Skip to content

V1.2.1 - #75

Open
ar4ntic wants to merge 15 commits into
mainfrom
v1.2.1
Open

V1.2.1#75
ar4ntic wants to merge 15 commits into
mainfrom
v1.2.1

Conversation

@ar4ntic

@ar4ntic ar4ntic commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

Summary

Prepares BugPin v1.2.1 as a combined privacy, dependency-security, and runtime modernization release. The change adds server-enforced privacy controls and project diagnostics settings, upgrades the application to Bun 1.4 and TypeScript 7, refreshes the CE and EE dependency graphs, and hardens the production Docker build.

What changed

Security and privacy

  • Added a consolidated Security & Privacy console section at /security-privacy.
  • Added EU Privacy Mode controls with server-enforced sanitization before report data is stored.
  • EU Privacy Mode disables activity trails instance-wide, removes disallowed activity data, and strips query strings and fragments from diagnostic URLs.
  • Added project-level diagnostic controls and updated the widget to honor the effective capture policy.
  • Refined sensitive-data redaction so labeled tokens and Bearer credentials remain protected without masking ordinary long hashes and slugs.
  • Prevented privacy settings from being changed while current server settings are unavailable.

Admin Console

  • Added live report and project counts to the sidebar, preserving role-based visibility.
  • Updated router, test, editor, and build configuration for the upgraded frontend dependencies.
  • Updated the Security & Privacy page, project settings, and related tests for the new controls.

Runtime, dependencies, and packaging

  • Upgraded and pinned the runtime and production image to Bun 1.4.0.
  • Upgraded to TypeScript 7, Vite 8, React Router 7, TipTap 3, Zod 4, Hono, and the latest compatible CE and EE dependencies.
  • Replaced the vulnerable npm SheetJS package with the official SheetJS 0.20.3 distribution.
  • Updated Docker dependency installation to use frozen lockfiles and added build-time version stamping through APP_VERSION.
  • Moved widget declaration generation out of vite-plugin-dts and into a dedicated TypeScript 7 declaration build.
  • Preserved the widget's @shared/* source alias while rewriting only emitted declaration imports to package-relative paths.
  • Corrected the widget package type entry and verified the packed package from an isolated TypeScript 7 consumer.

Release and licensing

  • Bumped BugPin to v1.2.1 and the widget package to v1.1.2.
  • Added the v1.2.1 changelog.
  • Added the Enterprise Edition license and aligned copyright and trademark notices with Arantic Digital GmbH.

Reviewer notes

  • /security-privacy is the only Security & Privacy route; no legacy /security compatibility route is introduced.
  • TypeScript 7.0.2 is the only TypeScript compiler used by the widget build; no TypeScript 6 compatibility package remains.

Validation

  • make test — all server, admin, and widget test suites pass.
  • make typecheck — all components pass strict TypeScript validation.
  • make build — server, admin, and widget production builds pass.
  • make version-check — release versions are consistent.
  • make knip — passes with the repository's configured warning-only export reports.
  • bun audit — no Community Edition or Enterprise Edition dependency vulnerabilities reported.
  • No-cache Docker production build succeeds with a frozen lockfile.
  • Production container reaches healthy and reports version 1.2.1.
  • Packed widget declarations compile successfully in an isolated TypeScript 7 consumer with skipLibCheck: false.

ar4ntic added 15 commits August 21, 2026 20:38
- Updated various dependencies in bun.lock and package.json, including @types/bun, @types/node, knip, and typescript.
- Bumped version to 1.2.1 and set packageManager to bun@1.4.0.
- Modified Dockerfile to use a build argument for BUN_VERSION and improved dependency installation commands.
- Simplified BrowserRouter and MemoryRouter configurations by removing unnecessary future props.
- Updated various dependencies in package.json, including @tiptap/core and @radix-ui packages.
- Adjusted import statement for TextStyle in TemplateEditor component.
- Modified Vite configuration to improve path resolution and code splitting settings.
- Bumped widget version to 1.1.2 in package.json.
- Updated dependencies including fabric, lucide-preact, preact, and various devDependencies.
- Modified submit report schema to enforce string type for annotations.
- Added "types": ["bun"] to tsconfig.json for improved type support.
- Adjusted Vite configuration for better path resolution.
…hemas

- Bumped version to 1.2.1 in package.json.
- Updated dependencies including @aws-sdk/client-s3, hono, nodemailer, zod, and devDependencies.
- Improved error handling in validation schemas for language mode and default language.
- Enforced string type for settings and config fields in project and integration schemas.
- Integrated React Query to fetch and display report statistics and project counts in the sidebar.
- Updated NavMain component to conditionally show counts for 'Reports' and 'Projects' based on fetched data.
- Modified sidebar tests to verify the display of counts for reports and projects.
…erence

- Added execArgv setting to Vite test configuration to avoid conflicts between Node's process-wide Web Storage and jsdom's browser-scoped storage.
- Introduced LICENSE-EE file outlining terms for the BugPin Enterprise Edition.
- Updated copyright notices to reflect "Arantic Digital GmbH" across various files including NOTICE, AboutDialog, and LICENSE files.
- Clarified proprietary nature of Enterprise Edition features in README and NOTICE files.
- Introduced a new Security & Privacy page that consolidates security and privacy settings.
- Updated routing to reflect the new path for the Security & Privacy page.
- Added diagnostic settings in the Project Settings dialog, allowing users to control data capture options.
- Enhanced sidebar navigation to include the new Security & Privacy section.
- Updated tests to cover the new functionality and ensure proper rendering of the Security & Privacy page.
- Bumped versions for @bugpin/admin, @bugpin/server, and @arantic/bugpin-widget to 1.2.1, 1.2.1, and 1.1.2 respectively.
- Removed deprecated @typescript/typescript6 dependency from widget package.
…andling

- Updated type declaration paths in package.json to point to the correct directory.
- Enhanced build script to include a new step for generating type declarations.
- Introduced tsconfig.build.json for managing type declaration generation.
- Adjusted tsconfig.json to include shared TypeScript files.
- Removed unused vite-plugin-dts from Vite configuration and added a script to rewrite declaration alias imports.
@ar4ntic
ar4ntic requested a review from RahulRaj97 August 23, 2026 08:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant