Road to 1.11 🚀#206
Conversation
bash create_bunkerweb_plugin.sh -d "MYPLUGIN" --with-ui --with-jobs --with-configs --with-templates MYPLUGIN
will fix later #needs_fix
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.11 to 4.36.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@6bb031a...8aad20d) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.3.0 to 4.2.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@9780b0c...650006c) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@11bd719...9c091bb) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…github/codeql-action-4.32.2 deps/gha: bump github/codeql-action from 3.28.11 to 4.36.2
…actions/checkout-6.0.2 deps/gha: bump actions/checkout from 4.2.2 to 7.0.0
…docker/login-action-3.7.0 deps/gha: bump docker/login-action from 3.3.0 to 4.2.0
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
created a plugin for authentik / auth request
fix(authentik): harden identity-header handling, docs, and tests
plugin generator for creating a new plugin structure
test: parallelize CI into a matrix, cover notifier plugins, add unit tests
Matrix Notification Plugin
fix: multipart parsing for HTTP/2 support in ClamAV plugin
…on (quoted/unquoted/RFC 5987)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.2.0 to 6.5.0. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@3041bf5...924ae3a) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: 6.5.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5.3.0 to 6.3.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@0b93645...ece7cb0) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…actions/setup-go-6.5.0 deps/gha: bump actions/setup-go from 5.2.0 to 6.5.0
…actions/setup-python-6.3.0 deps/gha: bump actions/setup-python from 5.3.0 to 6.3.0
|
Caution Review failedThe pull request is closed. Warning Ignoring CodeRabbit configuration file changes. For security, only the configuration from the base branch is applied for open source repositories. ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository UI Review profile: ASSERTIVE Plan: Pro Run ID: ⛔ Files ignored due to path filters (14)
📒 Files selected for processing (116)
Root / shared
|
| Layer / File(s) | Summary |
|---|---|
Review and release automation .coderabbit.yaml, .github/dependabot.yml, .github/workflows/*.yml |
Repository review settings, Dependabot, CodeQL, and release workflows are updated. |
Test pipeline .busted, .github/workflows/tests.yml, .tests/build-push.sh |
Test discovery, the test workflow, and the build/push helper script are updated together. |
Local tooling and test helpers .gitignore, .pre-commit-config.yaml, .prettierignore, package.json, pyproject.toml, misc/update_version.sh, tests/conftest.py, tests/test_ui_actions.py, tests/misc/json2md.py, spec/helpers/* |
Ignore rules, pre-commit hooks, package metadata, version rewriting, and shared test helpers are updated. |
Repository docs and compatibility README.md, CLAUDE.md, COMPATIBILITY.json |
Repository overview, contributor guidance, and compatibility mappings are refreshed. |
Plugin generator scaffolding
| Layer / File(s) | Summary |
|---|---|
Generator docs and template templates/README.md, templates/template_diagram.mmd |
The generator README and plugin-flow template are populated. |
Base scaffold output templates/create_bunkerweb_plugin.sh |
The scaffold script now validates plugin names and writes plugin metadata and Lua entrypoints. |
Optional generated components templates/create_bunkerweb_plugin.sh |
The scaffold script now emits optional UI hooks, jobs, NGINX templates, and custom template files. |
README output and CLI templates/create_bunkerweb_plugin.sh |
The scaffold script now writes plugin READMEs and handles overwrite prompts and CLI parsing. |
Authentik plugin
| Layer / File(s) | Summary |
|---|---|
Core auth flow authentik/authentik_helpers.lua, authentik/authentik.lua, authentik/plugin.json |
The Authentik manifest, helper module, and request-handling plugin are added. |
Template and docs authentik/confs/server-http/authentik.conf, authentik/docs/diagram.mmd, authentik/README.md |
The outpost proxy template, request-flow diagram, and README are added. |
Integration stack .tests/authentik.sh, .tests/authentik/docker-compose.yml, .tests/authentik/mock-outpost.conf |
The Authentik end-to-end stack, mock outpost, and shell assertions are added. |
Helper spec spec/authentik_helpers_spec.lua |
The pure helper functions are covered by Busted specs. |
Cloudflare plugin
| Layer / File(s) | Summary |
|---|---|
Contract and helpers cloudflare/plugin.json, cloudflare/cloudflare_helpers.lua |
The Cloudflare manifest and helper module are added. |
Configuration and docs cloudflare/confs/*/cloudflare.conf, cloudflare/confs/server-http/cloudflare-ssl.conf, cloudflare/docs/diagram.mmd, cloudflare/README.md |
Real-IP, mTLS, and ban-sync config templates, plus the flow diagram and README, are added. |
Runtime and UI cloudflare/cloudflare.lua, cloudflare/ui/actions.py |
The request trust engine and UI ping action are added. |
Job workers cloudflare/jobs/cloudflare_helpers.py, cloudflare/jobs/cf-*.py |
Shared Python helpers and the scheduled Cloudflare jobs are added. |
Integration tests .tests/cloudflare/*, spec/cloudflare_helpers_spec.lua, tests/test_cloudflare_helpers.py |
The Cloudflare end-to-end stack, mocks, and helper tests are added. |
Notification plugins
| Layer / File(s) | Summary |
|---|---|
Discord notification flow discord/*, spec/discord_helpers_spec.lua |
Discord helper redaction, webhook dispatch, docs, UI status handling, and helper specs are updated. |
Slack notification flow slack/*, spec/slack_helpers_spec.lua |
Slack helper redaction, webhook dispatch, docs, UI status handling, and helper specs are updated. |
Webhook notification flow webhook/*, spec/webhook_helpers_spec.lua |
Webhook helper redaction, payload handling, docs, UI status handling, and helper specs are updated. |
Matrix notification flow matrix/*, spec/matrix_helpers_spec.lua |
Matrix helper redaction, notification dispatch, docs, UI status handling, and helper specs are updated. |
Shared notifier integration stack .tests/notifier/* |
The shared notifier compose stack, rate-limit mock, and end-to-end checks are added. |
Security scanning plugins
| Layer / File(s) | Summary |
|---|---|
ClamAV plugin clamav/*, spec/clamav_helpers_spec.lua, .tests/clamav.sh |
ClamAV helper extraction, scan matching, docs, UI, specs, and end-to-end checks are updated. |
Coraza plugin coraza/*, coraza/api/* |
Coraza manifest, sidecar build/runtime, docs, UI, and unit tests are updated. |
VirusTotal plugin virustotal/*, spec/virustotal_helpers_spec.lua, .tests/virustotal/* |
VirusTotal helper extraction, API base URL config, docs, mock stack, and helper specs are added. |
Estimated code review effort
🎯 5 (Critical) | ⏱️ ~120 minutes
Possibly related PRs
- bunkerity/bunkerweb-plugins#200: Adds the Authentik plugin implementation; this PR updates the Authentik runtime, templates, and integration tests in the same area.
- bunkerity/bunkerweb-plugins#106: Adds the Matrix plugin implementation; this PR extends the Matrix helpers, runtime, docs, and tests.
- bunkerity/bunkerweb-plugins#150: Adds plugin generator scaffolding; this PR updates the generator README, template diagram, and scaffold script.
Poem
A flock of plugins learned to sing,
With headers redacted, quiet and neat.
Mocks stood ready, CI at spring,
And tests marched in time with steady feet.
A tidy release, brisk and complete.
✨ Finishing Touches
📝 Generate docstrings
- Create stacked PR
- Commit on current branch
Warning
There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.
🔧 golangci-lint (2.12.2)
level=error msg="[linters_context] typechecking error: pattern ./...: directory prefix . does not contain main module or its selected dependencies"
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Comment @coderabbitai help to get the list of available commands.
No description provided.