Zhihe Li
7fc10855d9
feat: 🎸 Add override to fix node 24 builds ( #3301 )
2026-06-01 18:39:45 -04:00
Susmitha Girumala
4aec0d3acc
chore: 🤖 Upgrade fast-uri for cve ( #3289 )
...
✅ Closes: https://github.com/hashicorp/boundary-ui/security/code-scanning/333 ,
https://github.com/hashicorp/boundary-ui/security/code-scanning/334 ,
https://github.com/hashicorp/boundary-ui/security/code-scanning/335 ,
https://github.com/hashicorp/boundary-ui/security/code-scanning/336
2026-05-29 15:27:18 -04:00
Susmitha Girumala and Zhihe Li
e43625f76c
chore: 🤖 Upgrade tmp module for secvuln resolution ( #3287 )
...
* chore: 🤖 Upgrade tmp module for secvul cve-2026-44705
Resolves
https://github.com/hashicorp/boundary-ui/security/code-scanning/342
* chore: 🤖 Upgrade tmp to resolve desktop client secvuln
✅ Closes: https://github.com/hashicorp/boundary-ui/security/code-scanning/342
---------
Co-authored-by: Zhihe Li <zhihe.li@hashicorp.com >
2026-05-29 14:26:59 -04:00
Lisbet Alvarez
f9197d5a99
chore: 🤖 Upgrade electron to v42.0.1 (latest) ( #3278 )
2026-05-21 16:59:13 -07:00
Zhihe Li
7dadc53fe1
Remove renderer url ( #3194 )
...
* feat: 🎸 Refactor how we store cluster URL
2026-05-20 16:36:16 -04:00
Zhihe Li
6e9fe1c675
docs: ✏️ Add documentation for pnpm overrides ( #3263 )
2026-05-13 12:54:34 -04:00
Cameron Perera
b87ed9f3db
chore: 🤖 bump xmldom in electron-app ( #3243 )
2026-04-21 15:40:03 -05:00
dependabot[bot] and cameronperera
95b78299f9
chore(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /ui/desktop/electron-app ( #3210 )
...
* chore(deps): bump brace-expansion in /ui/desktop/electron-app
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion ) from 1.1.12 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13 )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 1.1.13
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: 🤖 bump brace-expansion package
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: cameronperera <cameron.perera@hashicorp.com >
2026-04-21 13:39:20 -05:00
dependabot[bot] and cameronperera
214304dc8c
chore(deps): bump lodash from 4.17.23 to 4.18.1 in /ui/desktop/electron-app ( #3236 )
...
* chore(deps): bump lodash in /ui/desktop/electron-app
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: 🤖 bump lodash version in electron-app
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: cameronperera <cameron.perera@hashicorp.com >
2026-04-21 10:55:03 -05:00
Lisbet Alvarez
ec698d5672
chore: 🤖 update desktop client changelog and version ( #3217 )
...
* chore: 🤖 update desktop client changelog and version
2026-04-03 12:28:15 -07:00
Priya Patel
266f10d1eb
Fix terminal view lag while route changes ( #3228 )
...
* fix: 🐛 fixed terminal view being visible after route change
* test: 💍 fixed tests
* chore: 🤖 used willTransition hook
* chore: 🤖 hides terminal view on willtransition
* fix: 🐛 removed unneccessary await from hideTerminalView
* chore: 🤖 removed extra hideterminalview call
* chore: 🤖 removed settabactive on failure
2026-04-03 12:11:46 -07:00
Cameron Perera
4e7d6ba57e
fix: 🐛 add default value to spawn options param ( #3227 )
2026-04-03 09:59:18 -07:00
dependabot[bot] and Zhihe Li
33055d6095
chore(deps): bump picomatch from 2.3.1 to 2.3.2 in /ui/desktop/electron-app ( #3209 )
...
* chore(deps): bump picomatch in /ui/desktop/electron-app
Bumps [picomatch](https://github.com/micromatch/picomatch ) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: 🤖 Update picomatch
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zhihe Li <zhihe.li@hashicorp.com >
2026-03-31 12:39:59 -04:00
Priya Patel
f48e6dc049
Refactor: Load terminal using web contents view ( #3190 )
...
* chore: 🤖 create terminal preload
* chore: 🤖 created terminal-manager service and updated handlers
* chore: 🤖 adds terminal view and bundling script
* chore: 🤖 addede terminal service, updated tabs component
* chore: 🤖 hides terminal on signout modal
* test: 💍 added terminal service tests
* chore: 🤖 removed debug file
* chore: 🤖 adds windows event handler
* docs: ✏️ adds jsdoc for terminal view
* chore: 🤖 removed xterm dependency from desktop package.json
* chore: 🤖 updated sessionId check
* chore: 🤖 fixed zoom sync with main window
* chore: 🤖 adds CSP for terminal view
* chore: 🤖 hides terminal on error
* chore: 🤖 cleamup listener, fixed failing tests
* chore: 🤖 fixed terminal view cleanup
* chore: 🤖 addressed feedback
* fix: 🐛 adds null check for destroy, hdie terminal view
* fix: 🐛 fixed terminal view on logout/app quit modal
* fix: 🐛 fixed hidding modal on app quit
* chore: 🤖 addressed feedback
* chore: 🤖 hides terminal view when sidenav is expanded
* chore: 🤖 removed canDisplayExistingTerminal
2026-03-30 10:08:55 -07:00
Priya Patel
605b7940e3
fix: 🐛 electron IPC error handling ( #3208 )
...
* fix: 🐛 fixed electron error handling
* chore: 🤖 addressed feedback
* chore: 🤖 removed error.name, return error as is from main
* chore: 🤖 updated error name
* chore: 🤖 adds new error on renderer side
* chore: 🤖 send error message only
* chore: 🤖 adds error fallback
2026-03-27 14:26:31 -07:00
Priya Patel
392e49bf49
refactor: 💡 window postmessage pattern -> contextbridge boundary api ( #3167 )
...
* refactor: 💡 postmessage pattern -> contextbridge boundary api
* refactor: 💡 use sinon stub for boundary api mock test helper
* refactor: 💡 updated tests
* refactor: 💡 renamed boundary mock api
* chore: 🤖 addressed feedback
* refactor: 💡 updated context bridge name, added nested objects
2026-03-13 15:14:38 -07:00
Lisbet Alvarez
eba17d3c71
chore: 🤖 bump node tar to 7.5.10 ( #3193 )
2026-03-10 14:31:37 -07:00
Cameron Perera
b63ea6eee0
fix: 🐛 clean up sessions tracking in session manager ( #3150 )
...
* fix: 🐛 clean up sessions tracking in session manager
* refactor: 💡 PR feedback
* fix: 🐛 add onClose event listener to clean up sessions
* refactor: 💡 update to async/await
* refactor: 💡 move close event after spawn
* refactor: 💡 move onClose session handler to spawn onClose
2026-03-05 12:02:38 -06:00
dependabot[bot] and Zhihe Li
93d709f7ba
chore(deps): bump ajv from 8.17.1 to 8.18.0 in /ui/desktop/electron-app ( #3172 )
...
* chore(deps): bump ajv from 8.17.1 to 8.18.0 in /ui/desktop/electron-app
Bumps [ajv](https://github.com/ajv-validator/ajv ) from 8.17.1 to 8.18.0.
- [Release notes](https://github.com/ajv-validator/ajv/releases )
- [Commits](https://github.com/ajv-validator/ajv/compare/v8.17.1...v8.18.0 )
---
updated-dependencies:
- dependency-name: ajv
dependency-version: 8.18.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: 🤖 Upgrade ajv
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zhihe Li <zhihe.li@hashicorp.com >
2026-02-27 13:51:49 -05:00
Zhihe Li
999c21c66a
Upgrade eslint ( #3175 )
...
* chore: 🤖 Upgrade eslint config for admin ui
* chore: 🤖 Fix eslint issues for admin
* chore: 🤖 Upgrade eslint config for desktop
* chore: 🤖 Fix linting errors in desktop
* chore: 🤖 Upgrade eslint for api addon
* chore: 🤖 Fix eslint issues in api addon
* chore: 🤖 Upgrade eslint for auth addon
* chore: 🤖 Fix eslint issues in auth addon
* chore: 🤖 Upgrade core eslint config
* chore: 🤖 Fix eslint issue for core addon
* chore: 🤖 Upgrade eslint config for rose addon
* chore: 🤖 Fix eslint issue for rose addon
* chore: 🤖 Upgrade e2e eslint config
* chore: 🤖 Fix eslint issues in e2e
* chore: 🤖 Fix CI linting issues
* chore: 🤖 Add back linting server files for the future
* chore: 🤖 Update qunit rules to use extends
2026-02-27 13:32:27 -05:00
Zhihe Li
df24ba6a15
chore: 🤖 Update minimatch to latest versions for security alert ( #3179 )
2026-02-25 17:35:21 -05:00
Zhihe Li
aaabfbe54d
chore: 🤖 Update node-tar ( #3178 )
2026-02-25 15:14:23 -05:00
Lisbet Alvarez
772857dbad
Icu 18518 UI add sorting support to cache daemon handler ( #3168 )
...
* feat: 🎸 add sorting support & sort feature on targets name column
* test: 💍 cleanup and add tests
* refactor: 💡 remove log
* fix: 🐛 dont add undefined/null values from sort to query
✅ Closes: https://hashicorp.atlassian.net/browse/ICU-18518
2026-02-19 10:38:54 -08:00
Cameron Perera
ea1e7a99de
fix: 🐛 update isRunning to check exitCode ( #3148 )
...
* fix: 🐛 update isRunning to check exitCode
* chore: 🤖 fix logic check for isRunning
* refactor: 💡 add signalCode check for isRunning
2026-02-13 17:13:59 -06:00
Cameron Perera
6f7138be46
chore: 🤖 bump lodash to 4.17.23 ( #3149 )
2026-01-30 08:22:03 -06:00
Lisbet Alvarez
3ba93927fe
Update copyright headers ( #3146 )
...
* empty commit
* Add missing copyright headers
* chore: 🤖 update copywrite config file with correct year
* Add missing copyright headers
* empty commit (gh action merge checks are stuck)
2026-01-28 17:09:06 -08:00
55e1e68f30
[COMPLIANCE] Update Copyright and License Headers ( #3099 )
...
Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com>
Co-authored-by: Dharini <dharini@hashicorp.com >
2026-01-20 11:35:10 -05:00
Dharini
719bab7358
chore: 🤖 Desktop client changelog and cli version update ( #3087 )
2025-11-21 13:29:01 -08:00
Cameron Perera
dd0c5df25c
chore: 🤖 update tmp package to 0.2.5 ( #3026 )
...
* chore: 🤖 update tmp package to 0.2.5
* chore: 🤖 add tmp@0.2.5 override
2025-11-19 17:49:45 -06:00
Priya Patel
4fc3244049
refactor: 💡 update logic to get preferred rdp client ( #3066 )
...
* refactor: 💡 updated logic to store preferred rdp client
* refactor: 💡 simplified preferred client logic
2025-11-19 14:22:07 -08:00
Priya Patel
e55ea0b629
feat: 🎸 preferred clients section on settings page ( #3034 )
...
* feat: 🎸 preferred clients section on settings page
* chore: 🤖 update mock ipc with new handlers
* refactor: 💡 moved windows rdp protocol to const
* refactor: 💡 moved rdp calls to app route
* test: 💍 fixed failings tests
* refactor: 💡 addressed comments
* fix: 🐛 fixed failing tests
* refactor: 💡 add mock rdp service calls to tests
* refactor: 💡 addressed comments
* test: 💍 add additional tests
* refactor: 💡 fixed test failure
2025-11-19 14:22:06 -08:00
Dharini
6554af1164
chore: 🤖 add ipc handlers for rdp ( #3031 )
2025-11-19 14:22:06 -08:00
Priya Patel
437d0e686d
Create new RDP service ( #3029 )
...
* feat: 🎸 added a new RDP service
* fix: 🐛 rdp test
* refactor: 💡 update error handling for fetching rdp clients
* refactor: 💡 addressed comments
* fix: 🐛 revert private field
* refactor: 💡 addressed comments
* refactor: 💡 updated rdp clients to array of strings
2025-11-19 14:22:06 -08:00
hashicc
1c49303432
chore: 🤖 update electron to avoid potential macos tahoe issue ( #3024 )
...
Electron has an issue being reported with latest macos tahoe:
https://github.com/electron/electron/issues/48311
This has been fixed in:
38.2.0
37.6.0
36.9.2
We are currently on 38.0.0 so this commit bumps electron to 38.2.0
2025-11-13 08:38:57 -05:00
Lisbet Alvarez
48d0087141
Unload expired sessions from store ( #3033 )
...
* fix: 🐛 unload expired sessions from ember data store
* fix: 🐛 add unloadAll & include terminated to admin ui
* test: 💍 update tests
* refactor: 💡 pr feedback for admin ui
* refactor: 💡 remove unneeded query from desktop ui
* refactor: 💡 check pushToStore var
* Revert "refactor: 💡 remove unneeded query from desktop ui"
* fix: 🐛 fix proxy details being removed after unload
* refactor: 💡 remove log
2025-11-11 11:16:12 -08:00
Zhihe Li
838bc37243
fix: 🐛 Fix sanitizing of tokens when logging ( #3036 )
2025-10-29 17:05:22 -04:00
Zhihe Li
72639bd6a3
fix: 🐛 Pass in session time out when creating session ( #3008 )
...
* fix: 🐛 Pass in session time out when creating session
✅ Closes: https://hashicorp.atlassian.net/browse/ICU-17701
2025-09-22 16:31:44 -04:00
Zhihe Li
d2616acf36
fix: 🐛 Pass the addr to CLI when canceling sessions ( #3007 )
2025-09-17 18:15:39 -04:00
Zhihe Li
ee7c916494
fix: 🐛 Fix sessions not properly getting cleaned up ( #3002 )
...
✅ Closes: https://hashicorp.atlassian.net/browse/ICU-17645
2025-09-15 18:11:43 -04:00
hashicc
dd6e4ef2d0
chore: 🤖 update desktop client changelog & bundled cli version ( #2992 )
...
* chore: 🤖 update cli version bundled with desktop client
* docs: ✏️ update changelog
2025-09-08 11:47:27 -04:00
Zhihe Li
6b120b053a
chore: 🤖 Update electron dependency ( #2989 )
2025-09-04 16:49:50 -04:00
Zhihe Li
90fd2f1447
fix: 🐛 Fix bug that prevents setting cluster URL ( #2975 )
...
✅ Closes: https://hashicorp.atlassian.net/browse/ICU-17579
2025-08-28 12:27:12 -04:00
Carlos Alcaide Corvo
6e79a2a133
Delete development environment variables for the appUpdater ( #2961 )
2025-08-15 14:12:08 -07:00
dependabot[bot] and Zhihe Li
088deaed3a
chore(deps): bump tmp from 0.2.3 to 0.2.5 in /ui/desktop/electron-app ( #2962 )
...
Bumps [tmp](https://github.com/raszi/node-tmp ) from 0.2.3 to 0.2.5.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.3...v0.2.5 )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zhihe Li <zhihe.li@hashicorp.com >
2025-08-14 14:50:15 -04:00
Carlos Alcaide Corvo
5fd9f0216a
Fix security vulnerability within desktop appUpdater ( #2953 )
...
* use app.isPackaged instead of electron-is-dev
2025-08-12 11:19:43 -07:00
Lauren and Zhihe Li
990e2d6b9d
[Desktop][Bug fix]: Stop target sessions before unauthenticating user session ( #2891 )
...
* add stopAll invocation to ipc handler
* trigger modal on both signout btns
* refactor invalidateSession fn
* fix application controller tests
* fix failing tests settings-card/user
* add test to Acceptance | authentication
* migrate electron dialog.showMessageBoxSync to Hds
* rename channel and tracked prop, consolidate cancel fns
* combine modals, add willDestroy, refactor
* test signout and close sessions modal
* address feedback
* refactor window.electron in authentication-test
* address feedback
* refactor: 💡 Fix failing tests
---------
Co-authored-by: Zhihe Li <zhihe.li@hashicorp.com >
2025-08-04 16:44:27 -04:00
Dharini
c92e93ab1c
chore: 🤖 change log and cli version ( #2917 )
2025-07-02 10:29:12 -07:00
Lisbet Alvarez
19426cfd51
chore: resolve brace expansion to patched versions for vulnerability fix ( #2912 )
...
