dependabot[bot] and GitHub
e424162227
chore(deps): bump the npm-minor-and-patch group across 1 directory with 12 updates
...
Bumps the npm-minor-and-patch group with 12 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ) | `5.101.2` | `5.101.4` |
| [@zip.js/zip.js](https://github.com/gildas-lormeau/zip.js ) | `2.8.26` | `2.8.33` |
| [lucide-preact](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-preact ) | `1.22.0` | `1.25.0` |
| [preact](https://github.com/preactjs/preact ) | `10.29.3` | `10.29.7` |
| [@preact/preset-vite](https://github.com/preactjs/preset-vite ) | `2.10.5` | `2.10.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) | `26.0.1` | `26.1.1` |
| [autoprefixer](https://github.com/postcss/autoprefixer ) | `10.5.2` | `10.5.4` |
| [opencc-js](https://github.com/nk2028/opencc-js ) | `1.3.2` | `1.4.1` |
| [postcss](https://github.com/postcss/postcss ) | `8.5.16` | `8.5.22` |
| [tsx](https://github.com/privatenumber/tsx ) | `4.22.4` | `4.23.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) | `8.1.3` | `8.1.5` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler ) | `4.105.0` | `4.113.0` |
Updates `@tanstack/react-query` from 5.101.2 to 5.101.4
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query )
Updates `@zip.js/zip.js` from 2.8.26 to 2.8.33
- [Release notes](https://github.com/gildas-lormeau/zip.js/releases )
- [Commits](https://github.com/gildas-lormeau/zip.js/compare/v2.8.26...v2.8.33 )
Updates `lucide-preact` from 1.22.0 to 1.25.0
- [Release notes](https://github.com/lucide-icons/lucide/releases )
- [Commits](https://github.com/lucide-icons/lucide/commits/1.25.0/packages/lucide-preact )
Updates `preact` from 10.29.3 to 10.29.7
- [Release notes](https://github.com/preactjs/preact/releases )
- [Commits](https://github.com/preactjs/preact/compare/10.29.3...10.29.7 )
Updates `@preact/preset-vite` from 2.10.5 to 2.10.6
- [Release notes](https://github.com/preactjs/preset-vite/releases )
- [Changelog](https://github.com/preactjs/preset-vite/blob/main/CHANGELOG.md )
- [Commits](https://github.com/preactjs/preset-vite/commits )
Updates `@types/node` from 26.0.1 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `autoprefixer` from 10.5.2 to 10.5.4
- [Release notes](https://github.com/postcss/autoprefixer/releases )
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/autoprefixer/compare/10.5.2...10.5.4 )
Updates `opencc-js` from 1.3.2 to 1.4.1
- [Release notes](https://github.com/nk2028/opencc-js/releases )
- [Changelog](https://github.com/nk2028/opencc-js/blob/main/CHANGELOG.md )
- [Commits](https://github.com/nk2028/opencc-js/compare/v1.3.2...v1.4.1 )
Updates `postcss` from 8.5.16 to 8.5.22
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.16...8.5.22 )
Updates `tsx` from 4.22.4 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases )
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs )
- [Commits](https://github.com/privatenumber/tsx/compare/v4.22.4...v4.23.1 )
Updates `vite` from 8.1.3 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite )
Updates `wrangler` from 4.105.0 to 4.113.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases )
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.113.0/packages/wrangler )
---
updated-dependencies:
- dependency-name: "@preact/preset-vite"
dependency-version: 2.10.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-minor-and-patch
- dependency-name: "@tanstack/react-query"
dependency-version: 5.101.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-minor-and-patch
- dependency-name: "@types/node"
dependency-version: 26.1.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-minor-and-patch
- dependency-name: "@zip.js/zip.js"
dependency-version: 2.8.33
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-minor-and-patch
- dependency-name: autoprefixer
dependency-version: 10.5.4
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-minor-and-patch
- dependency-name: lucide-preact
dependency-version: 1.25.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-minor-and-patch
- dependency-name: opencc-js
dependency-version: 1.4.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-minor-and-patch
- dependency-name: postcss
dependency-version: 8.5.22
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-minor-and-patch
- dependency-name: preact
dependency-version: 10.29.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-minor-and-patch
- dependency-name: tsx
dependency-version: 4.23.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-minor-and-patch
- dependency-name: vite
dependency-version: 8.1.5
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-minor-and-patch
- dependency-name: wrangler
dependency-version: 4.113.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-22 16:59:55 +00:00
shuaiplus
82d9f61163
fix: handle unavailable browser cryptography
...
Detect insecure or unsupported browser contexts before account registration and show localized HTTPS guidance instead of leaking a SubtleCrypto runtime error.
Fixes #320
2026-07-23 00:54:52 +08:00
zu1k and shuaiplus
f761fffd58
fix: align WebAuthn connectors with Bitwarden clients
...
Add official-compatible mobile and desktop connector flows, preserve exact .html asset paths, and cover the protocol and framing behavior with regression tests.
Fixes #326
2026-07-23 00:39:34 +08:00
shuaiplus
39c076b2e1
chore: release v1.8.0
v1.8.0
2026-07-17 11:38:42 +08:00
shuaiplus
a50a503788
Merge branch 'main' of https://github.com/shuaiplus/nodewarden
2026-07-17 11:33:41 +08:00
shuaiplus
6cbc06f833
feat: add Web Vault visibility switch
2026-07-17 11:32:43 +08:00
ph4nt0mer and GitHub
72d8ec9cba
fix: auto-refresh remote backup directory when cache is stale ( #312 )
...
When entering the cloud backup page, the remote backup directory list only showed cached data and required a manual click of the refresh button to see new backup files. This change adds a TTL-based auto-refresh that fetches fresh data when the cache is older than 5 minutes.
Changes:
- Added refreshedAt tracking per cache key in persisted state
- Added REMOTE_BROWSER_REFRESH_TTL_MS (5 min) constant
- Added useEffect that triggers auto-refresh when destination is selected and cached data is stale
- Stamped refresh timestamps after successful API responses
- Cleaned up timestamps on destination delete and settings save
2026-07-16 12:30:00 +08:00
shuaiplus
299eda597f
fix(auth): align API keys and exclude device trust backups
2026-07-13 17:41:00 +08:00
shuaiplus
19de8d6e57
fix(auth): require complete password change key data
2026-07-13 17:02:59 +08:00
shuaiplus
63b642b251
fix(storage): safely batch folder deletion binds
2026-07-13 13:30:52 +08:00
shuaiplus
e943357067
fix(web): preserve cipher types 6-8 during import
2026-07-13 13:13:42 +08:00
shuaiplus
573451c52f
feat(yubico): refactor Yubico credential management and enhance settings UI
2026-07-13 13:05:04 +08:00
shuaiplus
b731a014f1
fix(auth): prevent unexpected session logout
2026-07-13 02:11:12 +08:00
shuaiplus
e25ec159bb
feat: enhance navigation layout and improve mobile settings UI
2026-07-12 23:16:01 +08:00
shuaiplus
b093c01fd7
chore: update version to 1.7.4 in package.json, package-lock.json, and app-version.ts
v1.7.4
2026-07-12 22:13:33 +08:00
shuaiplus
fa611dc843
fix: require master password for admin and wipe-device actions
...
Gate invite management, user ban/delete, and delete-all-devices behind
masterPasswordHash verification, matching backup step-up auth. The web UI
prompts for the master password in the shared confirm dialog.
2026-07-12 20:43:27 +08:00
shuaiplus
3c581d1fb1
fix: block IPv6 loopback in backup destination URL checks
...
Expand compressed IPv6 hostnames before the private-address allowlist so
forms like ::1 cannot bypass SSRF protection for WebDAV/S3 backup endpoints.
Also reject IPv4-mapped addresses written as ::ffff:hex:hex.
