS to introduce a new hero layout and visual update. Replaced .jumbo-content with .hero-shell and .hero-copy, moved CTAs into a .hero-actions container (primary Nuxt link + external "Learn more"), and kept the auth-based dashboard/signin routing. Reworked background to use layered gradients over the existing bg.webp, added a decorative overlay, improved typography, spacing, and app-logo styling, and refined responsive behavior across breakpoints (lg, md, sm). These changes modernize the landing hero, improve readability and responsiveness, and polish CTA styles and spacing.
SCSS: Remove unnecessary !important from primary button rules, add proper :focus styles (box-shadow) for accessibility, and introduce .tdei-outline-cyan-button (replacing .tdei-button2) with hover/focus/disabled states. Unify radio focus styling and update shadow color to match brand. Minor CSS cleanup and spacing adjustments. Components: remove d-block from the Apply button in FilterDropdown. Pages: simplify selectedProjectGroupName logic in dashboard.vue (drop getLastProjectGroupName fallback) and reduce hero-primary-action min-height in index.vue.
Add an accessible alt attribute for workspace type images and adjust SCSS variables and styles. In WorkspaceItem.vue the img alt is now dynamic (uses formatTypeLabel) to improve accessibility. In assets/scss/main.scss: remove duplicate --primary-color-dark, add --tdei-cyan, change .jsonContent border to use --secondary-color, remove custom radio focus styles, and adjust .column-style flex/margins. Also restore/move text-transform: capitalize for .workspaceStatus to the stronger selector to keep visual consistency.
Add focus management and keyboard support for the mobile side menu: add refs for the toggle button and side menu, focus the close button when opened and restore focus to the toggle when closed, trap Tab/Shift+Tab inside the menu, handle Escape to close, and add aria-modal="true". Attach/detach keydown listener on mount/unmount. Minor style updates: introduce --primary-color-dark and small SCSS cleanup. Remove an unused getLastProjectGroupName() helper from dashboard.vue. Add rel="noopener noreferrer" to an external link for security.
SCSS: Update .tdei-rounded-button to .btn.tdei-rounded-button, remove unnecessary !important rules, nest hover/active state and use --primary-color-dark for hover/border. Also fix stray brace and tighten selector scope. AppNavbar.vue: Use focusable.at(0) and .at(-1) for first/last element and add a null check to avoid runtime errors when focusable is empty. pages/dashboard.vue: Render the "in <project group>" phrase only when a project group name exists and change the computed fallback from a literal 'project group' to null to avoid showing a placeholder when none is selected.
Overhaul the sign-in experience and adjust several layout components. Add a new background image asset and replace the signin page to render the new SigninForm component with a centered card, background, and responsive styles. Revamp SigninForm: new header, show/hide password toggle, improved loading/error states, and extensive SCSS for desktop/mobile. Tidy up AppNavbar templates and mobile menu markup (focus handling/focus trap fixes and markup formatting). Minor tweaks: AppSpinner markup, default layout nuxt-loading-indicator props, and refactor dashboard into a split layout with scrollable workspace list and sticky details panel.
Bind aria-modal to return 'true' or 'false' based on mobileMenuOpen/isMobileView to fix accessibility attribute type. Strengthen SigninForm error handling by adding a fetch-error type guard, parsing 400 responses for validation errors, and providing specific messages for 401 and 404 cases; also normalize other errors to strings. Add missing 'btn' class to the Close button in JoinDialog for consistent styling.
Add role="dialog" to the side menu element in AppNavbar.vue to improve accessibility and complement existing ARIA attributes. Remove an explicit color rule from .team-members-btn in teams/Item.vue to stop overriding the global body color and keep link styling consistent.
Remove external @import URL lines from assets/scss/main.scss and add the @nuxtjs/google-fonts module and configuration in nuxt.config.ts (register Open Sans and Montserrat, set display: 'swap', download: true). Also add @nuxtjs/google-fonts to devDependencies in package.json. Centralizes font loading, enables local font download/optimization, and avoids inline external CSS imports.
Add a long CSS transition to neutralize Chrome's autofill background, preventing the yellow/blue autofill styling from showing. Replace the AppNavbar side menu <aside> with a <div> to match the component structure. Scope SigninForm styles (add scoped) and remove the preset input background so autofill styling is handled consistently. Add an explicit Workspace type import and annotate selectWorkspace(workspace) with the Workspace type.
Introduce a central SCSS theme and migrate components to Bootstrap variants and unified classes. - Add assets/scss/theme.scss with SASS theme variables (brand colors, utility colors, text/nav colors). - Update assets/scss/main.scss to consume the new theme variables, remove many legacy utility classes, and switch several CSS rules to variables/SASS values. - Replace custom tdei button/link classes across components with Bootstrap button variants (btn-primary, btn-outline-secondary, btn-danger, btn-light, etc.). - Refactor AppNavbar to use BootstrapVue collapse/toggle components, improve mobile side-drawer behavior and keyboard focus handling, and normalize class names to kebab-case. - Normalize CSS class names and markup in WorkspaceItem and other components, add theme imports and scoped styles where appropriate, and make small UI/accessibility improvements (icons, alt text, font sizes). - Adjust nuxt.config to limit downloaded font weights and include additional BootstrapVue components used by the navbar. These changes consolidate styling around a single theme, reduce bespoke utility CSS, and align components with Bootstrap conventions for more consistent UI and easier maintenance.
Treat 768px as non-mobile by changing the mobile detection from <= 768 to < 768. This aligns the JS breakpoint with expected CSS/UX breakpoints so devices at exactly 768px are handled as desktop and will close the mobile menu.
