Mir Arif Hasan
442242c8ca
chore: security patch for the quic-go vulnerability ( #5710 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
Co-authored-by: Nahid Hasan <52489202+nahidhasan94@users.noreply.github.com>
2025-12-19 21:00:22 +05:30
Shreyas
e025b8c8e1
perf(webapp-server): opt for build over run time ( #5644 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2025-12-15 11:54:37 +05:30
Mir Arif Hasan
05927f3d4d
chore: security patch for the dependency chain v2025.12.0 ( #5678 )
...
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2025-12-12 16:58:35 +05:30
Mir Arif Hasan
92031c84c1
fix: filter undefined values in config and update build files ( #5610 )
2025-11-24 19:55:08 +06:00
Mir Arif Hasan
904a1b0405
chore: security patch for the dependency chain v2025.11.0 ( #5590 )
...
Bump dependencies and account for breaking changes.
---------
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2025-11-24 14:21:29 +05:30
Mir Arif Hasan
53e8b28459
chore: security patch for the dependency chain ( #5487 )
...
v2025.10.0
---------
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-10-22 18:48:20 +05:30
Mir Arif Hasan
cd084ebbb3
fix: ensure graceful shutdown and container stop when stopApp is called ( #5494 )
...
* fix: graceful shutdown handling for backend app
* chore: add startup delay to health check script
2025-10-21 19:39:39 +06:00
Mir Arif Hasan
37060638df
chore: security patch for the dependency chain ( #5400 )
...
Bump non-major dependencies
---------
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2025-09-24 16:22:31 +05:30
Leonic
08def33801
fix: ensure npm is installed for Node.js base image ( #5397 )
...
* fix: ensure npm is installed for Node.js base image
* Apply suggestion from @Copilot
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-09-24 09:43:50 +06:00
James George
42089fbb55
chore: bump dependencies and account for breaking changes ( #5329 )
...
Co-authored-by: mirarifhasan <arif.ishan05@gmail.com>
2025-08-20 23:04:14 +05:30
Mir Arif Hasan
37cca6cfc9
chore: security patches for the dependency chain ( #5278 )
2025-07-28 15:53:25 +05:30
Andrew Bastin
78a165dcbb
chore: security patches for the dependency chain ( #5196 )
2025-06-25 19:33:10 +05:30
Andrew Bastin
decbb56c9f
chore: bump vulnerable dependencies
2025-04-28 15:11:15 +05:30
Andrew Bastin
ba64fea681
chore: bump vulnerable dependencies ( #4943 )
2025-03-27 22:45:29 +05:30
Shreyas
390fc40ee0
feat(infra): make webapp server part of fe container ( #4843 )
2025-03-06 16:02:42 +05:30
Andrew Bastin
af604ab392
chore: bump vulnerable dependencies
2025-02-28 01:33:59 +05:30
Shreyas
a6147f4ce4
feat: platform independent core and the new desktop app ( #4684 )
...
* feat(desktop): init
* feat(desktop): external app download and setup
* feat(desktop): offload app load to plugin system
* perf(desktop): add rdbms facade and caching layer
* feat: parallelize signing, shared trust, lru cache
* feat: webapp encoder + compressor + hasher server
* feat(desktop): app autoupdate with hashed loader
* feat(kernel): init `hoppscotch-kernel`
* feat(kernel): `io`
* feat(kernel): `network`
* feat(kernel): `network` - native interceptor
* feat(kernel): `network` - interceptor - rest
* feat(kernel): `network` - interceptor - graphql
* feat(kernel): `network` - interceptor - capabilities
* feat(kernel): `network` - interceptor - `FormData`
* feat(kernel): `network` - interceptor - `oauth2.0`
* feat(kernel): `store`
* feat(desktop): dragging, traffic light, plugin workspaces
* feat(kernel|wip): `store`
* feat(kernel): `network` - capabilities - with active
* feat(kernel|wip): `network` - interceptor - `proxy`
* feat(kernel|wip): `network` - relay ext
* feat(kernel): `network` - interceptor - `proxy`
* feat(kernel): `network` - interceptor - decoding
* feat(kernel): `network` - interceptor - Kernel Err
* feat(kernel): `network` - flow transformation
* feat(kernel): `network` - request status
* fix(desktop): repositioning traffic lights on fullscreen exit
* feat(kernel): `network` - interceptor - `agent`
* feat(kernel): `store` - track updates
* feat(kernel): `network` - interceptor - extension
* feat(kernel): `network` - updates as overrides
* feat(interceptor): pre-process request encoding
* fix(ui): mismatched extension button size/position
* feat(kernel): `network` - interceptor - `browser`
* feat(native): common certs componsable
* fix(kernel): interceptor selection store and json parse
* feat(kernel): `network` - consistent multipart encoding
* feat(kernel): `network` - interceptor - `OAuth2.0`
* feat(kernel): `network` - interceptor - cookie support
* feat(agent): registration list, log-sink, relay
* feat(kernel): `network` - interceptor subtitles
* feat(kernel): `store` - persist network settings
* fix(agent): encrypted ser/de certificate requests
* feat(kernel): `kernelInterceptor` spotlight service
* fix(kernel): gql introspection edge-case schema
* ref: conditionals for migrated components
* feat(kernel): `localaccess` capability via relay
* feat(kernel): `network` - explicit types and lint
* feat(kernel): `store` - isolate host and platform
* feat(kernel): `store` - persistence service
* fix(infra): whitelisted origins, non-std engines
* feat(desktop): impl deep-link callbacks
* feat(kernel): `auth`
* feat(kernel): `io` - event listeners
* feat(kernel): platform migration
* fix: dep `vue` import on Win 11
Fixes `error TS2305: Module '"vue"' has no exported member
'VueConstructor'.` arising from `splitpane` dependency.
