dependabot[bot]
c58deb6b55
build(deps): bump tauri-apps/tauri-action from 0.5.25 to 0.6.2 ( #6257 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30 22:36:15 +01:00
Anthony Stirling
324a7cd25e
decouple appimage ( #6281 )
2026-04-30 21:36:33 +01:00
Anthony Stirling
d28ad89f64
gha cleanups ( #6275 )
...
# Description of Changes
Adds all pre commit PR checks under single file with job validator to
have a true "required" run step "all-checks-passed" check
Moves all GHAs into workflow helper function calls
Note if: always() overrides the default skip-on-needs-failure, "Needs"
is added to ensure the validation runs at end of all other tasks
---
## Checklist
### General
- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md )
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md )
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md )
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings
### Documentation
- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/ )
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags )
(for new translation tags only)
### Translations (if applicable)
- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md )
### UI Changes (if applicable)
- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)
### Testing (if applicable)
- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing )
for more details.
2026-04-30 17:08:34 +01:00
Anthony Stirling
d8c1ffa8ef
fix stubs playwright ( #6274 )
2026-04-30 12:37:15 +01:00
stirlingbot[bot]
b552feaf28
Update Backend 3rd Party Licenses ( #6264 )
...
Co-authored-by: stirlingbot[bot] <195170888+stirlingbot[bot]@users.noreply.github.com>
2026-04-30 10:19:08 +01:00
Peter Dave Hello
890cf16f74
Adjust zh-TW translation ignore list ( #6062 )
2026-04-29 10:55:51 +01:00
dependabot[bot]
493757bf41
build(deps): bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre in /app/common ( #6260 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 21:42:20 +01:00
dependabot[bot]
99b9b60f50
build(deps-dev): bump @stylistic/stylelint-plugin from 4.0.0 to 5.1.0 in /devTools ( #6177 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 21:42:02 +01:00
dependabot[bot]
85aa722f37
build(deps): bump the npm_and_yarn group across 2 directories with 8 updates ( #6266 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 21:41:45 +01:00
dependabot[bot]
1c42ce7087
build(deps): bump com.github.junrar:junrar from 7.5.8 to 7.5.10 in /app/common ( #6261 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 18:45:49 +01:00
dependabot[bot]
5bd62eeb5c
build(deps): bump github/codeql-action from 4.32.6 to 4.35.2 ( #6256 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 18:45:38 +01:00
dependabot[bot]
87e5b84324
build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 ( #6254 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 18:45:24 +01:00
dependabot[bot]
568c6da165
build(deps-dev): bump stylelint from 17.4.0 to 17.8.0 in /devTools ( #6253 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 18:45:09 +01:00
Anthony Stirling
c818db1042
ci(tauri): skip Linux GPG signing when secret is missing ( #6263 )
2026-04-28 18:43:52 +01:00
dependabot[bot] and Anthony Stirling
cd3a59f077
build(deps): bump com.drewnoakes:metadata-extractor from 2.19.0 to 2.20.0 ( #6184 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <[email protected] >
2026-04-28 17:40:22 +01:00
dependabot[bot] and Anthony Stirling
05e2ce45d4
build(deps): bump com.drewnoakes:metadata-extractor from 2.19.0 to 2.20.0 in /app/common ( #6193 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <[email protected] >
2026-04-28 17:40:04 +01:00
stirlingbot[bot]
94cf25b319
Update Backend 3rd Party Licenses ( #6243 )
...
Co-authored-by: stirlingbot[bot] <195170888+stirlingbot[bot]@users.noreply.github.com>
2026-04-28 17:38:00 +01:00
dependabot[bot]
4149276b01
build(deps): bump actions/dependency-review-action from 4.8.2 to 4.9.0 ( #6230 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 17:37:43 +01:00
Reece Browne and EthanHealy01
a26b15b1fe
Lazy load open cv ( #6236 )
...
Co-authored-by: EthanHealy01 <[email protected] >
2026-04-28 17:36:34 +01:00
ConnorYoh
4e4918b91e
fix(workflow): stop leaking peer share tokens from participant session API ( #6241 )
2026-04-28 17:36:20 +01:00
Anthony Stirling
b966e771a4
add dependabot 7 day cooldown ( #6242 )
2026-04-28 17:36:09 +01:00
dependabot[bot]
376e49a947
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 ( #6229 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 17:35:56 +01:00
dependabot[bot]
128697958b
build(deps): bump org.springframework.boot from 4.0.5 to 4.0.6 ( #6225 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 17:35:32 +01:00
dependabot[bot]
60c39c6f6e
build(deps): bump actions/stale from 10.1.1 to 10.2.0 ( #6227 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 17:35:17 +01:00
dependabot[bot]
c3c5b08ce6
build(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.1 ( #6226 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 17:35:04 +01:00
James Brunton
49f24fa7a9
Have Task choose free ports for dev servers ( #6145 )
2026-04-28 17:26:04 +01:00
Anthony Stirling
12a00fe9c5
bug fixes for some desktop tools ( #6246 )
2026-04-28 17:24:56 +01:00
James Brunton
3c09b7f736
Guard PR commenting on pull requests ( #6250 )
...
# Description of Changes
Attempt 2 at #6249
2026-04-28 15:17:42 +01:00
James Brunton
5116e6ec43
Set CI to run the same in the merge queue as it does in CI ( #6249 )
2026-04-28 14:13:55 +01:00
Anthony Stirling
8daee7303d
playwright ( #6025 )
2026-04-27 11:35:50 +01:00
Philip H.
688c3e1e58
Update: AUR PKGBUILDs desktop and server ( #6220 )
2026-04-25 22:20:05 +01:00
albanobattistella
df5d0a9aa8
Fix translation ( #6224 )
2026-04-25 22:19:53 +01:00
James Brunton
1e3da14081
Change frontend .env files to be committed and have .env.*.local overrides ( #6207 )
2026-04-25 13:09:59 +01:00
Anthony Stirling
276bbd635c
release notes fix for engine ( #6219 )
2026-04-25 13:09:48 +01:00
Ludy
8cd6377131
build: Add Sync app version to AUR PKGBUILD files ( #6222 )
2026-04-25 13:09:25 +01:00
Ludy
9890d6a7de
fix: skip translation key extraction for files without i18n usage ( #6221 )
2026-04-25 13:08:24 +01:00
stirlingbot[bot] and Ludy
5cfb77314f
Update Backend 3rd Party Licenses ( #5932 )
...
Co-authored-by: stirlingbot[bot] <195170888+stirlingbot[bot]@users.noreply.github.com>
Co-authored-by: Ludy <[email protected] >
2026-04-24 21:34:58 +01:00
stirlingbot[bot]
6ebd85defb
🌐 Sync Translations + Update README Progress Table ( #5716 )
...
Co-authored-by: stirlingbot[bot] <195170888+stirlingbot[bot]@users.noreply.github.com>
2026-04-24 21:30:37 +01:00
dependabot[bot] and Anthony Stirling
c16dc1782d
build(deps): bump dorny/test-reporter from 2.5.0 to 3.0.0 ( #5973 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <[email protected] >
2026-04-24 21:24:21 +01:00
dependabot[bot]
87464aca53
build(deps): bump com.github.jk1.dependency-license-report from 3.1.1 to 3.1.2 ( #6188 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 21:23:30 +01:00
dependabot[bot]
2ade011106
build(deps): bump com.bucket4j:bucket4j_jdk17-core from 8.17.0 to 8.18.0 ( #6189 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 21:21:02 +01:00
dependabot[bot]
ac0ef7056e
build(deps): bump astral-sh/setup-uv from 4.2.0 to 8.1.0 ( #6181 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 19:26:23 +01:00
dependabot[bot]
7cb0f928bc
build(deps): bump docker/login-action from 3.7.0 to 4.1.0 ( #6072 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 19:26:02 +01:00
dependabot[bot]
42978b9ad6
build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 ( #6021 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 19:25:41 +01:00
dependabot[bot]
c5cdde0b58
build(deps): bump docker/build-push-action from 6.18.0 to 7.1.0 ( #6192 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 19:25:21 +01:00
Anthony Stirling
9f6d7750f2
translation additions ( #6208 )
2026-04-24 14:02:13 +01:00
Anthony Stirling
7e185bdf8f
fix AUR, publish desktop not server for now ( #6204 )
...
# Description of Changes
<!--
Please provide a summary of the changes, including:
- What was changed
- Why the change was made
- Any challenges encountered
Closes #(issue_number)
-->
---
## Checklist
### General
- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md )
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md )
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md )
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings
### Documentation
- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/ )
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags )
(for new translation tags only)
### Translations (if applicable)
- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md )
### UI Changes (if applicable)
- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)
### Testing (if applicable)
- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing )
for more details.
2026-04-24 10:45:58 +01:00
EthanHealy01
7c42d8018a
make clicking on comments open the comments sidebar and more ( #6174 )
...
make clicking on comments open the comments sidebar and add a button to
create comments into the empty state of the comments sidebar
<img width="2056" height="1081" alt="Screenshot 2026-04-23 at 12 39
50 PM"
src="https://github.com/user-attachments/assets/6f15484d-d04f-4900-92c6-b2cc397d6d08 "
/>
<img width="627" height="396" alt="Screenshot 2026-04-23 at 12 40 06 PM"
src="https://github.com/user-attachments/assets/509e5526-0082-4fc6-a98f-829bb4c1baf2 "
/>
2026-04-23 17:22:47 +01:00
Anthony Stirling
177c776658
Migrate stream to resource for stability ( #6160 )
2026-04-23 15:56:31 +01:00
Anthony Stirling and EthanHealy01
c294e9b2cb
fix file sharing bug ( #6161 )
...
# Description of Changes
Fixes share-link navigation for SSO users. Reported on v2.9.2 with
`SSOAutoLogin: true`: clicking a `/share/<token>` link in an email
redirected the user to the home page after SSO instead of the shared
file.
## Root cause
Three compounding issues had to be fixed together; the first was the
initial symptom but the other two only surfaced during live
verification.
1. **Spring Security blocked `/share/<token>` for unauthenticated
users.** The route wasn't in `RequestUriUtils.isPublicAuthEndpoint`, so
the server 302'd straight to `/login` before React could load
`ShareLinkPage`. The share URL was lost because `NullRequestCache` is
configured and never persisted the original destination.
2. **`httpErrorHandler` full-page-redirected to `/login?from=<path>` on
any unhandled 401** (fired by `LicenseContext`, `AppConfig`, etc. during
normal ShareLinkPage mount). That *did* preserve the return path — but
**Spring Security strips query strings from `/login`** (302 to bare
`/login`), so `?from=` never reached React. Confirmed via `curl -i
http://localhost:8080/login?from=xyz ` → `Location: /login`.
3. **`AuthCallback.tsx` unconditionally `navigate("/")`** after the
SAML/OAuth round-trip, discarding any intended destination.
## Fix
**Backend** — make `/share/<token>` a public SPA bootstrap, data APIs
stay protected:
- `RequestUriUtils.isPublicAuthEndpoint` — permits `^/share/[^/]+/?$`
(tight regex, single token segment only; `/share/<token>/anything` stays
protected).
- `ReactRoutingController` — dedicated `@GetMapping("/share/{token}")`
mirroring `/auth/callback`.
- `/api/v1/storage/share-links/**` remains behind Spring Security with
its existing `canAccessShareLink` check.
**Frontend** — persist the return path across full-page redirects via
`sessionStorage` (same-origin, survives the SSO round-trip):
- `httpErrorHandler.ts` — stashes current pathname to
`stirling_post_login_path` before the 401 → `/login` redirect.
- `springAuthClient.ts` — new `isSafePostLoginRedirect` /
`setPostLoginRedirectPath` / `consumePostLoginRedirectPath` helpers
(rejects protocol-relative URLs and auth-plumbing paths to guard against
open-redirect abuse).
- `Login.tsx` — on explicit user sign-in, read path from
`location.state` or `?from=` query and stash it; don't clobber an
already-stashed value.
- `AuthCallback.tsx` — consume the stashed path (single-use) and
`navigate(target)` instead of always `/`.
---
## Checklist
### General
- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md )
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md )
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md )
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings
### Documentation
- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/ )
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags )
(for new translation tags only)
### Translations (if applicable)
- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md )
### UI Changes (if applicable)
- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)
### Testing (if applicable)
- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing )
for more details.
---------
Co-authored-by: EthanHealy01 <[email protected] >
2026-04-23 14:52:25 +01:00