deps: bump electron from 43.2.0 to 43.4.0 in the electron-runtime group across 1 directory - #2
Closed
dependabot[bot] wants to merge 70 commits into
Closed
Conversation
# Conflicts: # README.md
All build/icons/*.png sizes (16-1024px) and build/icon.png replaced with the Aux Command app icon design.
Replaced 'Auxillo infrastructure tools' text on welcome screen with the Auxillo gradient logo image.
- Enable ASAR integrity validation fuse - Add GPG signing key for release verification (FAC028574B9C6875D10DA4DC6443E86108ABD2A2) - Enable autoUpdater logging for update debug visibility - Remove 'Auxillo infrastructure tools' text, add eyebrow logo - Update GITHUB_RELEASES.md with current release process and signing steps - Commit stray uncommitted files (THIRD_PARTY_LICENSES.txt, auxillo-wordmark.png)
- Fix stale 0.1.x version references in README, INSTALL, SECURITY, RELEASE_STATUS - Fix THIRD_PARTY_NOTICES.md: 'proprietary' → AGPL-3.0-or-later - Create CONTRIBUTING.md with PR workflow, code standards, and security areas - Add CONTRIBUTING.md reference to README documentation map
…s, 日本語, Português
The CDP smoke runs against a fresh profile, so the first-run guided tour auto-starts and its modal keyboard handler owns global shortcuts. Skip it before driving the workstation with chords, and add the reachability preload namespace to the expected list. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The 0.2.3 codebase builds cleanly into AppImage, .deb and .rpm via electron-builder. Records artifact sizes and structural validation (AppImage boots to the real renderer; deb/rpm metadata correct); notes canonical signed artifacts come from the CI release workflow on tag. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Bump version to 0.3.0 across package metadata, packaging (Flatpak, AUR PKGBUILDs), install docs, website, and release status. Promote the CHANGELOG Unreleased section to the 0.3.0 release. 0.3.0 delivers the roadmap's "integrated remote desktop" milestone plus a wave of workstation features: - Embedded RDP (FreeRDP + Xvfb + x11vnc via the noVNC bridge) with native-client fallback, and embedded VNC in-app tabs. - SSH config Include parsing and multi-hop ProxyJump chains. - Terminal keyword highlighting for log triage. - Pinned live tunnel status cluster and background connection health indicators. - First-run guided tour. - Professional UI rework, connection/group management, discoverable deletion, Aux Command branding, bundled Inter/JetBrains Mono fonts. - Flatpak manifest and AUR PKGBUILDs; deployable website kit. - Large audit-driven correctness pass across the terminal, SFTP/FTP, tunnel, and update subsystems. 201 tests pass; CDP end-to-end smoke passes against the packaged build. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The release workflow hard-failed when AUX_COMMAND_GPG_PRIVATE_KEY was absent, blocking publication entirely. Make signing optional using the release tooling's existing unsigned mode: sign exactly as before when the key secret is present, otherwise produce an unsigned, checksummed release (release-manifest.cjs --no-sign, verify-release.cjs --allow-unsigned) and upload only the assets that were produced. Attestation is best-effort. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The unsigned path produced no .asc files, but those literal (non-glob) paths were not dropped by nullglob and were passed to gh release upload, failing the publish step after the release was already created. Guard each candidate with -e, fail clearly if nothing was produced, and set a consistent "Aux Command vX.Y.Z" release title. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Replace the placeholder SHA-256 in the Flatpak manifest and the aux-command-bin AUR PKGBUILD with the checksum of the published v0.3.0 release AppImage. Add a test asserting release-pinned packaging never ships a placeholder hash. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
scripts/setup-signing-key.sh checks for gpg + an authenticated gh, then either exports the existing release private key (FAC0...D2A2) into the AUX_COMMAND_GPG_PRIVATE_KEY GitHub secret with no repo changes, or generates a new ed25519 release key, updates SIGNING_KEY.asc, stores the secret, and records the new fingerprint for a rotation. Sensitive outputs are gitignored; the private key is never printed. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The signed release re-ran electron-builder, producing a new AppImage. Update the Flatpak manifest and aux-command-bin PKGBUILD to the checksum of the now-signed, published v0.3.0 AppImage. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
dependabot
Bot
added
dependencies
…acking A host-key trust prompt answered after the 20s handshake timeout reached ssh2's denial path on an already-destructed protocol, throwing 'TypeError: protocol._destruct is not a function' as an unhandled rejection in the main process. Rapid repeated connection attempts also stacked one trust modal per attempt, and answering a stale modal instead of the newest kept every new SFTP connection failing until the pile drained. - createGuardedHostVerifier answers ssh2 exactly once, drops verdicts that arrive after the connection died, and absorbs faults from ssh2's own callback path - KnownHostService coalesces concurrent verifications for the same host:port and fingerprint into a single prompt shared by all attempts Verified: 212/212 unit tests (4 new), CDP E2E smoke suite, and a live reproduction against real infrastructure — late-answered prompt now times out cleanly with zero main-process errors and the next connection succeeds immediately. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/electron-runtime-f63515c947
branch
from
August 17, 2026 04:25
272b4be to
606df30
Compare
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Member
|
@dependabot rebase |
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/electron-runtime-f63515c947
branch
from
August 20, 2026 11:30
606df30 to
97b20d4
Compare
… danger guard Adds a per-feature toggleable assist layer for every terminal session: - Passive OS/distro detection (os-release/MOTD/banner heuristics, local /etc/os-release seed) with a tab badge; no probe commands ever injected. - Inline suggestions from in-memory MRU history plus a per-OS command dictionary (apt/dnf/zypper/pacman/apk/brew/winget aware); Ctrl+Space accepts. History is never persisted to disk. - 'Did you mean' autocorrect after command-not-found, insert-only chip. - Dangerous-command guard that withholds Enter behind a confirm modal for rm -rf /, dd of=/dev, mkfs, firewall flushes, shutdown/reboot, fork bombs. Pure engine in src/renderer/assist.js shared by renderer and tests; 19 new unit tests (231 total) plus live CDP E2E coverage; ROADMAP.md added. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Ctrl+Shift+Y: history search overlay across every open session's in-memory command history (substring-then-fuzzy ranking, host tags); picking a command inserts it into the active terminal, never runs it. - Ctrl+Shift+M: multi-session runner — send one command to selected live terminals and collect per-session output side by side, with the dangerous-command guard applied before anything is transmitted. - Both reachable from the command palette; stripAnsi engine helper added. 234 unit tests green; live CDP E2E for both features plus full UI sweep. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Every terminal session now records output with timing offsets (bounded to the most recent 5000 chunks / 2 MB, memory only). 'Replay session' in the transcript menu plays it back in a read-only terminal with 1x/2x/4x/8x/instant speed, pause and restart. - Status bar shows live local-host load/memory/root-disk (20 s refresh from /proc + statfs). Remote SSH stats stay on-demand via Live Monitor so no background SSH connections are ever opened per tab. 238 unit tests green; replay content verified live through the xterm buffer API; full smoke + verify-e2e + 32-step UI sweep green. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
AI command assist (Phase 3): - Strictly off by default; enabling requires the user's own OpenAI-compatible endpoint (llama.cpp, Ollama, or a hosted key). Nothing is ever sent to any AI service except on explicit user action. - Ctrl+Shift+A: natural language -> command (fences stripped) and explain-recent-output modes; replies are inserted, never executed. - API key stored encrypted via the vault safeStorage backend; it never appears in settings.json and never reaches the renderer. UI localization (Phase 3): - New i18n catalogs for en/de/es/fr/it/ja/pt/ru/zh covering the entire persistent chrome (top bar, rail, sidebar, toolbar, welcome, tour, SFTP panel, status bar) with real plural rules incl. Russian three-form. - Live language selector in the status bar, persisted in settings.ui. Deep modal prose remains English pending a full catalog pass. 251 unit tests green; offline live E2E with a fake OpenAI server (config, generate, insert-only, explain) and live language-switch verification. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…0 features - All 8 translated READMEs (de/es/fr/it/ja/pt/ru/zh) gain properly translated bullets for Terminal Assist, the productivity features (history search, multi-session runner, session replay, host stats), the optional BYO-endpoint AI assist, and the localized interface. - ARCHITECTURE.md documents the recording pipeline, the AI assist relay boundary, the shared assist/i18n renderer modules, and settings.json. - Roadmap split clarified and cross-linked: root ROADMAP.md is the live feature-status roadmap, docs/ROADMAP.md the versioned release plan; the README documentation map lists both. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Version bump plus all version-coupled surfaces: install docs, website kit, AUR PKGBUILDs, Flatpak manifest and a 0.4.0 metainfo release entry covering terminal assist, history search, multi-session runner, session replay, host stats, optional BYO-endpoint AI assist and the localized UI. Downstream AppImage checksums are re-pinned after the release publishes. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…x895 The release workflow audits dev dependencies at moderate level; the new brace-expansion advisory covered the previously pinned 5.0.8. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Bumps the electron-runtime group with 1 update in the / directory: [electron](https://github.com/electron/electron). Updates `electron` from 43.2.0 to 43.4.0 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v43.2.0...v43.4.0) --- updated-dependencies: - dependency-name: electron dependency-version: 43.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: electron-runtime ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/electron-runtime-f63515c947
branch
from
August 20, 2026 22:02
97b20d4 to
4ef1d8e
Compare
jaundre-van-staden
force-pushed
the
main
branch
from
August 21, 2026 04:40
6844b65 to
e8806f5
Compare
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/electron-runtime-f63515c947
branch
August 21, 2026 04:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the electron-runtime group with 1 update in the / directory: electron.
Updates
electronfrom 43.2.0 to 43.4.0Release notes
Sourced from electron's releases.
Commits
154ee91build: add release-assets.json expected-asset manifest (43-x-y) (#52732)3aa653efix: don't allocate crash keys inside the v8 oom callback (#52725)8e867d9chore: cherry-pick 4 changes from angle and chromium (#52709)fb05750fix: exit and lower child shutdown priority when the windows session ends (#5...999ab41chore: remove redundant isolate params in the context bridge (#52703)3367edechore: bump chromium to 150.0.7871.224 (43-x-y) (#52693)f05dfa0fix: guard NotifyUserActivation on live main frame. (#52697)74fab79fix: exit gracefully when the display server connection is lost (#52685)22341b0docs: advise bisect-friendly commits in chromium upgrade skill (#52688)ca5fb8ddocs: tighten commit organization rules in electron-chromium-upgrade skill (#...