mescon/Muximux v3.0.0-rc.2

on GitHub

Changed

• Upgraded Caddy to resolve govulncheck vulnerabilities (GO-2026-4458 ECDSA signature bypass, GO-2026-4394 PATH hijacking).
• Extracted forward auth presets into shared utility (forwardAuthPresets.ts), removing duplicated preset logic from SecurityTab and OnboardingWizard.
• Upgraded Svelte from 5.51.3 to 5.53.0.
• Upgraded devalue from 5.6.2 to 5.6.3.
• SonarCloud quality gate is now non-blocking in CI (reports status without failing the pipeline).

Fixed

• CI lint failures — resolved 7 golangci-lint issues (errcheck, gocritic, gofmt, staticcheck).
• TypeScript errors in test files (window.location mock, require() replaced with async import()).
• Release workflow — latest Docker tag now correctly applied to stable releases (was broken on tag pushes due to is_default_branch check).
• 42 SonarCloud code quality issues — duplicate string constants extracted, unnecessary variables inlined, window → globalThis for SSR safety, shell [ → [[, Dockerfile package sort, and redundant type alias removed.

Added

• Test coverage improvements — new tests for authStore logout redirect, SecurityTab component, forward auth presets utility, and Go auth/server logout_url code paths (387 → 408 frontend tests).
• API documentation — logout_url field now documented in auth status and auth method switch examples.