* fix(webapp-server): platform independent res paths
* feat(desktop): auth and emit via embedded server
* feat(platform): host, csp and bundle compatibility
- Bundle name format for using as host
- Windows UI handler HWND casting and version detection
- CSP headers type handling in URI protocol
- Protocol whitelist in env config
* feat(desktop|wip): login flow with `auth-tokens`
feat(desktop|wip): typesafe auth
* feat(backend): `auth` token flow, gql/websocket
feat(desktop): working auth for gql
feat: gql client with refresh token
* feat(backend): `auth` token flow, authorization bearer
* fix(gen): qualifier clash when invalidating cache
* feat(common): coordinated initialization service
* fix(desktop): appload persistence in data json
* feat(desktop|wip): desktop icons and updater
* fix: typos in readme docs
* fix: docker ignore copying on windows
* fix: update `.lock` file after rebase
* fix: `persistenceService` setup in tests
* fix: remove old console logs
* fix: console error on invalid schema
Show console error if default value is used when loading invalid data from
local storage
* fix(test): `PersistenceService` methods
* fix(test): `PersistenceService` rest tab state
* fix(test): `PersistenceService` gql tab state
* fix(test): `PersistenceService` global env
* fix(test): `PersistenceService` mqtt request
* fix(test): `PersistenceService` sse request
* fix(test): `PersistenceService` socketio request
* fix(test): `PersistenceService` websocket request
* fix(test): `PersistenceService` secret environment
* fix(test): `PersistenceService` selected env
* fix(test): `PersistenceService` collections
* fix(test): `PersistenceService` environments
* fix(test): `PersistenceService` history
* fix(test): `PersistenceService` settings
* fix(test): `PersistenceService` migrations
* fix(test): `InspectionService` request inspector
* feat(desktop): button to clear bundle/key cache
This is useful when there are partial updates to the web app or bundle gen server
which haven't been correctly propagated when the app bundle was downloaded.
If the user were to change the self host instance without updating the
desktop app; which is possible albeit rarely under very certain circumstances,
desktop app will refuse to load the bundle, this is because the desktop app
cannot differentiate between partial updates vs incorrect bundle being hosted
since both will fail verification.
The button lets the user decide what should be the appropriate action,
clear the bundle and trust the hosted app
or make sure the app is built and hosted correctly.
* fix(desktop): enforce one version per instance
This was part of a leftover scaffolding from development.
* fix(desktop): bundle url not stored after download
* fix(desktop): stalling progress on updates
* fix(backend): helper to parse cookie into kv-pairs
* feat(desktop): launch session on working endpoints
* fix(common): preserve `auth` structure and default
* fix: loading native networking with kernel mode
* fix: fallback for unhandled response error
* fix: `urlencoded` content request processing
* feat: `interceptor` - error mapping for `browser`
* fix: backwards compatibility for `digest` auth
* fix: platform check for `initializationService`
* fix: `interceptor` - analytics `strategy` resolution
* fix: `interceptor` - check for `cookies` component
* fix: enable digest auth support for `native`
* test: `interceptor` - kernel interceptor
* fix(relay): `grantType` casing for OAuth2.0
* test(wip): kernel transformers
* fix(relay): auth headers discarding others
* fix(desktop): http version deserialization
* fix(common): `grantType` extractor, auth processor
* fix: `PersistenceService` - parsing edge cases
* fix(infra): post rebase fixup
* fix(web): component structure and lint
* fix(desktop): cohesive splash opener, scroll url section
* fix: explicit auto auth and docs on url auth
* fix(relay): special chars failing proxy auth
* fix: finer cert control setting option
* fix: post-rebase fixup
* feat(appload): ability to vendor pre-built bytes
* fix: avoid copying over `target` dir in containers
* fix: auth key missing in capability set
* fix(desktop): relax `refresh_token` requirement
This is to support Firebase token
* fix(desktop): normalization for Windows WebView
* feat(desktop): instance switcher and vendored app
* fix(desktop): merge artifacts and conflicts
* feat(desktop): instance switcher improvements
* fix: derive instance name from normalized name
* fix: pkg links, lints and UI edge cases
* feat(desktop): restore window state after relaunch
* fix(desktop): distinguish header for cloud/default
* fix: instance switcher in web mode
* fix: close dropdown on new instance modal
* fix: whitelist vendored app origin
* feat(desktop): platform parity - `collections`
* fix: history entries population desync
* fix(desktop): check for history storage status
* fix(desktop): safe parse `globalEnv`
* feat(desktop): platform parity - `environment`
* fix: use settings store for proxy url
* fix: lint, unused imports
* fix: proxy input enabled for other interceptors
* feat: reverse proxy for desktop app server
* fix: duplicate entries after connecting to sh
* fix: specify instance org qualified
* fix: remove debugging logs
* feat(desktop): enable `devtools` in release builds
* fix(desktop): prepend protocol validation edgecase
* feat(desktop): clear cache on removing instance
* fix: better response toast message
* fix: avoid reverse proxy for webapp server
* fix(desktop): ignore subpath in instance name
* feat: switcher ui/ux improvements
* feat: more switcher ui/ux improvements
* feat(server): specify bundle version at build time
* fix(desktop): missing migration as rebase artifact
* fix: minor switcher ui/ux improvement
* fix: rebase artifacts
* fix: consolidated toast on success
* fix: missing i18n strings
* fix(desktop): handle drag and drop fe side
* feat: confirmation modal on instance removal
* chore: minor UI update
* chore: minor UI changes
* fix: gql connection partial refactor
* fix: resolve merge artifacts
* chore: prod lint
* feat(desktop): better desktop app update ux
* fix: broken gql connection.ts
---------
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: Andrew Bastin <andrewbastin.k@gmail.com>
2025-02-28 00:01:25 +05:30
Andrew Bastin
77509112b7
chore: move back to latest pnpm v10
2025-02-07 14:46:13 +05:30
Andrew Bastin
9c5ade8cc5
chore: pin pnpm v9 as the package manager ( #4728 )
2025-02-06 13:06:08 +05:30
Andrew Bastin
8758cba109
chore: security patches for dependency chain ( #4708 )
2025-01-29 23:01:46 +05:30
Mir Arif Hasan
f29504b2f5
chore: resolve Docker image vulnerabilities associated with cross-spawn ( #4634 )
...
Co-authored-by: jamesgeorge007 <25279263+jamesgeorge007@users.noreply.github.com>
2024-12-20 12:14:46 +05:30
Andrew Bastin
c1bc74635f
feat: ability for aio in sub-path access configurations to specify alternate ports ( #4480 )
2024-10-29 00:05:52 +05:30
Jean-Paul van Ravensberg
55c1c31b73
feat: oci labels on sh containers ( #4269 )
2024-08-29 14:04:00 +05:30
Patrick Thoelken
1105fb8274
fix: broken healthchecks on sh containers ( #4300 )
2024-08-29 13:53:59 +05:30
Andrew Bastin
e8319a08df
fix: issues with port binding in different container runtimes ( #4279 )
2024-08-21 19:07:53 +05:30
Andrew Bastin
afea75694f
refactor: slim down the backend containers ( #4233 )
...
* refactor: slim down the backend containers
* refactor: make containers run as non-root user in container
* chore: correct casing for the build stage definitions
* chore: remove docker compose version field as its obsolete
* chore: optimise chown and chmod into the COPY command itself
* chore: add package overrides for packages with reported vulns
* chore: add pnpm to containers + set workdir dir to the backend project
* fix: permission issues with the fe containers
* chore: define env variables on AIO
2024-08-08 11:31:13 +05:30
Balu Babu
96e2d87b57
feat: update node version to node20-apline3.19 ( #4040 )
2024-05-10 14:24:34 +05:30
Andrew Bastin
18652ce400
fix: update prod.Dockerfile to add additional required deps during base build
2024-04-20 01:54:34 +05:30
Jordi Been
59fef248c0
build: update node alpine version ( #3660 )
2024-01-03 16:49:51 +05:30
James George
1829c088cc
feat: support for subpath based access in SH apps ( #3449 )
...
Co-authored-by: Balu Babu <balub997@gmail.com>
2023-11-22 19:35:35 +05:30
Andrew Bastin
dfb281bcf7
chore: update prod.Dockerfile to add step for the backend container to not copy .env in
2023-08-25 21:03:00 +05:30
Andrew Bastin
efa40cf6ea
feat: container registry friendly docker images and all-in-one container ( #3193 )
...
Co-authored-by: Balu Babu <balub997@gmail.com>
2023-08-24 00:01:28 +05:30
