Every 6.x release is inside both open advisories, so no 6.x update closes
them: GHSA-wrjc-x8rr-h8h6 (open redirect via a backslash in <Link> and
useNavigate) and GHSA-337j-9hxr-rhxg (SSR hydration; not reachable here,
this is a client-only HashRouter app). 7.18 in library mode keeps every API
the app imports (Routes, Route, Link, NavLink, Navigate, useLocation,
useParams, HashRouter, MemoryRouter) and bundles @remix-run/router.
The one behaviour v7 changes, relative links under splat routes, does not
occur: no route path ends in '*', tab links are absolute (basePath) and the
top level picks the page from location.pathname.
Measured: 17 routes opened in Chromium against the live 6.x build and this
build give the same URL, active tab, tab count and tab-click target, with no
page errors. Tests 89/89, lint and type check green.
Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Both came with the upstream template: a pull request labelled '-auto' was
approved for an upstream maintainer's account and squash-merged once its
checks reported, through the upstream author's own actions. The label does
not exist here and neither workflow ever acted (2 runs each, both on other
labels), but the path was open: it merges without review, and the PR checks
it waited on run with continue-on-error.
Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
- react-router 6.30.6 / @remix-run/router 1.23.4 (open redirect, XSS advisories)
- styled-components 6.5.3, which brings postcss 8.5.28
- query-string 9.5.1 for decode-uri-component 0.5.0; parse() is the only API
used and is unchanged
- in-range lockfile refresh
Bundle compared against the live build of 570586b: vendor chunks and the
loader change; the one page chunk that differs only renumbers the
query-string module. Tests 89/89, lint and type check green.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
push-main.yml now builds build:www on every push to main and, once the
production environment is approved, copies it to the web host and switches
to it. The host keeps releases side by side and serves a 'current' symlink,
so going live is one rename and rollback is a dispatch with an earlier sha.
.github/deploy/release.sh checks the switch through nginx for the public
name and restores the previous release if the new one is not served.
Ships env-config.js, which index.html loads: on a static host the request
fell through to index.html and the browser ran HTML as a script.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
None of it could run here: the repository has no Pages site, no Pinata or
Crust credentials and no npm token, and docker/build.sh pushed to the
upstream author's Docker Hub account. Remove the release scripts, the IPFS
uploader with @pinata/sdk (axios 0.21) and @crustio/crust-pin, and
public/ipfs, whose pin.json and redirect pointed at another project's IPFS
build from this site.
README: the hosted URL is apps.pezkuwichain.io; drop the IPFS and desktop
chapters and the pull of a Docker image that does not exist. .gitignore
listed '.log' where '*.log' was meant, which let start.log in.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Only the Electron renderer ever set isElectron to true; the web entry passed
false. With that package gone the flag is constant, so remove it from
ApiCtxRoot, the context types and its consumers, together with the
pezkuwi.js.org link base it selected. In-browser account storage and the
WebUSB ledger option now follow the settings alone, as they already did on
the web.
Runtime environment detection (getEnvironment, ExternalWarning) reads the
user agent and is left as is.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
sort-keys has rejected packages/react-api/src/Api.tsx since signedExtensions
was added after signer, so every lint run on main stopped there.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
packages/apps-electron was never released, and electron 28, electron-builder
and their tooling (got, tar, app-builder-lib, builder-util-runtime) were most
of the dependency advisories left in this repo. Drop the package, its scripts,
the build:electron CI step, its i18n namespace and the deps only it used
(concurrently included).
The shipped web bundle changes by one string: "apps-electron" leaves the
i18n namespace list.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
- Added hero landing page with Digital Kurdistan State branding
- Header with Explorer and Go to Home Page buttons
- Background image with Kurdistan map
- Landing page shows when no hash route, app loads on #/explorer
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Fixed nested node_modules chainType mismatch by adding @pezkuwi/extension-dapp
and @pezkuwi/extension-inject to resolutions to ensure consistent bizinikiwi
chainType across all packages.
- Update resolutions to use @pezkuwi/ui-* packages 3.17.2
- Fix webpack alias for @pezkuwi/ui-shared (flat package structure)
- Regenerate yarn.lock with correct dependencies
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Update @pezkuwi/react-identicon to ^3.17.1
- Update @pezkuwi/react-qr to ^3.17.1
- Update @pezkuwi/ui-keyring to ^3.17.1
- Update @pezkuwi/ui-settings to ^3.17.1
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Changed Pezkuwi parachain endpoints from zagros-*-rpc URLs to
pezkuwi-*-rpc URLs to avoid duplicates with Zagros testnet endpoints.
This fixes the endpoint uniqueness test failures.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add custom Pezkuwi networks to SS58 address prefix dropdown since they
are not in the upstream @substrate/ss58-registry package:
- Pezkuwi Relay Chain (prefix: 0)
- Dicle Relay Chain (prefix: 2)
- Zagros Testnet (prefix: 42)
- PezkuwiChain Development (prefix: 42)
Also filter out polkadot/kusama from the list as they are replaced
by pezkuwi/dicle in this project.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Update @pezkuwi/extension-inject to ^0.62.13 with proper /types exports
- Update @pezkuwi/extension-dapp to ^0.62.13
- Update @pezkuwi/extension-compat-metamask to ^0.62.13
- Fix IconTheme type to include 'bizinikiwi' and 'pezkuwi' themes
- Fix endpoint array issues (getTeleports -> direct array references)
- Add type assertions for external package compatibility (acala, moonbeam, parallel)
- Fix subspace.ts dynamic class typing
- Fix conviction type in page-referenda
- Update Pallet type names to Pezpallet prefix across codebase
- Define InjectedExtension types locally for module resolution
- Add styled-components DefaultTheme augmentation
- Add react-copy-to-clipboard type declaration for React 18
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Replace pezkuwi.js.org with pezkuwichain.app domain
- Replace jacogr/pezkuwi-js-apps with pezkuwichain/pezkuwi-apps Docker image
- Fix GH_PAT_BOT secret issue by using GITHUB_TOKEN
- Update GitHub org references from pezkuwi-js to pezkuwichain
- Update issue template to point to docs.pezkuwichain.io
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add ui-settings resolution for v3.16.9
- Add CSS variables for dark/light themes in GlobalStyle
- Set default data-theme attribute on html element
- Simplify theme creation in Root.tsx
- Disable webpack error overlay for cleaner dev experience
- Fix GitHub URLs from pezkuwi-js/apps to pezkuwichain/pezkuwi-apps
- Fix wiki URL from wiki.pezkuwi.network to wiki.pezkuwichain.io
- Fix support/statement URLs to use pezkuwichain.io domain
- Fix chain logos import (use variables instead of strings)
- Update @pezkuwi/networks to ^14.0.9
- Update @pezkuwi/types-known to ^16.5.8