### DevBoard Task https://dev.azure.com/TDEI-UW/TDEI/_workitems/edit/3634/ This PR applies TDEI brand theming across the application — updating colours, typography, layout, and accessibility throughout. ### Visual changes - **Navbar** — Redesigned with TDEI brand colour (`#32006e`), new responsive mobile side-menu with slide-in animation, user profile dropdown, and sticky positioning - **Sign-in page** — Fully redesigned card layout with TDEI logo, styled inputs, show/hide password toggle, and responsive mobile view - **Dashboard** — Split-panel layout with scrollable workspace list and sticky detail panel; workspace type icons added - **Homepage** — New hero section with brand imagery and workspace type icons (OSW, Pathways, Flex) - **Buttons & links** — Replaced ad-hoc Bootstrap variants with consistent utility classes (`tdei-primary-button`, `tdei-secondary-button`, `tdei-primary-link`, `tdei-rounded-button`) ### Screenshots: <img width="1470" height="956" alt="Screenshot 2026-05-25 at 8 02 16 PM" src="https://github.com/user-attachments/assets/acaf73e3-9bea-4259-9846-03c1021574c4" /> <img width="1470" height="956" alt="Screenshot 2026-05-25 at 8 02 40 PM" src="https://github.com/user-attachments/assets/e7c76520-9f88-4042-b3cf-c83e5977a500" /> <img width="1470" height="956" alt="Screenshot 2026-05-25 at 8 06 00 PM" src="https://github.com/user-attachments/assets/65b10d2d-6042-46b8-8c18-02804cc53c0d" /> <img width="1470" height="956" alt="Screenshot 2026-05-25 at 8 08 21 PM" src="https://github.com/user-attachments/assets/7db14bb2-4ce4-4716-be2f-d4b203ed8bcb" /> <img width="1470" height="956" alt="Screenshot 2026-05-25 at 8 08 42 PM" src="https://github.com/user-attachments/assets/10893743-643c-4d8d-8b29-12df3e01e80a" /> <img width="1470" height="956" alt="Screenshot 2026-05-25 at 8 16 01 PM" src="https://github.com/user-attachments/assets/3a33c87d-9b94-4c15-a46f-b3636a753631" /> <img width="1470" height="956" alt="Screenshot 2026-05-25 at 8 17 03 PM" src="https://github.com/user-attachments/assets/4cbde4e3-9ff7-4577-911c-b523eceb3015" /> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Theme & Styling Updates - Updated Bootstrap primary color from `#9b0092` to TDEI brand colour `#32006e` - Added new SCSS theme variables for TDEI brand colors including `$brand-accent`, `$tdei-secondary`, `$tdei-blue`, `$tdei-green`, `$tdei-cyan`, background shades, and `$text-navy` - Expanded global styling in `main.scss` with webkit autofill transitions, new CSS variable declarations in `:root`, and dropdown menu active state styling - Added "TDEI Utility Classes" section with page header/title/subtitle helpers and typography utilities - Introduced Google Fonts module (`@nuxtjs/google-fonts`) with Open Sans and Montserrat font families ## Navigation & Navbar - Refactored `AppNavbar.vue` from Bootstrap collapsed layout to custom responsive design with sticky positioning - Implemented mobile-only off-canvas side drawer using `b-collapse` with click-to-dismiss backdrop - Added responsive behavior tracking (`isMobileView` for viewport ≤768px) with automatic drawer closure on resize - Integrated keyboard handling (Escape key to close drawer) and focus management for accessibility - Updated navbar styling with TDEI brand colors and responsive spacing - Added mobile-specific user section and logout button in side drawer - Hidden "Sign In" link for unauthenticated users (showing only the brand) ## Authentication & Sign-in Page - Redesigned `SigninForm.vue` with TDEI-branded auth card layout and updated styling - Changed password input from static to toggleable with visibility icon button controlled by `showPassword` state - Updated submit button to display dynamic state ("Signing In..." vs "Sign In") based on loading state, replacing prior spinner template - Implemented dedicated error rendering block displayed only when error exists - Improved error handling with stricter fetch-error type guard checking `response.status` and `response.json()` function - Refactored sign-in page (`pages/signin.vue`) to simplified markup with centered flex layout and login background image ## Dashboard Layout & Components - Refactored dashboard to split-panel layout with scrollable workspace list on left and sticky details panel on right - Updated `WorkspaceItem.vue` workspace picker card with type-specific icons, formatted type labels, conditional status/role pills, and responsive styling - Added `selectedProjectGroupName` computed value for project group display - Explicitly typed `selectWorkspace` function parameter as `Workspace` - Introduced new SCSS for flex split layout, responsive stacking, sticky positioning, and custom scrollbars - Updated `dashboard/Toolbar.vue` button styling: "Edit" uses primary variant, "Review/Export/Settings" use outline-secondary ## Homepage Updates - Redesigned homepage with new hero layout replacing prior centered jumbo-content - Added hero divider element and restructured hero content using `hero-shell`, `hero-copy`, and `hero-actions` classes - Made primary call-to-action conditional: routes to `/dashboard` when authenticated, otherwise to `/signin`, with dynamic button label - Updated `pages/index.vue` to import `tdeiClient` and expose auth state - Revised SCSS replacing `.jumbo` styles with new hero-specific classes and responsive breakpoint adjustments across lg/md/sm viewports ## Component Button & Link Standardization - Standardized button styling across components: - Changed outline buttons from `btn btn-outline-primary` to `btn btn-outline-secondary` (DatasetTypeRadio, help page) - Updated toolbar and modal buttons to use primary/secondary/danger variants consistently - Replaced `btn-dark` styling with appropriate primary/outline-secondary variants in review, settings, and teams components - Updated deletion confirmation button styling from outline-danger to solid danger variant ## Accessibility & UX Improvements - Added focus trap and keyboard handling in navbar for mobile menu drawer - Improved ARIA attributes and semantic HTML in refactored components - Updated button `aria-label` in WorkspaceItem to include workspace ID - Refined modal button configurations for better accessibility (e.g., custom `cancelClass` with `p-0`) - Updated component formatting for improved readability and spacing ## Additional Changes - Updated `AppLogo.vue` to use new TDEI logo (`tdei-logo.png` instead of `icon.svg`) - Modified Nuxt config to optimize dependency bundling for `BCollapse` and `BNavbar` components - Added `@nuxtjs/google-fonts` to devDependencies - Updated `nuxt-loading-indicator` styling in default layout with gradient color via CSS variables - Minor SCSS restructuring and reformatting across multiple components for consistency <!-- end of auto-generated comment: release notes by coderabbit.ai -->
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.3 to 1.8.4. - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.8.4) --- updated-dependencies: - dependency-name: shell-quote dependency-version: 1.8.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.3 to 1.8.4. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md">shell-quote's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/ljharb/shell-quote/compare/v1.8.3...v1.8.4">v1.8.4</a> - 2026-05-22</h2> <h3>Commits</h3> <ul> <li>[Fix] <code>quote</code>: validate object-token shapes <a href="https://github.com/ljharb/shell-quote/commit/4378a6e613db5948168684864e49b42b83134d2d"><code>4378a6e</code></a></li> <li>[Dev Deps] update <code>@ljharb/eslint-config</code>, <code>auto-changelog</code>, <code>eslint</code>, <code>npmignore</code> <a href="https://github.com/ljharb/shell-quote/commit/22ebec04349065a45ad8afc8cc8d53c4624634a6"><code>22ebec0</code></a></li> <li>[Tests] increase coverage <a href="https://github.com/ljharb/shell-quote/commit/9f3caa31900cc6ee64858b31134144c648ce206d"><code>9f3caa3</code></a></li> <li>[readme] replace runkit CI badge with shields.io check-runs badge <a href="https://github.com/ljharb/shell-quote/commit/3344a047dd1e95f71c4ca27522cbfd05c56277e0"><code>3344a04</code></a></li> <li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a href="https://github.com/ljharb/shell-quote/commit/699c5113d135f4d4591574bebf173334ffa453d4"><code>699c511</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/shell-quote/commit/ff166e2b63eb5f932bd131a8886a99e9afdf45ae"><code>ff166e2</code></a> v1.8.4</li> <li><a href="https://github.com/ljharb/shell-quote/commit/4378a6e613db5948168684864e49b42b83134d2d"><code>4378a6e</code></a> [Fix] <code>quote</code>: validate object-token shapes</li> <li><a href="https://github.com/ljharb/shell-quote/commit/22ebec04349065a45ad8afc8cc8d53c4624634a6"><code>22ebec0</code></a> [Dev Deps] update <code>@ljharb/eslint-config</code>, <code>auto-changelog</code>, <code>eslint</code>, `npmig...</li> <li><a href="https://github.com/ljharb/shell-quote/commit/9f3caa31900cc6ee64858b31134144c648ce206d"><code>9f3caa3</code></a> [Tests] increase coverage</li> <li><a href="https://github.com/ljharb/shell-quote/commit/3344a047dd1e95f71c4ca27522cbfd05c56277e0"><code>3344a04</code></a> [readme] replace runkit CI badge with shields.io check-runs badge</li> <li><a href="https://github.com/ljharb/shell-quote/commit/699c5113d135f4d4591574bebf173334ffa453d4"><code>699c511</code></a> [Dev Deps] update <code>@ljharb/eslint-config</code></li> <li>See full diff in <a href="https://github.com/ljharb/shell-quote/compare/v1.8.3...v1.8.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TaskarCenterAtUW/workspaces-frontend/network/alerts). </details>
Adding another workflow as part of https://dev.azure.com/TDEI-UW/TDEI/_workitems/edit/3739 This workflow automatically updates the tags based on merges to the respective branches <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Changes Added a new GitHub Actions workflow (`.github/workflows/tag.yml`) that automatically updates environment tags when pull requests are merged. **Workflow Details:** - **Trigger:** Pull request closure events on `develop`, `staging`, and `production` branches (only executes when PR is merged) - **Tag Mapping:** Maps base branch to environment tag: - `develop` → `dev` - `staging` → `stage` - `production` → `prod` - **Execution:** Force-updates the git tag locally and pushes it to the remote repository with the `--force` flag - **Permissions:** Requires `contents: write` to push tags The workflow enables automated environment tagging aligned with branch-based deployments, ensuring consistent tag versions across environments. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
Bumps [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) from 4.4.6 to 4.4.8. - [Release notes](https://github.com/nuxt/nuxt/releases) - [Commits](https://github.com/nuxt/nuxt/commits/v4.4.8/packages/nuxt) --- updated-dependencies: - dependency-name: nuxt dependency-version: 4.4.8 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) from 4.4.6 to 4.4.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nuxt/nuxt/releases">nuxt's releases</a>.</em></p> <blockquote> <h2>v4.4.8</h2> <blockquote> <p>4.4.8 is a hotfix release to address an issue running the dev server on MacOS.</p> </blockquote> <h2>👉 Changelog</h2> <p><a href="https://github.com/nuxt/nuxt/compare/v4.4.7...v4.4.8">compare changes</a></p> <h3>🩹 Fixes</h3> <ul> <li><strong>vite:</strong> Shorter socket name for macOs with tmp fallback (<a href="https://redirect.github.com/nuxt/nuxt/pull/35265">#35265</a>)</li> <li><strong>kit:</strong> Respect <code>type</code> option in <code>findPath</code> (<a href="https://redirect.github.com/nuxt/nuxt/pull/35272">#35272</a>)</li> <li><strong>deps:</strong> Update nuxt/scripts presets (<a href="https://github.com/nuxt/nuxt/commit/905621594">905621594</a>)</li> <li><strong>nuxt:</strong> Revert unhead dependency back to v2 (<a href="https://github.com/nuxt/nuxt/commit/e6d578fea">e6d578fea</a>)</li> </ul> <h3>📖 Documentation</h3> <ul> <li>Fix many typos (<a href="https://redirect.github.com/nuxt/nuxt/pull/35266">#35266</a>)</li> <li>Explain static fallback pages (<a href="https://redirect.github.com/nuxt/nuxt/pull/35277">#35277</a>)</li> <li>Change <code>null</code> to <code>undefined</code> in data-fetching docs to match actual types (<a href="https://redirect.github.com/nuxt/nuxt/pull/35301">#35301</a>)</li> <li>Fix broken internal links, useAsyncData watch type, and NuxtError type (<a href="https://redirect.github.com/nuxt/nuxt/pull/35303">#35303</a>)</li> </ul> <h3>❤️ Contributors</h3> <ul> <li>Daniel Roe (<a href="https://github.com/danielroe"><code>@danielroe</code></a>)</li> <li>Ali Mahmmoud (<a href="https://github.com/AliMahmoudDev"><code>@AliMahmoudDev</code></a>)</li> <li>Quentin Macq (<a href="https://github.com/quentinmcq"><code>@quentinmcq</code></a>)</li> <li>Pranav Rajeshirke (<a href="https://github.com/Pranav188"><code>@Pranav188</code></a>)</li> <li>Eduardo San Martin Morote (<a href="https://github.com/posva"><code>@posva</code></a>)</li> </ul> <h2>v4.4.7</h2> <blockquote> <p>4.4.7 is a security hotfix release.</p> </blockquote> <p>👉 make sure to check <a href="https://github.com/nuxt/nuxt/security/advisories">https://github.com/nuxt/nuxt/security/advisories</a> to view open advisories resolved by this release.</p> <h2>👉 Changelog</h2> <p><a href="https://github.com/nuxt/nuxt/compare/v4.4.6...v4.4.7">compare changes</a></p> <h3>🩹 Fixes</h3> <ul> <li><strong>nitro:</strong> Assign <code>noSSR</code> before deciding payload extraction (<a href="https://redirect.github.com/nuxt/nuxt/pull/35108">#35108</a>)</li> <li><strong>vite:</strong> Avoid filtering out dirs with shared prefix from <code>allowDirs</code> (<a href="https://redirect.github.com/nuxt/nuxt/pull/35112">#35112</a>)</li> <li><strong>nuxt:</strong> Use resolve from <code>pathe</code> for buildCache path boundary check (<a href="https://redirect.github.com/nuxt/nuxt/pull/35111">#35111</a>)</li> <li><strong>nuxt:</strong> Prevent sibling-directory traversal in test component wrapper (<a href="https://redirect.github.com/nuxt/nuxt/pull/35110">#35110</a>)</li> <li><strong>nitro:</strong> Pass event data to <code>isValid</code> in dev clipboard-copy listener (<a href="https://redirect.github.com/nuxt/nuxt/pull/35109">#35109</a>)</li> <li><strong>nuxt:</strong> Validate protocols in <code>reloadNuxtApp</code> path before reload (<a href="https://redirect.github.com/nuxt/nuxt/pull/35115">#35115</a>)</li> <li><strong>vite:</strong> Prefix public asset virtuals with null byte (<a href="https://github.com/nuxt/nuxt/commit/9e303b438">9e303b438</a>)</li> <li><strong>nuxt:</strong> Re-run <code>getCachedData</code> after initial fetch (<a href="https://redirect.github.com/nuxt/nuxt/pull/35122">#35122</a>)</li> <li><strong>nuxt:</strong> Propagate <code>useFetch</code>/<code>useAsyncData</code> factory types (<a href="https://redirect.github.com/nuxt/nuxt/pull/35133">#35133</a>)</li> <li><strong>vite:</strong> Close vite dev server on nuxt close (<a href="https://github.com/nuxt/nuxt/commit/a10a68abc">a10a68abc</a>)</li> <li><strong>kit,nuxt:</strong> Handle cancelling prompts to install packages (<a href="https://github.com/nuxt/nuxt/commit/e84813229">e84813229</a>)</li> <li><strong>kit:</strong> Avoid excluding node-context files in legacy tsconfig (<a href="https://redirect.github.com/nuxt/nuxt/pull/35152">#35152</a>)</li> <li><strong>nuxt:</strong> Handle missing payload in chunkError listener (<a href="https://redirect.github.com/nuxt/nuxt/pull/35155">#35155</a>)</li> <li><strong>nuxt:</strong> Await in-lifght template generation when closing nuxt (<a href="https://redirect.github.com/nuxt/nuxt/pull/35181">#35181</a>)</li> <li><strong>nuxt:</strong> Clarify page and layout usage warnings (<a href="https://redirect.github.com/nuxt/nuxt/pull/35184">#35184</a>)</li> <li><strong>webpack:</strong> Surface compilation errors when stats.toString is empty (<a href="https://github.com/nuxt/nuxt/commit/073b07851">073b07851</a>)</li> <li><strong>nuxt:</strong> Reject prototype-chain keys in the island registry (<a href="https://redirect.github.com/nuxt/nuxt/pull/35205">#35205</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nuxt/nuxt/commit/2bfc2c87a6f3bb9b17b4b6a2e9c117ef06b278d4"><code>2bfc2c8</code></a> v4.4.8</li> <li><a href="https://github.com/nuxt/nuxt/commit/e6d578feafa946c2781f5140adb3b03e9b23aade"><code>e6d578f</code></a> fix(nuxt): revert unhead dependency back to v2</li> <li><a href="https://github.com/nuxt/nuxt/commit/9056215943417f77a12967fb8f2efe83aa4d7aad"><code>9056215</code></a> fix(deps): update nuxt/scripts presets</li> <li><a href="https://github.com/nuxt/nuxt/commit/b7d57903b947e788fadfcfdf88be7951943731bf"><code>b7d5790</code></a> v4.4.7</li> <li><a href="https://github.com/nuxt/nuxt/commit/dbc58965ca7ffa21d7cc4207a4c40a62e0762f4a"><code>dbc5896</code></a> chore: lint</li> <li><a href="https://github.com/nuxt/nuxt/commit/e447a793c47766834f7497f8412a76cd56fd8ee1"><code>e447a79</code></a> fix(nuxt): reject cross-origin paths in <code>reloadNuxtApp</code></li> <li><a href="https://github.com/nuxt/nuxt/commit/d72a89ef451965a8a1abb58d3bd6eab4865631a0"><code>d72a89e</code></a> refactor(nuxt): replace <code>runInNewContext</code> with AST walker</li> <li><a href="https://github.com/nuxt/nuxt/commit/2cce6fb02e621196d56df92e05594e07469b5a6d"><code>2cce6fb</code></a> fix(nuxt): block path-normalization open redirect in <code>navigateTo</code></li> <li><a href="https://github.com/nuxt/nuxt/commit/0103ce06fbbbdfa079a7f020ef8ce00121eac4a3"><code>0103ce0</code></a> fix(nuxt): reject script-capable protocols in <code>\<NuxtLink></code> href</li> <li><a href="https://github.com/nuxt/nuxt/commit/07e39cd6f26e407b4192b7865bd17bc44536b9bb"><code>07e39cd</code></a> fix(nuxt): match route rules case-insensitively to mirror <code>vue-router</code></li> <li>Additional commits viewable in <a href="https://github.com/nuxt/nuxt/commits/v4.4.8/packages/nuxt">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TaskarCenterAtUW/workspaces-frontend/network/alerts). </details>
