Skip to content

Weekly: Promote nightly to main (2026-02-23)#743

Merged
Wikid82 merged 55 commits intomainfrom
nightly
Feb 23, 2026
Merged

Weekly: Promote nightly to main (2026-02-23)#743
Wikid82 merged 55 commits intomainfrom
nightly

Conversation

@github-actions
Copy link
Contributor

🚀 Weekly Nightly to Main Promotion

Date: 2026-02-23
Trigger: Scheduled weekly promotion
Commits: 55 commits to promote
Changes: 554 files changed, 22800 insertions(+), 5707 deletions(-)


Commits Being Promoted

Showing first 50 of 55 commits:

2486dc24 Merge pull request #739 from Wikid82/main
cdcd1b66 Merge pull request #729 from Wikid82/feature/beta-release
9634eb65 chore: Add tests for enhanced security notification service and proxy host validation
a52ba29f chore: Update malformed URL test expectations in ProxyHostService validation
f5db7ad0 chore: Enhance backend test coverage and add new functional tests for Security page
7497cbec chore: Implement manual test plan for SMTP mock server flakiness fix
b14f6f04 chore: Add tests for feature flags and notification providers
89a17684 chore: add npm update script for managing project dependencies
57e7aa3e chore(deps): update @csstools/color-helpers, @csstools/css-color-parser, and oxc-resolver to latest versions
ff88ae9f Merge pull request #736 from Wikid82/renovate/feature/beta-release-goreleaser-goreleaser-action-7.x
cddec198 chore(deps): update goreleaser/goreleaser-action action to v7
1bbd71ca Merge pull request #735 from Wikid82/renovate/feature/beta-release-non-major-updates
a21351cd chore: add CHARON_ENCRYPTION_KEY management for backend tests
783956cb fix(deps): update non-major-updates
9094d3b9 choret: enforce discord-only provider type across notifications API and UI
71835831 chore: Update notification provider to support Discord only
f11cd689 fix: remove legacy security notification settings and related UI components
3a3c06a5 Merge pull request #734 from Wikid82/renovate/feature/beta-release-non-major-updates
c48ced8c fix(deps): update non-major-updates
4ea22c11 fix: package version missmatch
a558c368 fix: Remove redundant entries from tools list in agent markdown files
1e14dcd5 fix: Prevent exposure of GotifyToken in JSON response for enhanced security
1d909afe fix: Update GotifyToken field to prevent exposure in JSON response
0d9ca68a chore: Update eslint and rollup dependencies to latest versions
105338ef fix: Sanitize event type logging in EnhancedSecurityNotificationService
8e88d9fe chore: Update CodeQL scan scripts and documentation for CI alignment and deprecate old suites
13091895 feat: Enhance security notifications with new event types and provider integration
a278ae12 chore: Enhance governance and security guidelines in documentation for GORM and token protection
12dd09b3 choret: Add governance guidelines for agent files and conditional GORM security scanning
0dfbb74c feat: Update security notification settings and enhance compatibility for legacy configurations
5429d85e feat: Implement enhanced security notification service with compatibility layer
82c1737d fix: run container as non-root user for improved security
1a477f90 chore: enhance Trivy scan script with Docker image pull and cleanup options
efbbf46a chore: update tools list in agent configurations for consistency and clarity
6b03ffc4 fix: update AI model to GPT-5.3-Codex across multiple agent configurations
7f53c273 chore: update .gitignore to reflect new report path and remove obsolete codecove_patch_report.md
127a81a7 chore: add unit test for DeprecatedUpdateSettings to verify JSON response fields
8f429895 docs: update README with to make it cleaner and easier to read
c68804d3 feat: migrate from shoutrr to notfy
1189fa59 docs: update tools list and model versions in agent configurations
7070ea6f docs: update AI model references in agent configurations to Claude Sonnet 4.5 and 4.6
a3cdc704 docs: update QA/Security Validation Report for PR1 remediation branch
3e2df57f docs: add mandatory documentation requirements for identifying security vulnerabilities
2944cd6b docs(security): add remediation options for GHSA-69x3-g4r3-p962 vulnerability
72c4dee1 docs(security): archive documentation for outdated supply chain vulnerability remediation strategies
2e85325d chore: update version to v0.19.0
e2e3cc3d fix: update tools list and enhance context for code review lead agent
5ee3ce8b chore: remove legacy E2E tests for security dashboard and login
f4ef79de chore: repo cleanup by archiving plans / reports
745d3afa Merge pull request #731 from Wikid82/renovate/feature/beta-release-non-major-updates

...and 5 more commits


Pre-Merge Checklist

  • All status checks pass
  • No critical security issues identified
  • Changelog is up-to-date (auto-generated via workflow)
  • Version bump is appropriate (if applicable)