* chore: 🤖 resolve brace-expansion 1.1.11 to 1.1.12
* chore: 🤖 resolve brace-expansion 2.0.1 to 2.0.2
2025-06-27 14:39:01 -07:00
hashicc
f738e71657
chore: 🤖 explicitly require managing pnpm "built dependencies" ( #2873 )
...
pnpm by default refuses to run install scripts, some packages require
these and others are use install scripts as a way to provide messages.
Instead of a pnpm warning this commit ensures that the package that
is detected with an install script must be either listed in
ignoredBuiltDependencies or onlyBuiltDependencies. Running pnpm
install will fail until a package has been categorized
As part of this commit the packages that were previously listed
as warnings have been categorized under ignoredBuiltDependencies
since their install scripts are not required for the functionality
of the package
2025-06-09 10:26:02 -04:00
hashicc
5a302b0bcc
Migrate to pnpm ( #2828 )
...
* chore: 🤖 remove packageManager field from package.json
* chore: 🤖 migrate yarn resolutions to pnpm overrides
* chore: 🤖 generate pnpm-lock.yml by using: pnpm import yarn.lock
* chore: 🤖 remove yarn.lock file
* chore: 🤖 migrate workspace configuration
* chore: 🤖 remove .yarn and .yarnrc.yml config
* chore: 🤖 update .copyright.hcl to ignore root pnpm files
* chore: 🤖 migrate husky pre-commit hook from yarn to pnpm
* chore: 🤖 migrate package.json scripts from yarn to pnpm
* chore: 🤖 update rose package.json & build to use explicit deps
* chore: 🤖 remove unused cp metadata.json command in pjson script
The cp metadata.json to dist was added in:
d19a251
The addons/rose/metadata.json no longer exists so it can't be copied
* chore: 🤖 migrate electron-app package.json scripts to pnpm
* chore: 🤖 create pnpm workspace for electron-app w/ hoisted deps
* chore: 🤖 migrate electron-app yarn lockfile to pnpm lockfile
Used "pnpm import yarn.lock"
* chore: 🤖 migrate electron-app overrides
node-gyp isn't needed since the fork is used via @electron/node-gyp
see: https://github.com/electron/node-gyp?tab=readme-ov-file#node-gyp---nodejs-native-addon-build-tool
* chore: 🤖 add trusted deps to be built to onlyBuiltDependencies
This is a pnpm feature that increases security. By defining these
dependencies they are being trusted to allow install hooks,
including postinstall. See:
https://pnpm.io/settings#onlybuiltdependencies
* chore: 🤖 add electron-app pnpm files to copyright header ignore
* chore: 🤖 remove yarn references from .*ignore files
* chore: 🤖 migrate --yarn to --pnpm for ember-cli-update.json
This isn't clearly documented but something that is supported
and can be found in other ember apps:
https://github.com/search?q=--pnpm+ember-cli-update.json&type=code
* chore: 🤖 migrate ci and related scripts to use pnpm
The cache is migrated to use the cache supported by
actions/setup-node@v4, an action we are already using. This is the
recommended way by pnpm:
https://pnpm.io/continuous-integration#github-actions
This commit also ensures that all github actions are using
consistent versions of actions/setup-node and pnpm/action-setup
* docs: ✏️ update documentation to use pnpm instead of yarn
* chore: 🤖 use explicit asciinema-player dependency
Because we override styles on asciinema-player we depend on their
styles. What might be a minor non-breaking change in their version could
(and did) break our style expectations in our overrides.
* chore: 🤖 run pnpm install and commit lockfile changes
* chore: 🤖 Remove ember-inflector from being overidden
https://github.com/hashicorp/boundary-ui/pull/2828#discussion_r2110380711
* chore: 🤖 remove highlight.js from pnpm overrides
https://github.com/hashicorp/boundary-ui/pull/2828#discussion_r2109847938
* chore: 🤖 remove additional unnecessary files from ignore files
* docs: ✏️ fix pnpm doc links
* chore: 🤖 use corepack to specify packageManager in package.json
* chore: 🤖 let pnpm action in ci use packageManager for version
https://github.com/pnpm/action-setup?tab=readme-ov-file#version
* docs: ✏️ fix broken pnpm website links
2025-06-03 12:55:12 -04:00