Bumps [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) to 2.8.0 and updates ancestor dependency [@sentry/nuxt](https://github.com/getsentry/sentry-javascript). These dependencies need to be updated together. Updates `@opentelemetry/core` from 2.7.1 to 2.8.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.7.1...v2.8.0) Updates `@sentry/nuxt` from 10.53.1 to 10.58.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.53.1...10.58.0) --- updated-dependencies: - dependency-name: "@opentelemetry/core" dependency-version: 2.8.0 dependency-type: indirect - dependency-name: "@sentry/nuxt" dependency-version: 10.58.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/commits) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) to 2.8.0 and updates ancestor dependency [@sentry/nuxt](https://github.com/getsentry/sentry-javascript). These dependencies need to be updated together. Updates `@opentelemetry/core` from 2.7.1 to 2.8.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-js/releases">@opentelemetry/core's releases</a>.</em></p> <blockquote> <h2>v2.8.0</h2> <h2>2.8.0</h2> <h3>:rocket: Features</h3> <ul> <li>feat(sdk-trace-base): pretty-print <code>SpanImpl</code>, <code>Tracer</code>, and <code>BasicTracerProvider</code> via <code>util.inspect</code> so they render through <code>diag</code> and <code>console.log</code> <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690">#6690</a> <a href="https://github.com/mcollina"><code>@mcollina</code></a></li> <li>feat(sdk-metrics): implement metric reader self-observability metrics <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449">#6449</a> <a href="https://github.com/anuraaga"><code>@anuraaga</code></a></li> <li>feat(core): add <code>hrTimeToSeconds</code> <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449">#6449</a> <a href="https://github.com/anuraaga"><code>@anuraaga</code></a></li> </ul> <h3>:bug: Bug Fixes</h3> <ul> <li>fix(core): limit processing of incoming "baggage" header to 8192 bytes <a href="https://github.com/pichlermarc"><code>@pichlermarc</code></a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md">@opentelemetry/core's changelog</a>.</em></p> <blockquote> <h2>2.8.0</h2> <h3>:rocket: Features</h3> <ul> <li>feat(sdk-trace-base): pretty-print <code>SpanImpl</code>, <code>Tracer</code>, and <code>BasicTracerProvider</code> via <code>util.inspect</code> so they render through <code>diag</code> and <code>console.log</code> <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6690">#6690</a> <a href="https://github.com/mcollina"><code>@mcollina</code></a></li> <li>feat(sdk-metrics): implement metric reader self-observability metrics <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449">#6449</a> <a href="https://github.com/anuraaga"><code>@anuraaga</code></a></li> <li>feat(core): add <code>hrTimeToSeconds</code> <a href="https://redirect.github.com/open-telemetry/opentelemetry-js/pull/6449">#6449</a> <a href="https://github.com/anuraaga"><code>@anuraaga</code></a></li> </ul> <h3>:bug: Bug Fixes</h3> <ul> <li>fix(core): limit processing of incoming "baggage" header to 8192 bytes <a href="https://github.com/pichlermarc"><code>@pichlermarc</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/13a035bc695996cf4aec885fef7b9866f48bc555"><code>13a035b</code></a> chore: prepare next release (<a href="https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6756">#6756</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/4b13587d1e08b47baf153e5312ccd08a3240d074"><code>4b13587</code></a> Merge commit from fork</li> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/71d195c508320295f1892aaed1ee2f1971ffb470"><code>71d195c</code></a> chore(renovate): set minimumReleaseAge to 3 days (<a href="https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6792">#6792</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/555fca6ce94fb8d40a5f869dbd28e43143b4e730"><code>555fca6</code></a> Update renovate.json to use matchManagers (<a href="https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6141">#6141</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/b711a81d5262904245d70f1857b6f3bc811b22cd"><code>b711a81</code></a> docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...</li> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/da704029ccd291d65402f3d1c469bd3f25aec047"><code>da70402</code></a> fix(ci): supply-chain sec: disable caching in release-related workflow (<a href="https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6790">#6790</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/002267b1c639aac1d2f1d6e5c7ac3ed023109ea0"><code>002267b</code></a> chore: complete the move to the smaller SPDX license header (<a href="https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6791">#6791</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/056ef9c4e1ddf9306477b7ce26acc7be489f9c6c"><code>056ef9c</code></a> feat(sdk-metrics): implement metric reader metrics (<a href="https://redirect.github.com/open-telemetry/opentelemetry-js/issues/6449">#6449</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/3bd69ce18011f9a16a7231489d9c3acc8294e8d9"><code>3bd69ce</code></a> fix(configuration): improve environment variable substitution to handle all t...</li> <li><a href="https://github.com/open-telemetry/opentelemetry-js/commit/bfbda7c2d90e1686f51cd0fc4d02d785ab9a9cc0"><code>bfbda7c</code></a> docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...</li> <li>Additional commits viewable in <a href="https://github.com/open-telemetry/opentelemetry-js/compare/v2.7.1...v2.8.0">compare view</a></li> </ul> </details> <br /> Updates `@sentry/nuxt` from 10.53.1 to 10.58.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-javascript/releases">@sentry/nuxt's releases</a>.