Commit graph

247 commits

Author SHA1 Message Date
Vault Automation
5e0629cf49
[UI] Update Dependency Overrides (#15409) (#15458)
* update dep override report script to fix issue with deps that have large trees

* runs override report and removes unnecessary overrides

* overrides tmp version to 0.2.6

* regenerates override report

* fixes code scanning issue in gen-dep-override-report script

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2026-06-11 19:59:17 +00:00
Vault Automation
8c37186b50
Backport Migrate Vault Reporting Dashboard from shared package into Vault Enterprise into ce/main (#15382)
* no-op commit

* Migrate Vault Reporting Dashboard from shared package into Vault Enterprise (#14892)

* Migrate Vault Reporting Dashboard from shared package into Vault Enterprise

* Add click interactions for export toggle in usage reporting dashboard tests

* feat(reporting): enhance external link security with rel attributes

* feat(reporting): migrate Vault Reporting Dashboard components and integrate meter chart visualization

* feat(reporting): remove deprecated meter.js and migration instructions for Vault Reporting Dashboard

* Migrate Vault Reporting Dashboard from shared package into Vault Enterprise

* Add click interactions for export toggle in usage reporting dashboard tests

* feat(reporting): enhance external link security with rel attributes

* feat(reporting): migrate Vault Reporting Dashboard components and integrate meter chart visualization

* feat(reporting): remove deprecated meter.js and migration instructions for Vault Reporting Dashboard

* feat(reporting): migrate horizontal bar chart to new viz-card component and remove deprecated files

* feat(reporting): remove horizontal bar chart component and associated files

* feat(reporting): update dashboard to force remount of chart layers on namespace refresh and improve data fetching logic

* feat(reporting): remove usage reporting handler and associated imports

* feat(reporting): refactor route handling and remove safeRoute utility; update data download methods- copilot recommendation

* feat(reporting): enhance tooltip interaction by replacing mouse events with pointer events for better responsiveness

* feat(reporting): remove reporting analytics service and associated tracking logic from dashboard components

* feat(reporting): standardize text casing in dashboard and export components

* feat(reporting): standardize text casing in usage reporting tests

* feat(reporting): add padding to carbon chart for improved layout

* feat(reporting): implement toSentenceCase utility and update chart labels for consistency

* feat(reporting): enhance toSentenceCase utility to handle acronyms and branded names

* feat(reporting): migrate vault-reporting module from shared package to Vault Enterprise

* feat(reporting): enhance tooltip functionality and styling for usage reporting charts

* Fix formatting in pnpm-lock.yaml

* Refactor CSV export to use sentence case for labels and enhance toSentenceCase utility

* Refactor CSV download test to simplify URL handling and assert sentence case labels

* Enhance destination name formatting to use sentence case in reporting dashboard

* Add RabbitMQ branding override and update tests for sentence case handling

---------

Co-authored-by: Aravind VM <aravind.vm@ibm.com>
2026-06-10 13:26:45 -07:00
Vault Automation
cf812c48f7
security: disable scarf top-level
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-06-09 11:53:23 -07:00
Vault Automation
15bdb3c8ee
fix(babel-preset-env): upgrade to preset-env to 7.29.5 (#15068) (#15153)
Co-authored-by: Nina Bucholtz <nina.balachandranmary@gmail.com>
2026-06-03 14:46:55 +00:00
Vault Automation
e36537aef3
[UI][SECVULN-44627][SECVULN-44645] Update package dependencies using pnpm update in main (#14982) (#15078)
* Upgrade fast-uri

* Run pnpm update to update dependencies

* Remove overrides and update dependencies

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2026-05-29 15:08:32 +00:00
Vault Automation
1f192ff4ce
Remove obsolete @lineal-viz/lineal package from dependencies (#14906) (#14938)
Co-authored-by: Aravind VM <aravind.vm@ibm.com>
2026-05-26 07:40:29 -07:00
Vault Automation
74ab0fec97
override lodash-es dep (#14314) (#14321)
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2026-05-07 15:00:45 -05:00
Vault Automation
1d4d9bc61c
override lodash dep (#14316) (#14317)
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2026-04-28 08:37:26 -07:00
Vault Automation
d89abd6623
update @xmldom/xmldom dep (#14173) (#14177)
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2026-04-22 17:26:11 +00:00
Vault Automation
65d6325cd9
update path-to-regexp dep (#14065) (#14082)
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2026-04-20 14:17:04 -05:00
Vault Automation
5fa39379da
Pin Node for pnpm and local version managers (#13575) (#13987)
Move the exact UI Node version into devEngines.runtime so
package.json becomes the pnpm source of truth. Keep
engines.node broad, remove the workspace useNodeVersion
setting, and keep the root version files as manual mirrors.

Update the UI README to describe the root version files as
mirrors and refresh the lockfile to record the Node 20.20.2
runtime dependency.

Co-authored-by: Angelo Cordon <angelo.cordon@hashicorp.com>
Co-authored-by: OpenCode (gpt-5.4) <opencode.noreply@hashicorp.com>
2026-04-16 10:34:52 -07:00
Vault Automation
6b91151e72
[UI] Bump handlebars to 4.7.9 (#13932) (#13941)
Update the UI's direct handlebars dependency and refresh the
lockfile so the resolved dependency graph picks up 4.7.9.

This clears the open handlebars security findings without pulling in
unrelated dependency upgrades.

Co-authored-by: Angelo Cordon <angelo.cordon@hashicorp.com>
Co-authored-by: OpenCode (gpt-5.4) <opencode.noreply@hashicorp.com>
2026-04-14 13:42:08 -04:00
Vault Automation
7e23bd9cee
Update DOMPurify and Carbon Charts for UI security remediation (#13511) (#13519)
Pull in the patched DOMPurify release used by the UI sanitizer helper and Carbon Charts.

Co-authored-by: Angelo Cordon <angelo.cordon@hashicorp.com>
Co-authored-by: OpenCode Agent (GPT-5.4) <opencode-agent@users.noreply.github.com>
2026-04-09 10:55:42 -05:00
Vault Automation
ae01011393
[UI] Prune Dependency Overrides (#13698) (#13733)
* removes unnecessary version overrides for deps

* reverts unpinning @embroider/macros

* bumps @embroider/macros to latest and removes pin

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2026-04-07 16:37:02 -06:00
Vault Automation
e33118cee2
[UI] [SECVULN] Underscore Version Update (#13325) (#13343)
* removes doctoc, jsdoc-to-markdown and jsonlint packages and removes underscore version override

* removes generate-docs script which uses removed docfy-md scipt

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2026-03-24 15:00:47 +00:00
Vault Automation
018cf3e891
bumps sass to latest version (#13267) (#13277)
Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2026-03-20 20:58:29 +00:00
Vault Automation
f3084014d4
bumps webpack to latest (#13255) (#13261)
Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2026-03-20 20:21:19 +00:00
Vault Automation
b057aac746
[VAULT-43339] 1/2 Chore update TS (#13050) (#13105)
* Initial ts updgrade

* Migrate linked-block to ts to squash ts errors

* [VAULT-43339] 2/2 Update vault-reporting and add ember-intl (#13062)

* Update vault-reporting and add ember-intl

* Add setupIntl for rendering tests

Co-authored-by: Jim Wright <jim.wright@hashicorp.com>
2026-03-17 15:52:40 -07:00
Vault Automation
9790b23c38
SECVULN-38932 update rollup override to latest patch (#12774) (#12800)
Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2026-03-12 23:28:09 -07:00
Vault Automation
bc2aa7e8ec
Update minimax (#12742) (#12746)
Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2026-03-05 02:20:12 +00:00
Vault Automation
a3859d67e3
Backport rework UI CI workflow to partition JS tests into ce/main (#12515)
* rework UI CI workflow to partition JS tests (#11967)

* add setup-pnpm action

* remove reading vault keys from vault server output

* update ci workflow to build app and go binary first, then run tests in partitions

* fix errant tests

* address PR feedback

* Apply suggestions from code review

Co-authored-by: Ryan Cragun <me@ryan.ec>

* more feedback changes

* restore test-helper.js

* restore auth test helpers

* check in ui/tests/helpers/vault-keys.js

* use v7 of download-artifact action

* make test-ui reusable workflow

* add status job

---------

Co-authored-by: Ryan Cragun <me@ryan.ec>

* update new UI tests to run CE tests on the CE branch (#12537)

---------

Co-authored-by: Matthew Irish <39469+meirish@users.noreply.github.com>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-02-27 12:19:47 -06:00
Vault Automation
8f1019d4e7
[SECVULN-37949] UI: add pnpm overrides for ajv and markdown-it libraries to address open security vulns (#12559) (#12590)
Co-authored-by: Shannon Roberts (Beagin) <beagins@users.noreply.github.com>
2026-02-26 16:19:25 -08:00
Vault Automation
d744b80e68
[UI] API Client Update / Enum Updates (#12549) (#12565)
* bumps api client version

* updates imported enum names from api client

* updates sync activation request method

* updates pki list enums imports

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2026-02-26 17:20:30 +00:00
Vault Automation
24c3412135
Add V2 Form generator script (#12062) (#12089)
Add automated form config generation from OpenAPI specs.
Generator script can be utilized by passing API method name
which will then parse the OAS and generate the necessary form
configuration to be used with the upcoming V2 Form systems.

Co-authored-by: Angelo Cordon <angelo.cordon@hashicorp.com>
2026-02-25 19:09:42 +00:00
Vault Automation
763be2684d
[UI] Playwright Automated Binary Testing (#12214) (#12386)
* adds playwright

* adds playwright auth setup and kv tests

* removes generated gh action for playwright

* removes testem ignore paths

* consolidates kv e2e workflows into single test

* adds missing ids to key shares and threshold inputs

* updates ariaLabel arg to attribute in enabled and disabled plugin card components

* adds script to start vault with config for playwright tests

* updates playwright setup to initialize and unseal vault and create user for testing rather than using root token

* adds policies for e2e tests

* updates e2e init setup to use web repl for creating token

* moves kv e2e test under superuser directory

* updates playwright config to create projects for multiple user types

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2026-02-17 17:09:03 +00:00
Vault Automation
591e963342
add carbon tree chart (#11965) (#11970)
* add carbon tree chart

* a11y and test improvements

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2026-01-23 23:59:12 +00:00
Vault Automation
12e793039a
[UI] - migrate to pnpm for JS package management (#11651) (#11661)
* move from yarn to pnpm for package management

* remove lodash.template patch override

* remove .yarn folder

* update GHA to use pnpm

* add @babel/plugin-proposal-decorators

* remove .yarnrc.yml

* add lock file to copywrite ignore

* add @codemirror/view as a dep for its types

* use more strict setting about peerDeps

* address some peerDep issues with ember-power-select and ember-basic-dropdown

* enable TS compilation for the kubernetes engine

* enable TS compilation in kv engine

* ignore workspace file

* use new headless mode in CI

* update enos CI scenarios

* add qs and express resolutions

* run 'pnpm up glob' and 'pnpm up js-yaml' to upgrade those packages

* run 'pnpm up preact' because posthog-js had a vulnerable install. see https://github.com/advisories/GHSA-36hm-qxxp-pg3

* add work around for browser timeout errors in test

* update other references of yarn to pnpm

Co-authored-by: Matthew Irish <39469+meirish@users.noreply.github.com>
2026-01-09 11:45:14 -06:00
Vault Automation
7bf7bf39fe
Resolve glob and js-yaml security vulnerabilities (#11271) (#11314)
* remove unused packages

* patch vulnerable versions of glob and js-yaml SECVULN-33202

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-12-12 09:08:46 -08:00
Vault Automation
10d28ee713
pin posthog version (#11006) (#11007)
Co-authored-by: Evan Moncuso <46458931+emoncuso@users.noreply.github.com>
2025-11-25 19:05:49 +00:00
Vault Automation
6e60eb3ff6
update to 4.24.1 (#10726) (#10734)
Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
2025-11-12 16:52:24 +00:00
Vault Automation
9fbc0f46c3
pin @messageformat/runtime dep resolution (#10521) (#10542)
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-11-04 10:59:56 -06:00
Vault Automation
117beded49
UI: Clean up remaining ember-modal-dialog tooltip code (#10325) (#10368)
* remove ember-modal-dialog dep + unused calendar-widget component

* remove waitUntil

* lint fix

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-10-24 13:50:15 -05:00
Vault Automation
42d01ee5fe
Upgrade jsondiffpatch dependency version (#9651) (#10282)
* update jsondiffpatch dep + use webpack to convert into UMD format

* do not lint vendor files

* update test

* lint fix

* fix merge conflict error

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-10-22 15:02:47 -05:00
Vault Automation
3457992a63
[UI] - disable scarf for this package (#10265) (#10276)
* disable scarf for this package

* add changelog

* use correct changelog format

Co-authored-by: Evan Moncuso <46458931+emoncuso@users.noreply.github.com>
2025-10-21 16:29:30 -07:00
Vault Automation
6886447328
General test improvements (#10099) (#10147)
* add parallel command

* declare vault-keys module for test helpers

* use mirage to make dropdown check more reliably

* wait for inputs

* attempt to stabilize dashboard tests in parallel

* revert wait for inputs

* move problem acceptance tests to integration tests

* move more tests to integration

* remove assert.expect()  because there are no callback assertions

* delete redundant acceptance tests

* cleanup login state in afterEach hook

* use mirage for login settings test

* update other test based on mirage handler changes

* throw some waitFor in there

* revert waitFor

* use mirage in shared-identity-test

* remove storage cleanup from this pr

* remove parallel..again

* remove unnecessary auth login changes

* add version to dashboard/overview test "it shows the learn more card on enterprise"

* convert "version 2 with no update to config endpoint still allows mount of secret engine" to integration test

* restart tests

* Apply suggestion from @hellobontempo

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-10-15 19:50:39 +00:00
Vault Automation
bf0cecea38
UI: Uninstall unused node-notifier dep (#9404) (#9419)
* remove node-notifier

* remove version pinning of node-notifier

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-09-18 08:53:41 -07:00
Vault Automation
3942acf61a
[VAULT-39571] Update vault-reporting package to 0.8.0 (#9340) (#9344)
Co-authored-by: Eren Tantekin <eren.tantekin@hashicorp.com>
2025-09-16 15:17:27 -07:00
Vault Automation
1515ea76fe
[VAULT-39375] Update vault-reporting to 0.5.1 (#9094) (#9141)
Co-authored-by: Eren Tantekin <eren.tantekin@hashicorp.com>
2025-09-16 11:01:11 -07:00
claire bontempo
6b1a6b2efd
UI: Upgrade to HDS 4.20.1 (#31467)
* update package

* update test for replicaiton

* fix a11y failure
2025-08-11 09:12:15 -07:00
Zack Moore
e6ce95acd3
Replace codemirror 6 code editor with HDS CodeEditor component (#30188)
* Completed initial replacement of editor

* fixing ts issues

* removing codemirror modifier and deps

* working on replacing the code editor

* addressing linting concerns

* cleaning up policy-form editor

* fixing linting issues

* fixing linting issues

* fixing tests

* fixing tests

* fixing tests

* fixing tests

* fixing failing tests

* cleaning up PR

* fixing tests

* remove outdated message for navigating editor

* fix linting in tests

* add changelog

* fix tests

* update naming

* remove unused lint param + name changes

* update test selector usage

* update test selector usage

* update test selector usage

* lint fixes

* replace page object selectors

* lint fix

* fix lint

* fix lint after merge

* update tests

* remove import

---------

Co-authored-by: Lane Wetmore <lane.wetmore@hashicorp.com>
2025-07-23 11:12:20 -07:00
Jordan Reimer
8700becc45
[UI] Ember Data Migration - API Property Casing (#31325)
* updates api client vars to snake_case for custom messages

* updates api client vars to snake_case for tools

* updates api client vars to snake_case for sync

* updates api client vars to snake_case for secrets engine

* updates api client vars to snake_case for auth

* updates api client vars to snake_case for usage

* updates api client dep to point to gh repo

* fixes custom-messages service unit tests

* fixes configure-ssh test

* fixes configure-ssh test...again
2025-07-18 09:32:01 -06:00
Dan Rivera
d34f026d9b
directly set runtime version (#30741) 2025-05-27 10:14:46 -04:00
Evan Moncuso
689ede2da5
[UI] - introduce Posthog for Vault Dedicated managed clusters (#30425)
* add dummy provider and wire it into the app

* add tests for analytics service

* add posthog provider

* wire in posthog

* add HVD limitation for analytics and add unit test

* filter out sensitive event properties

* add changelog

* run copywrite headers

* update logging tests for analytics service

* update changelog format

* disable telemetry in test mode

* remove unnecessary test

* self review

* Update vault-reporting addon with analytics tracking changes

* address review feedback

---------

Co-authored-by: Jim Wright <jim.wright@hashicorp.com>
2025-05-23 19:40:29 +00:00
Angel Garbarino
2be17aa3ea
all the changes (#30594) 2025-05-13 16:44:44 -06:00
Angel Garbarino
a8aeb01788
Dependency bumps part 1 (#30541)
* bump ember render modifiers

* bump ember/string from 3 to 4

* bump test-helpers

* bump asn1js from 2 to 3 major

* bump autosize

* bump concurently from 8 to 9

* remove unused path-to-tree, test, and thus deepmerge

* bump ember-cli-deprecation-workflow and adjust config

* bump ember-inflector

* bump ember-load-initializers

* bump back ember-inflector it broke things

* bump ember-qunit and add required stuff to test-helper file

* bump ember-resolver

* bump truth-helpers

* Delete ui/ent.txt

* Update package.json

* bump back qunit

* remove ember-page-title
2025-05-13 08:51:25 -06:00
Angel Garbarino
0413e41c3e
Pinning dependencies & resolutions. Replacing ^ with ~ for devDependencies. (#30379)
* first half of devDependencies move to ~, required to up test-waiters to 4.1 from 4.0

* next part of devDependencies

* another chunk of devDependencies

* remainder of devDependencies and bump required on sass from 1.66 to 1.83

* resolutions and bumped prismjs from 1.2 to 1.3

* for now at least just tilde the dependency block

* bump uuid and remove caret in depedencies

* pin the dependency block— yeah

* pinning some resolutions

* resolutions are all pinned

* update types but still having issues on validate.ts

* update typescript

* pin the minors on all based off of yarn.lock previously

* revert uneeded ts types

* update babel per yarn lock finding
2025-04-29 12:04:06 -06:00
Jordan Reimer
d8ca0a52d6
pins @embroider/macros to 1.15.0 (#30375) 2025-04-24 13:58:15 -06:00
Evan Moncuso
87c08a0af3
🤖 - CI Fix - UI Dependencies step (#30346)
* rebuild yarn.lock

* skip pki test temporarily
2025-04-23 13:43:27 -06:00
Evan Moncuso
21f772d9d1
Chore/remove ember svg jar (#30181)
* bump hds to latest version

* disable ember-svg-jar

* fix mfa

* remove ember svg jar dep and cleanup

* cleanup old svgs and fix icon test

* add changelog

* rebuild yarn.lock
2025-04-23 09:27:01 -07:00
Jim Wright
4f23e18e2d
[UI] Vault reporting generated files (#30260)
* Reporting generated files

* Update vault reporting addon (#30264)

* Update yarn.lock based on main

* Update vault-reporting addon
2025-04-17 14:45:23 -07:00