Merge Instructions

This PR promotes changes from nightly to main. Once all checks pass:

  1. Review the commit summary above
  2. Approve if changes look correct
  3. Merge using "Merge commit" to preserve history

This PR was automatically created by the Weekly Nightly Promotion workflow.

renovate bot and others added 30 commits February 19, 2026 01:25
…ekly-non-major-updates

fix(deps): update weekly-non-major-updates (feature/beta-release)
Propagate changes from main into development
Propagate changes from development into feature/beta-release
…n-major-updates

fix(deps): update dependency lucide-react to ^0.575.0 (feature/beta-release)
…lity layer

- Introduced EnhancedSecurityNotificationService for provider-based notifications.
- Added migration logic from legacy notification configuration to managed providers.
- Updated NotificationConfig model to reflect API surface changes and maintain legacy fields.
- Enhanced Cerberus middleware to dispatch security events based on feature flags.
- Updated routes to utilize the new enhanced service and handle migration at startup.
- Added feature flag for security provider events to control behavior in production.
- Updated tests to cover new functionality and ensure compatibility with existing behavior.
actions-user and others added 25 commits February 20, 2026 13:56
…n-major-updates

fix(deps): update non-major-updates (feature/beta-release)
- Refactored notification provider tests to use Discord webhook URLs.
- Updated frontend forms and API interactions to restrict provider type to Discord.
- Modified translations to reflect the change in supported provider types.
- Enhanced UI to indicate deprecated status for non-Discord providers.
- Adjusted documentation to align with the new provider structure.
…nd UI

- Added validation to reject non-discord provider types in create, update, test, and preview operations.
- Updated the notifications form to automatically normalize non-discord types to discord.
- Modified UI to display explicit messaging for deprecated and non-dispatch statuses for non-discord providers.
- Enhanced tests to cover new validation logic and UI changes for provider types.
…n-major-updates

fix(deps): update non-major-updates (feature/beta-release)
…releaser-goreleaser-action-7.x

chore(deps): update goreleaser/goreleaser-action action to v7 (feature/beta-release)
- Implement tests for feature flags coverage in `feature_flags_coverage_v2_test.go` to validate behavior with invalid persisted and environment values, as well as default settings.
- Create tests in `notification_provider_patch_coverage_test.go` to ensure correct handling of notification provider updates, including blocking type mutations for non-Discord providers.
- Add tests in `security_notifications_patch_coverage_test.go` to verify deprecated headers, handle invalid CIDR warnings, and ensure correct severity handling for security events.
- Introduce migration error handling tests in `routes_coverage_test.go` to ensure graceful handling of migration errors during registration.
- Enhance `cerberus_blockers_test.go` with tests for disabled security event notifications and error handling for dispatch failures.
- Update `router_test.go` to validate notify routing based on feature flags.
- Refactor `mail_service.go` to normalize base URLs for invites, ensuring proper handling of trailing slashes.
- Modify `notification_service_json_test.go` and `notification_service_test.go` to mock Discord validation and improve webhook testing.
- Update `proxyhost_service.go` to enhance hostname validation by parsing URLs.
- Refine `uptime_service.go` to extract ports correctly from URLs, including handling edge cases.
- Enhance frontend tests in `notifications.test.ts` and `Notifications.test.tsx` to ensure correct behavior for Discord notification providers and enforce type constraints.
- Added a new documentation file outlining the manual test plan to validate the SMTP mock server flakiness fix, ensuring improved mail test reliability without affecting production behavior.
- Updated the current specification document to reflect the focus on stabilizing flaky SMTP STARTTLS+AUTH unit tests, including detailed research findings and requirements for the implementation.
- Created a QA/Security validation report for the SMTP flaky test fix, confirming that changes are test-only, stable under repeated runs, and do not introduce new security risks.
… Security page

- Added tests to `proxyhost_service_validation_test.go` to validate fallback parsing and handle invalid hostname characters.
- Introduced new tests for DNS challenge validation in `proxyhost_service_validation_test.go`.
- Updated `current_spec.md` to reflect changes in testing strategy and coverage goals for PR #729.
- Enhanced `Security.functional.test.tsx` to include navigation test for Notifications button.
- Mocked `useNavigate` from `react-router-dom` to verify navigation behavior in Security page tests.
Migration from Shoutrrr to Notify - Foundation
Propagate changes from main into development
@github-actions github-actions bot added automated Automatically generated by CI/CD weekly-promotion Weekly promotion from nightly to main labels Feb 23, 2026
@Wikid82 Wikid82 merged commit 4004c6b into main Feb 23, 2026
68 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automatically generated by CI/CD weekly-promotion Weekly promotion from nightly to main

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants