2026-04-24 21:30:48 -05:00
|
|
|
{
|
2026-04-27 11:47:26 -05:00
|
|
|
"name": "openconcho",
|
|
|
|
|
"private": true,
|
chore(release): 0.15.0 [skip ci]
# [0.15.0](https://github.com/offendingcommit/openconcho/compare/v0.14.0...v0.15.0) (2026-06-03)
### Bug Fixes
* **helm:** guard tmpfs blocks when empty, cap volume names at 63 chars ([d5a65d7](https://github.com/offendingcommit/openconcho/commit/d5a65d73b59378f5ce39bf76e0572da478cecbda))
* **helm:** pdb mutual exclusion, ingress null rules guard, hpa nil utilization guard ([b4939bd](https://github.com/offendingcommit/openconcho/commit/b4939bd57f2dba5ebca9efcd42901457512e70e4))
* **helm:** pin busybox:1.36, add -T 10 timeout, use --spider, add activeDeadlineSeconds ([8fac5d0](https://github.com/offendingcommit/openconcho/commit/8fac5d060f45b68141917efad4afe499ca2fda56))
* **helm:** use http://json-schema.org/draft-07/schema# for Helm compatibility ([8d41455](https://github.com/offendingcommit/openconcho/commit/8d41455e39db51617d7476e5cc48577eb7fff158))
### Features
* **helm:** add _helpers.tpl with name, label, and imageTag partials ([0268275](https://github.com/offendingcommit/openconcho/commit/02682750ab766851570eae58eb0b92761b98724f))
* **helm:** add Deployment template with read-only FS, tmpfs, probes ([514e1d4](https://github.com/offendingcommit/openconcho/commit/514e1d46c0248bfae5da1f2ceb12ca8799a81468))
* **helm:** add NOTES.txt with access instructions and NetworkPolicy/Ingress warning ([ce211df](https://github.com/offendingcommit/openconcho/commit/ce211df48cc59dfe933eb7a1b1415591b0e9f7fa))
* **helm:** add optional HPA, PDB, and NetworkPolicy templates ([b0b648b](https://github.com/offendingcommit/openconcho/commit/b0b648bdcf64732c0a713bd8e45077c5f1b39ba6))
* **helm:** add optional Ingress template ([9aa106c](https://github.com/offendingcommit/openconcho/commit/9aa106cede7d5719ee2cbc48c1c677491deea568))
* **helm:** add Service and ServiceAccount templates ([ee916ea](https://github.com/offendingcommit/openconcho/commit/ee916eabc485f37cdc56ffbdd8d9004f33f3a7b7))
* **helm:** add test-healthz and test-spa-root helm test jobs ([ee4630e](https://github.com/offendingcommit/openconcho/commit/ee4630e79ca588ee0f9cb167ac0f58ae4b8223cc))
* **helm:** chart scaffold — Chart.yaml, values, schema ([4112270](https://github.com/offendingcommit/openconcho/commit/411227046a3dee125a555a0d1a426afed0e74ec3))
2026-06-03 21:37:08 +00:00
|
|
|
"version": "0.15.0",
|
2026-04-27 11:47:26 -05:00
|
|
|
"packageManager": "pnpm@10.33.2",
|
2026-05-03 17:18:09 -05:00
|
|
|
"engines": {
|
|
|
|
|
"node": ">=22",
|
|
|
|
|
"pnpm": ">=10"
|
|
|
|
|
},
|
2026-04-27 11:47:26 -05:00
|
|
|
"scripts": {
|
2026-05-03 17:18:09 -05:00
|
|
|
"bootstrap": "pnpm install && pnpm exec playwright install --with-deps chromium",
|
2026-04-27 11:47:26 -05:00
|
|
|
"dev": "pnpm --filter @openconcho/desktop dev",
|
2026-05-03 17:18:09 -05:00
|
|
|
"dev:web": "pnpm --filter @openconcho/web dev",
|
|
|
|
|
"dev:desktop": "pnpm --filter @openconcho/desktop dev",
|
2026-04-27 11:47:26 -05:00
|
|
|
"build": "turbo run build",
|
|
|
|
|
"lint": "turbo run lint",
|
2026-05-03 17:18:09 -05:00
|
|
|
"lint:fix": "biome check --write .",
|
|
|
|
|
"format": "biome format --write .",
|
2026-04-27 11:47:26 -05:00
|
|
|
"test": "turbo run test",
|
2026-05-03 17:03:55 -05:00
|
|
|
"test:e2e": "turbo run test:e2e",
|
2026-04-27 11:47:26 -05:00
|
|
|
"typecheck": "turbo run typecheck",
|
2026-05-03 17:18:09 -05:00
|
|
|
"check": "turbo run lint typecheck test",
|
|
|
|
|
"ci:web": "turbo run lint typecheck test build --filter=@openconcho/web",
|
|
|
|
|
"ci:desktop": "turbo run cargo-check --filter=@openconcho/desktop",
|
chore(hooks): pre-push gate, secret scan, pr:evidence drafter
Phase A of the quality-gate rollout — local + pre-push gates that stop
slop before it leaves the laptop. Preventative controls, per the
architect playbook.
- .husky/pre-commit — adds scripts/secret-scan.sh as the first check
before the existing Biome format/lint. Blocks the commit when a
likely secret is found in staged additions. Existing Biome behaviour
is preserved.
- .husky/pre-push (new) — runs `pnpm check` (lint + typecheck + test)
before the branch leaves the laptop. Mirrors the `check` job in
.github/workflows/ci.yml so PR-blocking issues surface locally first.
Bypassable for genuine emergencies with `git push --no-verify`.
- scripts/secret-scan.sh (new) — regex scan over staged additions for
the common accidents: AWS keys, Anthropic/OpenAI/GitHub/Slack/Google/
Stripe tokens, JWTs, PEM private key blocks, hardcoded password
literals. Validated against synthetic leaks of each type. No external
tool dependency — pure bash + grep, runs in <100ms typical.
- scripts/pr-evidence.sh (new) — drafts a PR_BODY.md from the diff vs
origin/main: file lists (added/modified/deleted), commit summaries,
and the QA checklist. Flags screenshots as REQUIRED when the diff
touches packages/web/src/{components,routes} or packages/desktop.
Wired as `pnpm pr:evidence` so it runs from anywhere in the
workspace.
- .gitignore — adds PR_BODY.md so drafts don't get committed by
accident.
Pre-commit stays fast (<2s typical). Heavy checks (typecheck, full
test run) live in pre-push.
2026-05-24 18:29:13 +01:00
|
|
|
"pr:evidence": "./scripts/pr-evidence.sh",
|
2026-04-27 11:47:26 -05:00
|
|
|
"prepare": "husky"
|
|
|
|
|
},
|
|
|
|
|
"devDependencies": {
|
|
|
|
|
"@biomejs/biome": "catalog:",
|
chore(deps): consolidate dependency bumps (supersedes #34-53)
npm (lockfile + catalog): tanstack, @tauri-apps/*, turbo 2.9.x, biome, vite,
@vitejs/plugin-react, vitest+coverage-v8 4.1.8 (lockstep), @playwright/test,
and jsdom 26->29 (major). cargo: tauri 2.11.2, tauri-plugin-http 2.5.9,
tauri-build 2.6.2, serde_json. github-actions: docker setup-qemu v4,
setup-buildx v4, build-push v7. Validated: make ci-web, cargo-check, actionlint.
2026-06-02 15:36:16 -05:00
|
|
|
"@commitlint/cli": "~20.5.3",
|
|
|
|
|
"@commitlint/config-conventional": "~20.5.3",
|
|
|
|
|
"@semantic-release/changelog": "^6.0.3",
|
|
|
|
|
"@semantic-release/commit-analyzer": "^13.0.1",
|
2026-04-27 11:47:26 -05:00
|
|
|
"@semantic-release/exec": "^7.1.0",
|
chore(deps): consolidate dependency bumps (supersedes #34-53)
npm (lockfile + catalog): tanstack, @tauri-apps/*, turbo 2.9.x, biome, vite,
@vitejs/plugin-react, vitest+coverage-v8 4.1.8 (lockstep), @playwright/test,
and jsdom 26->29 (major). cargo: tauri 2.11.2, tauri-plugin-http 2.5.9,
tauri-build 2.6.2, serde_json. github-actions: docker setup-qemu v4,
setup-buildx v4, build-push v7. Validated: make ci-web, cargo-check, actionlint.
2026-06-02 15:36:16 -05:00
|
|
|
"@semantic-release/git": "^10.0.1",
|
|
|
|
|
"@semantic-release/github": "^10.3.5",
|
2026-04-27 14:36:47 -05:00
|
|
|
"@semantic-release/npm": "^13.1.5",
|
chore(deps): consolidate dependency bumps (supersedes #34-53)
npm (lockfile + catalog): tanstack, @tauri-apps/*, turbo 2.9.x, biome, vite,
@vitejs/plugin-react, vitest+coverage-v8 4.1.8 (lockstep), @playwright/test,
and jsdom 26->29 (major). cargo: tauri 2.11.2, tauri-plugin-http 2.5.9,
tauri-build 2.6.2, serde_json. github-actions: docker setup-qemu v4,
setup-buildx v4, build-push v7. Validated: make ci-web, cargo-check, actionlint.
2026-06-02 15:36:16 -05:00
|
|
|
"@semantic-release/release-notes-generator": "^14.1.1",
|
2026-04-27 11:47:26 -05:00
|
|
|
"husky": "~9.1.7",
|
|
|
|
|
"semantic-release": "catalog:",
|
chore(deps): consolidate dependency bumps (supersedes #34-53)
npm (lockfile + catalog): tanstack, @tauri-apps/*, turbo 2.9.x, biome, vite,
@vitejs/plugin-react, vitest+coverage-v8 4.1.8 (lockstep), @playwright/test,
and jsdom 26->29 (major). cargo: tauri 2.11.2, tauri-plugin-http 2.5.9,
tauri-build 2.6.2, serde_json. github-actions: docker setup-qemu v4,
setup-buildx v4, build-push v7. Validated: make ci-web, cargo-check, actionlint.
2026-06-02 15:36:16 -05:00
|
|
|
"turbo": "^2.9.16"
|
2026-04-27 11:47:26 -05:00
|
|
|
}
|
2026-04-24 21:30:48 -05:00
|
|
|
}
|