2026-07-12 20:21:45 +08:00
shuaiplus
fb376797d2
feat: update PasswordGeneratorPage styles and improve layout responsiveness
2026-07-12 01:59:15 +08:00
shuaiplus
99b50275a6
feat: add Password Security feature with scanning and reporting capabilities
2026-07-12 01:50:21 +08:00
shuaiplus
dfc98008cb
Add password generator feature and update localization files
2026-07-11 18:49:26 +08:00
shuaiplus
b472121f43
feat: add contributors section and star history chart to README files
2026-07-11 17:25:53 +08:00
Domainmasteri and GitHub
9caa064488
Add German (de), French (fr), Italian (it), and Swedish (sv) initial translations ( #303 )
2026-07-11 17:06:41 +08:00
shuaiplus
aae614a079
feat: add offline mode notice and related styles to enhance user experience during offline access
2026-07-10 22:24:06 +08:00
shuaiplus
0e46cd371f
Merge branch 'main' of https://github.com/shuaiplus/nodewarden
2026-07-10 14:24:15 +08:00
shuaiplus
db31792cef
feat: add fill-assist, assetlinks check, and web-bootstrap to worker-handled paths
2026-07-10 14:23:45 +08:00
shuaiplus
8c65cb2e80
feat: update FIDO2 origins and enable direct unlock for account passkeys
2026-07-10 14:22:24 +08:00
shuaiplus
14dff8ee6a
feat: disable new-device verification and update related logic across services
2026-07-10 13:00:32 +08:00
dependabot[bot] and Shuai
8d399f431b
chore(deps-dev): bump vite from 7.3.5 to 8.1.3
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 7.3.5 to 8.1.3.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.1.3/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 8.1.3
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-09 23:53:06 +08:00
shuaiplus
bb3f866220
feat: add audit log demo data and passkey/API stub overrides
2026-07-09 20:51:12 +08:00
shuaiplus and Shuai
39d9df78ea
feat: add functionality to select unique items from duplicates in Vault components
2026-07-09 20:21:45 +08:00
rootphantomer and Shuai
a1b12fc447
feat: add duplicate detection demo data to dev:demo mode
2026-07-09 20:21:45 +08:00
rootphantomer and Shuai
099217062a
fix: group duplicates by color and sort A-Z within groups
2026-07-09 20:21:45 +08:00
Domainmasteri and GitHub
dd90d7b8b8
Add Finnish (fi) translation ( #299 )
...
* Add Finnish (fi) locale file for nodewarden web vault translation
2026-07-09 19:00:33 +08:00
rootphantomer and Shuai
525b773cf4
fix: preserve dialog title during closing animation to prevent flash
2026-07-09 18:53:01 +08:00
shuaiplus
04cb475935
feat: enhance date formatting in PublicSendPage and SendsPage components
2026-07-08 19:31:11 +08:00
Shuai and GitHub
e063f45cd9
Update FUNDING.yml
2026-07-08 11:59:17 +08:00
Shuai and GitHub
e10920d142
Create FUNDING.yml
2026-07-07 19:55:15 +08:00
shuaiplus
b07edb0850
fix: correct directory name in .gitignore and remove nodewarden-wiki subproject
2026-07-07 19:48:40 +08:00
shuaiplus
58a86ae8fd
docs: update feature comparison table for clarity and consistency
2026-07-07 18:36:35 +08:00
shuaiplus
b986af86dc
docs: add Fill-assist row to feature comparison table
...
Align English README with README_ZH for POST /fill-assist client support.
2026-07-07 14:18:19 +08:00
shuaiplus
8e33f92b33
docs: make English the default README, move Chinese to README_ZH
...
- README.md is now the English version (GitHub default)
- Add README_ZH.md for Chinese documentation
- Remove redundant README_EN.md
2026-07-07 13:53:11 +08:00
shuaiplus
a0f832e8a5
chore: release v1.7.3
v1.7.3
2026-07-07 01:43:14 +08:00
shuaiplus
8a5b210a1d
Improve Bitwarden-compatible TOTP handling
2026-07-07 01:27:55 +08:00
shuaiplus
ebc8e8e340
Replace remove button with trash icon positioned inside password field
2026-07-07 00:35:16 +08:00
shuaiplus
a870142b7b
Show password indicator and masked password field for encrypted sends
...
- Add password and authType fields to Send type
- Show lock icon in send list for password-protected sends
- Display masked dots in password field when editing a send that has a password set
- Add Remove button to clear existing password
2026-07-07 00:31:56 +08:00
shuaiplus
a366acbac0
Revert redirect guard in backup uploader
2026-07-06 23:54:17 +08:00
shuaiplus
57c5ef9da6
Remove WEBSITE_ICONS_ENABLED and always enable website icons
2026-07-06 22:56:36 +08:00
shuaiplus
f532d3ace3
Preserve WebAuthn credential purpose in backups
2026-07-06 22:25:02 +08:00
shuaiplus
cc4a830be8
Harden backup and download token flows
2026-07-06 19:06:24 +08:00
shuaiplus
c6438747e3
Harden 2FA disable and website icon privacy
2026-07-06 18:45:54 +08:00