</em></p> <blockquote> <h2>10.58.0</h2> <h3>Important Changes</h3> <ul> <li> <p><strong>feat(hono): Add support for the Deno runtime (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21450">#21450</a>)</strong></p> <p><code>@sentry/hono</code> now supports the Deno runtime via a new <code>@sentry/hono/deno</code> entry point. Install <code>@sentry/deno</code> as a peer dependency and initialize Sentry through the <code>sentry()</code> middleware:</p> <pre lang="ts"><code>import { Hono } from 'hono'; import { sentry } from '@sentry/hono/deno'; <p>const app = new Hono();</p> <p>app.use( sentry(app, { dsn: '<strong>DSN</strong>', // or Deno.env.get('SENTRY_DSN') tracesSampleRate: 1.0, }), );</p> <p>Deno.serve(app.fetch); </code></pre></p> </li> <li> <p><strong>feat(core): Extract objects as structured logs in <code>consoleLoggingIntegration</code> (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21385">#21385</a>)</strong></p> <p>The <code>consoleLoggingIntegration</code> now extracts structured log attributes when the first argument is a plain object.</p> <pre lang="js"><code>// Object keys become log attributes console.log({ userId: 123, action: 'login' }, 'User logged in'); // → attributes: { userId: 123, action: "login" } <p>// Non-object first args use template + parameters (unchanged) console.log('Hello', 'world', 123); // → sentry.message.template: "Hello {} {}" </code></pre></p> </li> <li> <p><strong>feat(react-router): Stabilize the instrumentation API (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21470">#21470</a>)</strong></p> <p>React Router's instrumentation API is now stable — the <code>@experimental</code> markers have been removed from <code>createSentryServerInstrumentation</code>, <code>createSentryClientInstrumentation</code>, and the related helpers and types. The manual server wrappers <code>wrapServerLoader</code> and <code>wrapServerAction</code> are now deprecated in favor of it. Export <code>instrumentations = [Sentry.createSentryServerInstrumentation()]</code> from your <code>entry.server.tsx</code> to instrument all loaders and actions without wrapping them individually.</p> </li> </ul> <h3>Other Changes</h3> <ul> <li>feat(hono): Add HTTP connection info to server spans (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21408">#21408</a>)</li> <li>feat(node-core): Attach log message and fields to pino error events (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21422">#21422</a>)</li> <li>feat(react-router): Always build client instrumentation and deprecate <code>useInstrumentationAPI</code> (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21432">#21432</a>)</li> <li>feat(react-router): Rename client navigation roots from the route pattern (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21463">#21463</a>)</li> <li>fix(astro): Resolve middleware export types (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21414">#21414</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md">@sentry/nuxt's changelog</a>.</em></p> <blockquote> <h2>10.58.0</h2> <h3>Important Changes</h3> <ul> <li> <p><strong>feat(hono): Add support for the Deno runtime (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21450">#21450</a>)</strong></p> <p><code>@sentry/hono</code> now supports the Deno runtime via a new <code>@sentry/hono/deno</code> entry point. Install <code>@sentry/deno</code> as a peer dependency and initialize Sentry through the <code>sentry()</code> middleware:</p> <pre lang="ts"><code>import { Hono } from 'hono'; import { sentry } from '@sentry/hono/deno'; <p>const app = new Hono();</p> <p>app.use( sentry(app, { dsn: '<strong>DSN</strong>', // or Deno.env.get('SENTRY_DSN') tracesSampleRate: 1.0, }), );</p> <p>Deno.serve(app.fetch); </code></pre></p> </li> <li> <p><strong>feat(core): Extract objects as structured logs in <code>consoleLoggingIntegration</code> (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21385">#21385</a>)</strong></p> <p>The <code>consoleLoggingIntegration</code> now extracts structured log attributes when the first argument is a plain object.</p> <pre lang="js"><code>// Object keys become log attributes console.log({ userId: 123, action: 'login' }, 'User logged in'); // → attributes: { userId: 123, action: "login" } <p>// Non-object first args use template + parameters (unchanged) console.log('Hello', 'world', 123); // → sentry.message.template: "Hello {} {}" </code></pre></p> </li> <li> <p><strong>feat(react-router): Stabilize the instrumentation API (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21470">#21470</a>)</strong></p> <p>React Router's instrumentation API is now stable — the <code>@experimental</code> markers have been removed from <code>createSentryServerInstrumentation</code>, <code>createSentryClientInstrumentation</code>, and the related helpers and types. The manual server wrappers <code>wrapServerLoader</code> and <code>wrapServerAction</code> are now deprecated in favor of it. Export <code>instrumentations = [Sentry.createSentryServerInstrumentation()]</code> from your <code>entry.server.tsx</code> to instrument all loaders and actions without wrapping them individually.</p> </li> </ul> <h3>Other Changes</h3> <ul> <li>feat(hono): Add HTTP connection info to server spans (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21408">#21408</a>)</li> <li>feat(node-core): Attach log message and fields to pino error events (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21422">#21422</a>)</li> <li>feat(react-router): Always build client instrumentation and deprecate <code>useInstrumentationAPI</code> (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21432">#21432</a>)</li> <li>feat(react-router): Rename client navigation roots from the route pattern (<a href="https://redirect.github.com/getsentry/sentry-javascript/pull/21463">#21463</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/getsentry/sentry-javascript/commit/29a6f451ff71bf5dc36ba5926929da56b252d0b4"><code>29a6f45</code></a> release: 10.58.0</li> <li><a href="https://github.com/getsentry/sentry-javascript/commit/7fa42c94ec8917ab0e3362723eb57234abacdba5"><code>7fa42c9</code></a> Merge pull request <a href="https://redirect.github.com/getsentry/sentry-javascript/issues/21530">#21530</a> from getsentry/prepare-release/10.58.0</li> <li><a href="https://github.com/getsentry/sentry-javascript/commit/0486221fbf384d3cccad395c1b2729360d3f0e20"><code>0486221</code></a> meta(changelog): Update changelog for 10.58.0</li> <li><a href="https://github.com/getsentry/sentry-javascript/commit/66b04b6eef3847fcce74899099e8661f3a430ba0"><code>66b04b6</code></a> chore(deps): Bump nx to <code>22.7.5</code> (<a href="https://redirect.github.com/getsentry/sentry-javascript/issues/21527">#21527</a>)</li> <li><a href="https://github.com/getsentry/sentry-javascript/commit/d8dcc45fa19ad4c8b8514003a65da8a0eafbeaf1"><code>d8dcc45</code></a> ref(node): Migrate vendored generic-pool instrumentation to Sentry APIs (<a href="https://redirect.github.com/getsentry/sentry-javascript/issues/21523">#21523</a>)</li> <li><a href="https://github.com/getsentry/sentry-javascript/commit/b35c4deac97eae669e05aa183bd4fbf5d1eec6ca"><code>b35c4de</code></a> test(node): Replace lru-memoizer fake unit test with integration coverage (<a href="https://redirect.github.com/getsentry/sentry-javascript/issues/2">#2</a>...</li> <li><a href="https://github.com/getsentry/sentry-javascript/commit/0d3f1b1b2d1b4782fcfb877f781fff6d1961b26b"><code>0d3f1b1</code></a> fix(nextjs): Mark redirect server actions as <code>ok</code> instead of <code>internal_error</code>...</li> <li><a href="https://github.com/getsentry/sentry-javascript/commit/1bf2bad351a40c5163a63390cf7987881f092ae8"><code>1bf2bad</code></a> ref(node): Streamline dataloader instrumentation (<a href="https://redirect.github.com/getsentry/sentry-javascript/issues/21475">#21475</a>)</li> <li><a href="https://github.com/getsentry/sentry-javascript/commit/0a6e864ffa8e59b719f80d39120dc204765e4b10"><code>0a6e864</code></a> test: Skip nuxt-5 E2E test (<a href="https://redirect.github.com/getsentry/sentry-javascript/issues/21524">#21524</a>)</li> <li><a href="https://github.com/getsentry/sentry-javascript/commit/73024d4d55f8f778af305005c134947fc2935474"><code>73024d4</code></a> test(astro): Add Astro 7 e2e app (<a href="https://redirect.github.com/getsentry/sentry-javascript/issues/21471">#21471</a>)</li> <li>Additional commits viewable in <a href="https://github.com/getsentry/sentry-javascript/compare/10.53.1...10.58.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TaskarCenterAtUW/workspaces-frontend/network/alerts). </details>
Bumps [ws](https://github.com/websockets/ws) from 8.20.1 to 8.21.0. - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.20.1...8.21.0) --- updated-dependencies: - dependency-name: ws dependency-version: 8.21.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ws](https://github.com/websockets/ws) from 8.20.1 to 8.21.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/websockets/ws/releases">ws's releases</a>.</em></p> <blockquote> <h2>8.21.0</h2> <h1>Features</h1> <ul> <li>Introduced the <code>maxBufferedChunks</code> and <code>maxFragments</code> options (2b2abd45).</li> </ul> <h1>Bug fixes</h1> <ul> <li>Fixed a remote memory exhaustion DoS vulnerability (2b2abd45).</li> </ul> <p>A high volume of tiny fragments and data chunks could be sent by a peer, using modest network traffic, to crash a <code>ws</code> server or client due to OOM.</p> <pre lang="js"><code>import { WebSocket, WebSocketServer } from 'ws'; <p>const wss = new WebSocketServer({ port: 0 }, function () { const data = Buffer.alloc(1); const options = { fin: false }; const { port } = wss.address(); const ws = new WebSocket(<code>ws://localhost:${port}</code>);</p> <p>ws.on('open', function () { (function send() { ws.send(data, options, function (err) { if (err) return; send(); }); })(); });</p> <p>ws.on('error', console.error); ws.on('close', function (code, reason) { console.log(<code>client close - code: ${code} reason: ${reason.toString()}</code>); }); });</p> <p>wss.on('connection', function (ws) { ws.on('error', console.error); ws.on('close', function (code, reason) { console.log(<code>server close - code: ${code} reason: ${reason.toString()}</code>); }); }); </code></pre></p> <p>The vulnerability was responsibly disclosed and fixed by <a href="https://github.com/Nadav0077">Nadav Magier</a>.</p> <p>In vulnerable versions, the issue can be mitigated by lowering the value of the <code>maxPayload</code> option if possible.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"><code>bca91ad</code></a> [dist] 8.21.0</li> <li><a href="https://github.com/websockets/ws/commit/2b2abd458a1b647d0b6033bd62a619c36189839a"><code>2b2abd4</code></a> [security] Limit retained message parts</li> <li><a href="https://github.com/websockets/ws/commit/78eabe2a6677b231bf9c82601bde86ff91639490"><code>78eabe2</code></a> [security] Add latest vulnerability to SECURITY.md</li> <li>See full diff in <a href="https://github.com/websockets/ws/compare/8.20.1...8.21.0">compare view</a></li> </ul> </details> <br />
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md">js-yaml's changelog</a>.</em></p> <blockquote> <h2>[4.2.0] - 2026-06-01</h2> <h3>Added</h3> <ul> <li>Added <code>docs/safety.md</code> with notes about processing untrusted YAML.</li> <li>Added <code>maxDepth</code> (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.</li> <li>Added <code>maxMergeSeqLength</code> (20) loader option. Not a problem after <code>merge</code> fix, but an additional restriction for safety.</li> <li>Added sourcemaps to <code>dist/</code> builds.</li> </ul> <h3>Changed</h3> <ul> <li>Stop resolving numbers with underscores as numeric scalars, <a href="https://redirect.github.com/nodeca/js-yaml/issues/627">#627</a>.</li> <li>Switched dev toolchains to Vite / neostandard.</li> <li>Updated demo.</li> <li>Reorganized tests.</li> <li><code>dist/</code> files are no longer kept in the repository.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing of properties on the first implicit block mapping key, <a href="https://redirect.github.com/nodeca/js-yaml/issues/62">#62</a>.</li> <li>Fix trailing whitespace handling when folding flow scalar lines, <a href="https://redirect.github.com/nodeca/js-yaml/issues/307">#307</a>.</li> <li>Reject top-level block scalars without content indentation, <a href="https://redirect.github.com/nodeca/js-yaml/issues/280">#280</a>.</li> <li>Ensure numbers survive round-trip, <a href="https://redirect.github.com/nodeca/js-yaml/issues/737">#737</a>.</li> <li>Fix test coverage for issue <a href="https://redirect.github.com/nodeca/js-yaml/issues/221">#221</a>.</li> <li>Fix flow scalar trailing whitespace folding, <a href="https://redirect.github.com/nodeca/js-yaml/issues/307">#307</a>.</li> <li>Fix digits in YAML named tag handles.</li> </ul> <h3>Security</h3> <ul> <li>Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).</li> </ul> <h2>[3.14.2] - 2025-11-15</h2> <h3>Security</h3> <ul> <li>Backported v4.1.1 fix to v3</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/nodeca/js-yaml/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TaskarCenterAtUW/workspaces-frontend/network/alerts). </details>
Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.13.2 to 2.14.1. - [Commits](vitejs/launch-editor@v2.13.2...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.13.2 to 2.14.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/launch-editor/commit/3f97c648307a70e7c930ba63f040e6ba8e72bc16"><code>3f97c64</code></a> v2.14.1</li> <li><a href="https://github.com/vitejs/launch-editor/commit/0cc9550e05c35224a1f61914b9731723f78c06a7"><code>0cc9550</code></a> fix: reject UNC paths (<a href="https://redirect.github.com/vitejs/launch-editor/issues/138">#138</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/afd1ab907769adbb0fb76b564551f3cd24822ea6"><code>afd1ab9</code></a> ci: run tests on mac and windows (<a href="https://redirect.github.com/vitejs/launch-editor/issues/136">#136</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/0bfa328e4d2a70d3accd86645efde43a5a8fd931"><code>0bfa328</code></a> test: add some tests for launch-editor package (<a href="https://redirect.github.com/vitejs/launch-editor/issues/135">#135</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/1b006ae00061e83628c884770df4869bac481ed3"><code>1b006ae</code></a> chore: add README (<a href="https://redirect.github.com/vitejs/launch-editor/issues/134">#134</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/383ef26fceaaab75e4f122bf833a8d457e187272"><code>383ef26</code></a> v2.14.0</li> <li><a href="https://github.com/vitejs/launch-editor/commit/6277209316b28bd76b057a97fcdfa42da5adc181"><code>6277209</code></a> ci: harden publish settings</li> <li><a href="https://github.com/vitejs/launch-editor/commit/520b2f787af1bbe3d2333d952547fc90f2c01bb3"><code>520b2f7</code></a> fix(deps): update all non-major dependencies (<a href="https://redirect.github.com/vitejs/launch-editor/issues/129">#129</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/475ac662aeaa40eebe319f76acf7bd7ff2aba5d5"><code>475ac66</code></a> chore(deps): update dependency lint-staged to v17 (<a href="https://redirect.github.com/vitejs/launch-editor/issues/130">#130</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/247bf1dfe2c75efb50f507d33c2c5a3cbf4e20d0"><code>247bf1d</code></a> chore(deps): update dependency yorkie to v2 (<a href="https://redirect.github.com/vitejs/launch-editor/issues/131">#131</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/launch-editor/compare/v2.13.2...v2.14.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for launch-editor since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TaskarCenterAtUW/workspaces-frontend/network/alerts). </details>
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
shweta2101
approved these changes
Jun 29, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request introduces several significant UI and workflow improvements, focusing on navigation, theming, and utility enhancements. The most substantial changes are a complete redesign of the navigation bar for better mobile and desktop experience, a new GitHub workflow for automated environment tagging, and a broad update to the application's theme and utility classes.
Navigation and Layout Improvements:
components/AppNavbar.vue: Completely redesigned the navigation bar to support a responsive side-drawer menu on mobile devices, improved accessibility (keyboard navigation, focus management, Escape key support), and enhanced user profile/logout handling for both mobile and desktop. Updated branding and navigation links for clarity and consistency.components/AppLogo.vue: Updated the logo image to use the newtdei-logo.pngfor consistent branding.Theming and Utility Enhancements:
assets/scss/theme.scss,assets/scss/main.scss: Overhauled theme variables with new brand colors, font families, and utility classes. Added CSS variables for colors and fonts, improved autofill handling, and added utility classes for common UI elements (headers, subtitles, hints). [1] [2] [3] [4]Workflow Automation:
.github/workflows/tag.yml: Added a new GitHub Actions workflow to automatically update environment tags (dev,stage,prod) when pull requests are merged intodevelop,staging, orproductionbranches.Component and UI Tweaks:
components/DatasetTypeRadio.vue: Changed dataset type radio button styles frombtn-outline-primarytobtn-outline-secondaryfor better visual consistency with the new theme. [1] [2]components/AppSpinner.vue: Minor markup adjustment for improved readability and accessibility.components/AppImageViewer.vue: Added a new wrapper component for image viewing with customizable toolbar options.