rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,576 Commits 1 Branch 0 Tags
c887e3497f164f41eded98e5247aa4b88400381e
Commit Graph

115 Commits

Author SHA1 Message Date
Émile Ré
be1e94da71 Add @probo/cookie-banner SDK package scaffold 
Introduce the boilerplate for a new public npm package that will
serve as the cookie consent banner JavaScript SDK. The package
uses esbuild to produce both an IIFE bundle (for script tag
embedding) and an ESM module. Versioning is independent from the
monorepo: CI compares package.json against npm and only publishes
when the version changes.

Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-16 14:56:31 +04:00
dependabot[bot]
f9d004422f Bump dompurify from 3.3.3 to 3.4.0 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.3 to 3.4.0.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.3...3.4.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 07:21:48 +00:00
Émile Ré
74d7d3ff25 Upgrade Relay to v20.1.1 and unify compiler config 
Consolidate the two per-app relay configs (console and trust)
into a single multi-project relay.config.json at the repo root
with three projects: core, iam, and trust. Bump all relay
packages from v19 to v20.1.1 and move relay-compiler to the
root devDependencies. Replace per-workspace relay scripts with
a single root-level npm run relay command and update the
GNUmakefile, CI workflows, and docs accordingly.

Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-14 16:04:11 +04:00
Sacha Al Himdani
bfed192421 Upgrade axios to 1.15.0 via npm override 
Fixes GitHub security alerts #82, #83, #84:
- Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
- NO_PROXY Hostname Normalization Bypass leading to SSRF
- Prototype Pollution in langsmith-sdk

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-04-13 14:24:51 +02:00
dependabot[bot]
f4a7eb1a16 Bump vite from 7.3.1 to 7.3.2 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.1 to 7.3.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-07 11:17:05 +00:00
Émile Ré
0ac3fd1f75 Handle html in markdown during conversion to prosemirror nodes 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-03 17:02:42 +04:00
Émile Ré
2a6845d884 Reimplement ts converter using marked parser 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-03 17:02:42 +04:00
Émile Ré
a850b0f77c Move markdown to prosemirror parser in packages 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-03 17:02:41 +04:00
Sacha Al Himdani
5c71575ade Override lodash to fix security vulnerabilities 
Add npm overrides for lodash and lodash-es to force version 4.18.1,
fixing CVE for code injection via _.template and prototype pollution
via _.unset and _.omit.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-04-02 18:59:31 +02:00
Émile Ré
9bbcba68c0 Add mermaid tiptap extension 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:04:36 +04:00
Émile Ré
70ebdd771d Add table extension 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:03:20 +04:00
Émile Ré
9ce510caa7 Add phosphor icons and improve menus UI 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:03:19 +04:00
Émile Ré
34d64ecb75 Add side actions for insertin new / editing blocks 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:03:18 +04:00
Émile Ré
a9f4ecacfa Install tip tap 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:03:17 +04:00
Sacha Al Himdani
596901b799 Fix n8n-node lint by scoping brace-expansion override for minimatch@3 
The root brace-expansion@5 override broke minimatch@3 (used by
@eslint/config-array) because v5 changed the export API. Add a
scoped override so minimatch@3 gets brace-expansion@1.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-27 14:24:53 +01:00
Sacha Al Himdani
a8f733706b Fix npm audit vulnerabilities 
Bump @n8n/node-cli to ^0.24.1 and remove stale form-data override.

Add overrides for transitive sub-dependencies with no upstream fix:
- brace-expansion ^5.0.5 (ReDoS / process hang)
- minimatch@9 ^9.0.9 (ReDoS in 9.0.0-9.0.6)
- langsmith ^0.5.0 (SSRF via tracing header injection)
- handlebars 4.7.9 (prototype pollution / XSS)
- @langchain/community ^1.1.25 (SSRF bypass)

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-27 11:23:41 +01:00
Bryan Frimin
36d517e8ce Fix n8n sub-dep CVE 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-27 08:10:57 +01:00
Sacha Al Himdani
c5d4912c4c Npm audit fix 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-26 09:16:26 +01:00
Sacha Al Himdani
c1e41d88fc Npm audit fix 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-20 12:18:05 +01:00
Bryan Frimin
b4a6618736 Add PDF dropzone to audit list for streamlined report upload 
Enable users to drag-and-drop PDF reports onto the audit list page, which automatically opens the create-audit dialog with the file attached. The dialog chains createAudit → uploadAuditReport mutations, with graceful handling for partial failures (audit created but upload failed).

Changes:
- AuditsPage: Add dropzone with visual overlay (dashed border + icon) when dragging PDFs
- CreateAuditDialog: Accept optional file prop, show file info, chain mutations on submit
- Extract audit ID from createAudit response to pass to uploadAuditReport
- Handle upload failure with warning toast, allowing manual upload from audit detail page
- Add react-dropzone dependency to console app

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-19 09:39:34 +01:00
Bryan Frimin
2f6574ee49 Update package-lock.json 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-18 15:06:38 +01:00
Sacha Al Himdani
c98ffaeda3 Add mermaid suport 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-12 14:41:30 +01:00
Sacha Al Himdani
47d84158d6 Regenerate package lock 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-02 15:02:55 +01:00
Sacha Al Himdani
70259f7e65 Fix package versions 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-02 13:40:11 +01:00
Sacha Al Himdani
aac824f4aa Update rollup 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-02 10:21:31 +01:00
Sacha Al Himdani
6a83b53b47 Add obligation webhooks 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-02-27 17:14:26 +01:00
dependabot[bot]
3a294cbaa1 Bump storybook from 10.2.8 to 10.2.10 
Bumps [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) from 10.2.8 to 10.2.10.
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.2.10/code/core)

---
updated-dependencies:
- dependency-name: storybook
  dependency-version: 10.2.10
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-27 10:02:46 +01:00
Sacha Al Himdani
71b01bf20e Add vendor contacts to n8n 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-02-23 14:33:23 +01:00
Émile Ré
bd9c1946ae Upgrade storybook to 10 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 18:17:11 +04:00
Émile Ré
8dc96918df Update @vitejs/plugin-react 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 17:46:44 +04:00
Émile Ré
42b0aeafb7 Update package-lock.json 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 17:42:36 +04:00
Émile Ré
bb4721a691 Update some dependencies to get esbuild to use go 1.25.7 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 17:35:42 +04:00
Émile Ré
2a36a3cfba Fix @probo/eslint-config has only dev dependencies 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 15:26:22 +04:00
Émile Ré
6965bd2f01 Fix react-email should be a dev dep 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 14:44:33 +04:00
Émile Ré
9f7c643085 Fix npm vulnerabilities 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-04 14:57:57 +04:00
Émile Ré
9b528c2b88 Fix eslint-plugin-relay d.ts reach by console and trust 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-23 15:51:05 +04:00
Émile Ré
3899656730 Add eslint-plugin-relay rules (warning only) 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-23 15:16:41 +04:00
Émile Ré
aa5696b5d3 Add eslint-plugin-import 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 19:57:10 +04:00
Émile Ré
0e4ac296cb Update eslint for apps/trust & packages/n8n-node 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 17:53:44 +04:00
Émile Ré
36cd0cae95 Update node to LTS and npm to avoid issue with optional dependencies on natives 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 17:47:44 +04:00
Émile Ré
988909eb78 Fix packages/ui lint issues 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 16:39:20 +04:00
Émile Ré
b4a73f2eea Update apps/console eslint dependency + compose eslint config with @probo/eslint-config 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:43 +04:00
Émile Ré
469e1431a3 Use eslint to lint the eslint-config package itself 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:42 +04:00
Émile Ré
6d75d64ba9 Add typescript and esplugin-react to eslint-config 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:42 +04:00
Émile Ré
a82018a765 Update linting dependencies 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:42 +04:00
Émile Ré
27428377c6 Remove prettier in favor of @stylistic/eslint-plugin 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:42 +04:00
Yash Gupta
c24726b481 chore: add shared ESLint and Prettier configuration 
Closes #615

- Add @probo/eslint-config package with ESLint 9.x flat config
- Enhance @probo/prettier with aligned stylistic rules
- Migrate console, trust, and UI packages to shared config
- Remove duplicate ESLint dependencies from individual packages

Signed-off-by: Yash Gupta <yash3144@gmail.com>
 2026-01-22 12:51:42 +04:00
Émile Ré
15143ba632 Fix missing react-pdf dependency in console 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-19 11:52:54 +04:00
Bryan Frimin
74fc3b8cd1 Rewrite identity and access management 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 10:07:34 -08:00
dependabot[bot]
202f04b9b6 Bump react-router in the npm_and_yarn group across 1 directory 
Bumps the npm_and_yarn group with 1 update in the / directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).


Updates `react-router` from 7.10.0 to 7.12.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.12.0/packages/react-router)

---
updated-dependencies:
- dependency-name: react-router
  dependency-version: 7.12.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-09 16:30:25 +01:00