⚠️ Security notice ⚠️: Critical Next.js RSC vulnerability CVE-2025-66478 (CVSS 10.0, potential remote code execution). Release 1.4.0 ships the fix (Next.js 15.5.7). Update immediately!
What's Changed
Features
- cc78ec2 [Feature] Localize prerelease buttons in global and repo settings
- 53b3e5d [Feature] add configurable parallel repo fetch batches with settings controls
- dd31ad6 [Feature] Add runtime update checks, banner UI, manual trigger, and tests
Fixes
- f4cef0a Render release HTML with rehype sanitize and allow external images
- 0858559 [Fix] Robust stale server action handling with shared detection and log filtering
- cbda05b [Fix] Set mobile dropdown to non-modal to avoid Radix scroll lock’s blocking wheel listener
- d9f8e3b [Fix] Guard logout handler against expected NEXT_REDIRECT errors
- dd64cd4 [Fix] Add login form autocomplete and localized password placeholder
- 3830d3c [Fix] Reload stale server actions globally with logging
- a26d87c [Fix] Improve GitHub API JSON fetch error handling
- f912c33 [Fix] Harden GitHub fetches with retry/backoff, fix offline state hydration and fix settings locale fetch for zero address origins
- 9f3f1f4 [Fix] Update Playwright repo tests to stabilize flaky flows
- fc0bc40 [Fix] Update Playwright helpers and repo tests to stabilize flaky flows
- 676938a [Fix] Harden middleware locale fallback and add regression test
- f10d362 [Fix] Ensure offline banner tests clean up timers and roots
- 813047d [Fix] restore settings-driven locale handling and stabilize locale-related tests
- 73dd9a2 git commit m"[Fix] typecheck errors in i18n.ts, i18n-config.ts, test-page-client.tsx"
- d150525 [Dependance] upgrade date-fns to ^4.1.0 and [Fix] offline remove dialog
- fdda7cc Fix: wrap client-side server action calls in try/catch; offline UX & tests
- d8d88f9 [Fix] fix PayPal and add Buy Me a Coffee in FUNDING.yml
Refactors
- ccec30b [Refactor] Centralize GitHub fetch retry logic and add targeted tests
- d8b5257 [Refactor] Optimize settings with floating save badge and conditional API refresh
- 21d134f [Refactor] next-intl, middleware and next.config.mjs
Linting
- 6465b47 [Linter] Fix Biome React type imports and configure Vitest JSX transform
- 5233c54 [Linter] Resolve lint warnings and tighten error handling
- 85891a6 [WIP] [Linter] Replace ESLint with Biome and fix multiple linting issues
- d7a17a0 [Dependancy] Upgrade Biome to 2.3.1 and sync dependency bumps and add Tailwind CSS parser configuration
- a380b00 [CI] Rename lint job to reflect biome usage
Pipeline/CI
- 5daa9e4 [Pipeline] Add retry logic and step timeouts to docker workflow
- 9d26809 [Pipeline] Pin release image to runner stage
- a10a1d6 [Pipeline] Improve Dockerfiles and improve workflow
- 62aac16 [Test] Use project Playwright deps in Docker builds
Tests
- 3590056 [Test] Add RepoSettingsDialog autosave tests, add fs failure tests for system-status/settings-storage, import React in Skeleton.
- 59d51fc [Test] cover parallel fetch defaults and UI warnings
Dependencies
- 9ee2457 Update dependencies (Next.js security fix for CVE-2025-66478) and tweak release table rendering
- d954166 [Dependance] Update Next.js to 15.5.6 and other packages
- de984ee [Dependance] tailwindcss 3->4 and add @tailwindcss/postcss
- c8bc667 [Dependance] @types/node 20->24, lucide-react 0.475->0.545, jsdom 24->27 and tighten test teardowns
- 3b0e90e [Dependance] Update Next.js to 15.5.4 and other packages
- 7c2da94 Merge pull request #26 from iamspido/next-intl-4
- 3a42c9b [Dependance] upgrade next-intl to ^4.3.9 and migrate navigation to next-intl v4 (createNavigation)
- 9619bf3 [Dependance] upgrade react-markdown to ^10.1.0
- 4e5926f [Dependance] Readd devDependencies @types/nodemailer ^7.0.1
- e2f3b7a [Dependance] upgrade nodemailer to ^7.0.6 and other packages and remove @types/nodemailer (v7 includes types)
Full Changelog: v1.3.0...v1.4.0