Merge branch 'master' into refactor/remove-mobx-from-quotas-page

Author: jvorcak

.github/workflows/backend-lint-test.yml

@@ -1,42 +1,39 @@
 ---
 name: "Backend verify"
 on:
-  push:
-    tags:
-      - v*
-    branches:
-      - master
-    paths:
-      - 'backend/**.go'
-      - 'backend/go.mod'
-      - '.github/workflows/backend-lint-test.yml'
-  pull_request:
-    paths:
-      - 'backend/**.go'
-      - 'backend/go.mod'
-      - '.github/workflows/backend-lint-test.yml'
   workflow_call:
 permissions:
   contents: read
 jobs:
-  verify:
-    name: Lint & Test Backend
+  lint:
+    name: Lint Backend
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-go@v6
         with:
           go-version-file: 'backend/go.mod'
+          cache-dependency-path: 'backend/go.sum'
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v8
         with:
-          version: v2.4
+          version: v2.10
           working-directory: backend
           args: --timeout=10m --config=.golangci.yaml
+
+  test:
+    name: Test Backend
+    runs-on: blacksmith-4vcpu-ubuntu-2404
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-go@v6
+        with:
+          go-version-file: 'backend/go.mod'
+          cache-dependency-path: 'backend/go.sum'
       - name: Install Task
         uses: arduino/setup-task@v1
         with:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Unit & Integration Tests
-        run: task backend:test-integration
+        run: task backend:test-integration

.github/workflows/claude.yml

@@ -0,0 +1,52 @@
+name: Claude Code
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  pull_request_review:
+    types: [submitted]
+  issues:
+    types: [opened, assigned]
+
+jobs:
+  claude:
+    # Only org members with write access can trigger via @claude mentions
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+      actions: read
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 1
+          persist-credentials: false
+
+      - name: Configure git credentials
+        run: gh auth setup-git
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+
+      - name: Run Claude Code
+        uses: anthropics/claude-code-action@v1
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        with:
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          allowed_bots: ""
+          allowed_non_write_users: ""
+          use_commit_signing: true
+          claude_args: |
+            --disallowedTools WebFetch,WebSearch
+            --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh issue view:*),Bash(gh issue list:*),Bash(gh search:*),Bash(gh pr view:*),Bash(gh pr diff:*),Bash(gh pr list:*),Bash(gh pr comment:*)"

.github/workflows/fork-pr-verify.yml

@@ -0,0 +1,21 @@
+---
+name: PR verification (forks)
+on:
+  pull_request:
+    paths:
+      - "frontend/**"
+      - "backend/**"
+permissions:
+  contents: read
+jobs:
+  backend-verify:
+    if: github.event.pull_request.head.repo.fork == true
+    uses: ./.github/workflows/backend-lint-test.yml
+    permissions:
+      contents: read
+
+  frontend-verify:
+    if: github.event.pull_request.head.repo.fork == true
+    uses: ./.github/workflows/frontend-verify.yml
+    permissions:
+      contents: read

.github/workflows/frontend-verify.yml

@@ -1,16 +1,6 @@
 ---
 name: "Frontend Lint & Compile check"
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - "frontend/**"
-      - ".github/workflows/frontend-verify.yml"
-  pull_request:
-    paths:
-      - "frontend/**"
-      - ".github/workflows/frontend-verify.yml"
   workflow_call:
 env:
   CI: true

.github/workflows/repository-dispatch.yml

@@ -5,6 +5,9 @@ on:
     paths:
       - "frontend/**"
       - "backend/**"
+      - '.github/workflows/repository-dispatch.yml'
+      - '.github/workflows/backend-lint-test.yml'
+      - '.github/workflows/frontend-verify.yml'
     tags:
       - '*'
     branches:
@@ -25,6 +28,7 @@ jobs:
 
   dispatch:
     needs: [backend-verify, frontend-verify]
+    if: "!failure() && !cancelled()"
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - uses: aws-actions/configure-aws-credentials@v4
@@ -51,4 +55,4 @@ jobs:
           token: ${{ env.ACTIONS_BOT_TOKEN }}
           repository: redpanda-data/console-enterprise
           event-type: push
-          client-payload: '{"branch": "${{ github.ref_name }}", "commit_sha": "${{ github.sha }}"}'
+          client-payload: '{"branch": "${{ github.ref_name }}", "commit_sha": "${{ github.sha }}"}'

CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## Master / Unreleased
 
+## v3.5.2 / 2026-02-11
+- [BUGFIX] Fix Console sending "Authorization: Bearer undefined" header when authentication is not configured.
+- [BUGFIX] Fix pagination for lists exceeding page size causing incomplete data loading.
+- [BUGFIX] Fix memory leak in authentication boundary.
+
+## v3.5.1 / 2026-01-30
+- [IMPROVEMENT] Add schema metadata UI improvements with properties table display.
+- [BUGFIX] Fix Kafka Connect connector creation when using default values.
+- [BUGFIX] Fix connector name validation in JSON mode.
+- [BUGFIX] Fix connector task error modal not closing.
+- [BUGFIX] Fix security page redirect when Users tab unavailable.
+- [BUGFIX] Fix consumer offsets topic consumption failure.
+
 ## v3.5.0 / 2026-01-12
 - [IMPROVEMENT] Add defensive checks for Kafka Connect secrets and connector creation.
 - [BUGFIX] Fix JWT token handling for schema registry.

Taskfile.yaml

@@ -1,7 +1,7 @@
 version: 3
 
 vars:
-  GO_VERSION: 1.25.1
+  GO_VERSION: 1.26.0
   BUILD_ROOT: "{{ .ROOT_DIR }}/build"
   GO_BUILD_ROOT: '{{.BUILD_ROOT}}/go/{{.GO_VERSION}}'
   PATH_PREFIX: PATH={{.BUILD_ROOT}}/bin:{{.GO_BUILD_ROOT}}/bin:{{.BUILD_ROOT}}/bin/go:$PATH GOBIN={{ .BUILD_ROOT }}/bin/go GOROOT=

backend/.golangci.yaml

@@ -30,7 +30,7 @@ linters:
     - nilerr
     - nilnesserr
     - noctx
-    - nolintlint
+
     - reassign
     - revive
     - rowserrcheck
@@ -73,10 +73,9 @@ linters:
       excludes:
         - G104
         - G115
-    nolintlint:
-      require-explanation: true
-      require-specific: true
-      allow-unused: false
+        - G117 # Exported struct fields matching secret patterns - false positives on config structs
+        - G704 # SSRF via taint analysis - false positive on HTTP clients
+        - G705 # XSS via taint analysis - false positives on HTTP response writers
     sloglint:
       attr-only: true
       no-global: all
@@ -136,6 +135,12 @@ linters:
           disabled: true
         - name: enforce-switch-style
           disabled: true
+        - name: identical-switch-branches
+          disabled: true
+        - name: package-directory-mismatch
+          disabled: true
+        - name: deep-exit
+          disabled: true
   exclusions:
     generated: lax
     rules:

backend/go.mod

@@ -1,6 +1,6 @@
 module github.com/redpanda-data/console/backend
 
-go 1.25.1
+go 1.26.0
 
 require (
 	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.10-20250912141014-52f32327d4b0.1
@@ -23,10 +23,10 @@ require (
 	github.com/dop251/goja v0.0.0-20251103141225-af2ceb9156d7
 	github.com/fxamacker/cbor/v2 v2.9.0
 	github.com/getkin/kin-openapi v0.133.0
-	github.com/go-chi/chi/v5 v5.2.3
+	github.com/go-chi/chi/v5 v5.2.5
 	github.com/go-chi/cors v1.2.2
-	github.com/go-git/go-billy/v5 v5.6.2
-	github.com/go-git/go-git/v5 v5.16.3
+	github.com/go-git/go-billy/v5 v5.7.0
+	github.com/go-git/go-git/v5 v5.16.5
 	github.com/go-viper/mapstructure/v2 v2.4.0
 	github.com/google/go-cmp v0.7.0
 	github.com/google/uuid v1.6.0
@@ -66,9 +66,9 @@ require (
 	go.uber.org/mock v0.6.0
 	go.vallahaye.net/connect-gateway v0.11.0
 	golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6
-	golang.org/x/net v0.48.0
+	golang.org/x/net v0.50.0
 	golang.org/x/sync v0.19.0
-	golang.org/x/text v0.33.0
+	golang.org/x/text v0.34.0
 	google.golang.org/genproto v0.0.0-20251111163417-95abcf5c77ba
 	google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba
@@ -104,7 +104,7 @@ require (
 	github.com/bitly/go-simplejson v0.5.0 // indirect
 	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
-	github.com/cloudflare/circl v1.6.1 // indirect
+	github.com/cloudflare/circl v1.6.3 // indirect
 	github.com/cockroachdb/apd/v3 v3.2.1 // indirect
 	github.com/containerd/errdefs v1.0.0 // indirect
 	github.com/containerd/errdefs/pkg v0.3.0 // indirect
@@ -113,7 +113,7 @@ require (
 	github.com/cpuguy83/dockercfg v0.3.2 // indirect
 	github.com/cpuguy83/go-md2man/v2 v2.0.7 // indirect
 	github.com/creack/pty v1.1.20 // indirect
-	github.com/cyphar/filepath-securejoin v0.4.1 // indirect
+	github.com/cyphar/filepath-securejoin v0.6.1 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
 	github.com/dlclark/regexp2 v1.11.5 // indirect
@@ -151,7 +151,7 @@ require (
 	github.com/jcmturner/rpc/v2 v2.0.3 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/kevinburke/ssh_config v1.4.0 // indirect
+	github.com/kevinburke/ssh_config v1.6.0 // indirect
 	github.com/klauspost/compress v1.18.3 // indirect
 	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
 	github.com/knadh/koanf/maps v0.1.2 // indirect
@@ -225,10 +225,10 @@ require (
 	go.uber.org/zap v1.27.1 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.47.0 // indirect
-	golang.org/x/mod v0.31.0 // indirect
+	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/mod v0.32.0 // indirect
 	golang.org/x/oauth2 v0.31.0 // indirect
-	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/sys v0.41.0 // indirect
 	golang.org/x/time v0.13.0 // indirect
 	gopkg.in/linkedin/goavro.v1 v1.0.5 // indirect
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect