Merge main into strict

.github/workflows/ci.yml

@@ -1,7 +1,11 @@
 name: 🧪 CI
 on: [push, pull_request]
+
+permissions: {}
+
 jobs:
   build:
+    name: Build
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -19,6 +23,7 @@ jobs:
           path: out/index.html
           retention-days: 1
   test:
+    name: Test
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository

.github/workflows/deploy.yml

@@ -34,6 +34,8 @@ on:
     branches:
       - "*"
 
+permissions: {}
+
 jobs:
   deploy:
     # Don't deploy on push if this is a fork
@@ -48,14 +50,6 @@ jobs:
       || 'openfront.dev'
       }}
     runs-on: ubuntu-latest
-    environment: ${{
-      github.event_name == 'push'
-      && (github.ref_name == 'main' && 'openfront.dev'
-      || format('{0}.openfront.dev', github.ref_name))
-      || inputs.target_subdomain && format('{0}.{1}', inputs.target_subdomain, inputs.target_domain)
-      || inputs.target_domain
-      || 'openfront.dev'
-      }}
     env:
       DOMAIN: ${{ inputs.target_domain || 'openfront.dev' }}
       SUBDOMAIN: ${{ github.event_name == 'push' && github.ref_name || inputs.target_subdomain || 'main' }}
@@ -147,23 +141,6 @@ jobs:
           done
           echo "Deployment started in ${SECONDS} seconds" >> $GITHUB_STEP_SUMMARY
           echo "::endgroup::"
-      - name: 🚀 Notify PR
-        if: ${{ success() && github.event_name == 'push' }}
-        env:
-          BRANCH: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.ref || github.ref_name }}
-        run: |
-          set -euxo pipefail
-          if [ -z "${BRANCH}" ]; then
-            echo "Branch not found"
-            exit 1
-          fi
-          echo "Checking for open PR from $BRANCH..."
-          pr_url=$(gh pr list --head "$BRANCH" --state open --json url -q '.[0].url')
-          if [ -z "$pr_url" ]; then
-            echo "No open PR found for branch $BRANCH"
-            exit 0
-          fi
-          gh pr comment "$pr_url" --body "🚀 Deployed ${GITHUB_SHA} to [$FQDN](https://$FQDN)."
       - name: ✅ Update deployment status
         if: success()
         uses: chrnorm/deployment-status@v2

.github/workflows/eslint.yml

@@ -5,8 +5,11 @@ on:
   push:
     branches: [main]
 
+permissions: {}
+
 jobs:
-  check:
+  eslint:
+    name: Check
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

.github/workflows/prettier.yml

@@ -5,8 +5,11 @@ on:
   push:
     branches: [main]
 
+permissions: {}
+
 jobs:
-  check:
+  prettier:
+    name: Check
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

CODEOWNERS

@@ -0,0 +1,4 @@
+# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+* @openfrontio/core-contributor
+resources/lang @openfrontio/translation-approver
+resources/lang/en.json

package-lock.json

@@ -53,7 +53,7 @@
         "node-addon-api": "^8.1.0",
         "node-gyp": "^10.2.0",
         "obscenity": "^0.4.3",
-        "page": "^1.11.6",
+        "page": "^1.3.7",
         "pg": "^8.13.3",
         "priority-queue-typescript": "^1.0.1",
         "prom-client": "^15.1.3",
@@ -9931,9 +9931,9 @@
       }
     },
     "node_modules/caniuse-lite": {
-      "version": "1.0.30001712",
-      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001712.tgz",
-      "integrity": "sha512-MBqPpGYYdQ7/hfKiet9SCI+nmN5/hp4ZzveOJubl5DTAMa5oggjAuoi0Z4onBpKPFI2ePGnQuQIzF3VxDjDJig==",
+      "version": "1.0.30001718",
+      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001718.tgz",
+      "integrity": "sha512-AflseV1ahcSunK53NfEs9gFWgOEmzr0f+kaMFA4xiLZlr9Hzt7HxcSpIFcnNCUkz6R6dWKa54rUz3HUmI3nVcw==",
       "funding": [
         {
           "type": "opencollective",
@@ -13759,9 +13759,9 @@
       }
     },
     "node_modules/http-proxy-middleware": {
-      "version": "2.0.7",
-      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-2.0.7.tgz",
-      "integrity": "sha512-fgVY8AV7qU7z/MmXJ/rxwbrtQH4jBQ9m7kp3llF0liB7glmFeVZFBepQb32T3y8n8k2+AEYuMPCpinYW+/CuRA==",
+      "version": "2.0.9",
+      "resolved": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-2.0.9.tgz",
+      "integrity": "sha512-c1IyJYLYppU574+YI7R4QyX2ystMtVXZwIdzazUIPIJsHuWNd+mho2j+bKoHftndicGj9yh+xjd+l0yj7VeT1Q==",
       "license": "MIT",
       "dependencies": {
         "@types/http-proxy": "^1.17.8",
@@ -16920,25 +16920,9 @@
       "license": "BlueOak-1.0.0"
     },
     "node_modules/page": {
-      "version": "1.11.6",
-      "resolved": "https://registry.npmjs.org/page/-/page-1.11.6.tgz",
-      "integrity": "sha512-P6e2JfzkBrPeFCIPplLP7vDDiU84RUUZMrWdsH4ZBGJ8OosnwFkcUkBHp1DTIjuipLliw9yQn/ZJsXZvarsO+g==",
-      "dependencies": {
-        "path-to-regexp": "~1.2.1"
-      }
-    },
-    "node_modules/page/node_modules/isarray": {
-      "version": "0.0.1",
-      "resolved": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz",
-      "integrity": "sha512-D2S+3GLxWH+uhrNEcoh/fnmYeP8E8/zHl644d/jdA0g2uyXvy3sb0qxotE+ne0LtccHknQzWwZEzhak7oJ0COQ=="
-    },
-    "node_modules/page/node_modules/path-to-regexp": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-1.2.1.tgz",
-      "integrity": "sha512-DBw9IhWfevR2zCVwEZURTuQNseCvu/Q9f5ZgqMCK0Rh61bDa4uyjPAOy9b55yKiPT59zZn+7uYKxmWwsguInwg==",
-      "dependencies": {
-        "isarray": "0.0.1"
-      }
+      "version": "1.3.7",
+      "resolved": "https://registry.npmjs.org/page/-/page-1.3.7.tgz",
+      "integrity": "sha512-1MzNKSvcVePQDErGsfK22xmtdD8AQNj5g8U3OWUJJdlP5wd7yVxCLFbJutMkI5j9pRT/ZCn5kS8Rr6em6LIXsA=="
     },
     "node_modules/pako": {
       "version": "1.0.11",

package.json

@@ -123,7 +123,7 @@
     "node-addon-api": "^8.1.0",
     "node-gyp": "^10.2.0",
     "obscenity": "^0.4.3",
-    "page": "^1.11.6",
+    "page": "^1.3.7",
     "pg": "^8.13.3",
     "priority-queue-typescript": "^1.0.1",
     "prom-client": "^15.1.3",