[PR #7724] [CLOSED] fix: support UUID generation over HTTP in browser clients #114164

Closed
opened 2026-06-05 21:44:53 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/actualbudget/actual/pull/7724
Author: @MrClassicT
Created: 5/5/2026
Status: Closed

Base: masterHead: feat/crypto-randomUUID


📝 Commits (3)

  • ffe276c fix: support UUID generation over HTTP in browser clients
  • 7a39ea4 add release notes
  • 5654501 [autofix.ci] apply automated fixes

📊 Changes

18 files changed (+76 additions, -19 deletions)

View changed files

📝 packages/desktop-client/package.json (+1 -0)
📝 packages/desktop-client/src/accounts/mutations.ts (+2 -1)
📝 packages/desktop-client/src/budget/mutations.ts (+2 -1)
📝 packages/desktop-client/src/components/accounts/Account.tsx (+2 -1)
📝 packages/desktop-client/src/components/rules/RuleEditor.tsx (+10 -9)
📝 packages/desktop-client/src/components/transactions/TransactionsTable.test.tsx (+2 -1)
📝 packages/desktop-client/src/notifications/notificationsSlice.ts (+3 -2)
📝 packages/desktop-client/src/payees/mutations.ts (+2 -1)
📝 packages/desktop-client/src/reports/mutations.ts (+2 -1)
📝 packages/desktop-client/src/tags/mutations.ts (+2 -1)
📝 packages/desktop-client/src/util/ruleUtils.ts (+3 -1)
packages/desktop-client/src/util/uuid.ts (+5 -0)
📝 packages/loot-core/package.json (+1 -0)
📝 packages/loot-core/src/platform/client/connection/index.ts (+3 -0)
📝 packages/loot-core/src/platform/server/connection/index.ts (+3 -0)
packages/loot-core/src/shared/uuid.ts (+25 -0)
upcoming-release-notes/7724.md (+6 -0)
📝 yarn.lock (+2 -0)

📄 Description

Description

Since v26.5.0, we're no longer able to use local ip over http without the app crashing with an error (https://github.com/actualbudget/actual/issues/7715). This PR allows us to utilise a new way of generating uuid's in an insecure context.

Fixes: https://github.com/actualbudget/actual/issues/7715

Testing

I went on the old version, got the error from the issue. Then went and applied my changes locally and went over my pc's ip to the webpage to notice that the issue is no longer there and I can access the app once again.

Checklist

  • Release notes added (see link above)
  • No obvious regressions in affected areas
  • Self-review has been performed - I understand what each change in the code does and why it is needed

Bundle Stats

Bundle Files count Total bundle size % Changed
desktop-client 34 13.93 MB → 13.94 MB (+2.43 kB) +0.02%
loot-core 1 5.27 MB → 5.27 MB (+2.46 kB) +0.05%
api 2 3.89 MB 0%
cli 1 7.97 MB 0%
crdt 1 41.83 kB 0%
View detailed bundle stats

desktop-client

Total

Files count Total bundle size % Changed
34 13.93 MB → 13.94 MB (+2.43 kB) +0.02%
Changeset
File Δ Size
node_modules/uuid/dist/esm-browser/stringify.js 🆕 +739 B 0 B → 739 B
node_modules/uuid/dist/esm-browser/v4.js 🆕 +696 B 0 B → 696 B
node_modules/uuid/dist/esm-browser/rng.js 🆕 +449 B 0 B → 449 B
home/runner/work/actual/actual/packages/loot-core/src/shared/uuid.ts 🆕 +355 B 0 B → 355 B
node_modules/uuid/dist/esm-browser/native.js 🆕 +214 B 0 B → 214 B
src/util/uuid.ts 🆕 +82 B 0 B → 82 B
home/runner/work/actual/actual/packages/loot-core/src/platform/client/connection/index.ts 📈 +22 B (+0.64%) 3.35 kB → 3.37 kB
package.json 📈 +20 B (+0.22%) 8.96 kB → 8.98 kB
src/components/accounts/Account.tsx 📉 -5 B (-0.01%) 44.12 kB → 44.11 kB
src/accounts/mutations.ts 📉 -5 B (-0.04%) 12.61 kB → 12.61 kB
src/budget/mutations.ts 📉 -5 B (-0.04%) 12.37 kB → 12.37 kB
src/reports/mutations.ts 📉 -5 B (-0.06%) 7.6 kB → 7.6 kB
src/components/rules/RuleEditor.tsx 📉 -45 B (-0.09%) 47.02 kB → 46.98 kB
src/tags/mutations.ts 📉 -5 B (-0.18%) 2.76 kB → 2.75 kB
src/payees/mutations.ts 📉 -5 B (-0.23%) 2.1 kB → 2.09 kB
src/notifications/notificationsSlice.ts 📉 -10 B (-0.66%) 1.48 kB → 1.47 kB
src/util/ruleUtils.ts 📉 -5 B (-1.37%) 366 B → 361 B
View detailed bundle breakdown

Added
No assets were added

Removed
No assets were removed

Bigger

Asset File Size % Changed
static/js/extends.js 518.66 kB → 521.14 kB (+2.48 kB) +0.48%
static/js/index.js 1.93 MB → 1.93 MB (+10 B) +0.00%

Smaller

Asset File Size % Changed
static/js/Value.js 4.94 MB → 4.94 MB (-50 B) -0.00%
static/js/ReportRouter.js 1.22 MB → 1.22 MB (-5 B) -0.00%
static/js/bankSyncUtils.js 53.96 kB → 53.96 kB (-5 B) -0.01%

Unchanged

Asset File Size % Changed
static/js/BackgroundImage.js 121.09 kB 0%
static/js/FormulaEditor.js 962.55 kB 0%
static/js/ScheduleEditForm.js 145.68 kB 0%
static/js/TransactionEdit.js 189.54 kB 0%
static/js/TransactionList.js 85.81 kB 0%
static/js/alerts.js 800.08 kB 0%
static/js/ca.js 188.08 kB 0%
static/js/client.js 451.37 kB 0%
static/js/da.js 101.57 kB 0%
static/js/de.js 170.73 kB 0%
static/js/en-GB.js 8.2 kB 0%
static/js/en.js 185.36 kB 0%
static/js/es.js 179.16 kB 0%
static/js/fr.js 179.07 kB 0%
static/js/indexeddb-main-thread-worker-e59fee74.js 13.46 kB 0%
static/js/it.js 165.19 kB 0%
static/js/narrow.js 364.02 kB 0%
static/js/nb-NO.js 148.48 kB 0%
static/js/nl.js 106.65 kB 0%
static/js/pl.js 86.67 kB 0%
static/js/pt-BR.js 190.09 kB 0%
static/js/resize-observer.js 18.06 kB 0%
static/js/th.js 175.02 kB 0%
static/js/theme.js 31.67 kB 0%
static/js/uk.js 207.95 kB 0%
static/js/useFormatList.js 4.96 kB 0%
static/js/wide.js 453 B 0%
static/js/workbox-window.prod.es5.js 7.33 kB 0%
static/js/zh-Hans.js 117.58 kB 0%

loot-core

Total

Files count Total bundle size % Changed
1 5.27 MB → 5.27 MB (+2.46 kB) +0.05%
Changeset
File Δ Size
node_modules/uuid/dist/esm-browser/stringify.js 🆕 +744 B 0 B → 744 B
node_modules/uuid/dist/esm-browser/v4.js 🆕 +711 B 0 B → 711 B
node_modules/uuid/dist/esm-browser/rng.js 🆕 +458 B 0 B → 458 B
home/runner/work/actual/actual/packages/loot-core/src/shared/uuid.ts 🆕 +362 B 0 B → 362 B
node_modules/uuid/dist/esm-browser/native.js 🆕 +216 B 0 B → 216 B
home/runner/work/actual/actual/packages/loot-core/src/platform/server/connection/index.ts 📈 +23 B (+0.73%) 3.06 kB → 3.09 kB
View detailed bundle breakdown

Added

Asset File Size % Changed
kcab.worker.BMiLFWOp.js 0 B → 5.27 MB (+5.27 MB) -

Removed

Asset File Size % Changed
kcab.worker.DiBErB6z.js 5.27 MB → 0 B (-5.27 MB) -100%

Bigger
No assets were bigger

Smaller
No assets were smaller

Unchanged
No assets were unchanged


api

Total

Files count Total bundle size % Changed
2 3.89 MB 0%
View detailed bundle breakdown

Added
No assets were added

Removed
No assets were removed

Bigger
No assets were bigger

Smaller
No assets were smaller

Unchanged

Asset File Size % Changed
index.js 3.89 MB 0%
models.js 0 B 0%

cli

Total

Files count Total bundle size % Changed
1 7.97 MB 0%
View detailed bundle breakdown

Added
No assets were added

Removed
No assets were removed

Bigger
No assets were bigger

Smaller
No assets were smaller

Unchanged

Asset File Size % Changed
cli.js 7.97 MB 0%

crdt

Total

Files count Total bundle size % Changed
1 41.83 kB 0%
View detailed bundle breakdown

Added
No assets were added

Removed
No assets were removed

Bigger
No assets were bigger

Smaller
No assets were smaller

Unchanged

Asset File Size % Changed
index.js 41.83 kB 0%

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/actualbudget/actual/pull/7724 **Author:** [@MrClassicT](https://github.com/MrClassicT) **Created:** 5/5/2026 **Status:** ❌ Closed **Base:** `master` ← **Head:** `feat/crypto-randomUUID` --- ### 📝 Commits (3) - [`ffe276c`](https://github.com/actualbudget/actual/commit/ffe276c7f314944cf6de4761690f55ff73bac960) fix: support UUID generation over HTTP in browser clients - [`7a39ea4`](https://github.com/actualbudget/actual/commit/7a39ea45617b8fe6f0ea6a49363ab7e882b53e23) add release notes - [`5654501`](https://github.com/actualbudget/actual/commit/5654501eae59889194e38589fb0ed714605a498e) [autofix.ci] apply automated fixes ### 📊 Changes **18 files changed** (+76 additions, -19 deletions) <details> <summary>View changed files</summary> 📝 `packages/desktop-client/package.json` (+1 -0) 📝 `packages/desktop-client/src/accounts/mutations.ts` (+2 -1) 📝 `packages/desktop-client/src/budget/mutations.ts` (+2 -1) 📝 `packages/desktop-client/src/components/accounts/Account.tsx` (+2 -1) 📝 `packages/desktop-client/src/components/rules/RuleEditor.tsx` (+10 -9) 📝 `packages/desktop-client/src/components/transactions/TransactionsTable.test.tsx` (+2 -1) 📝 `packages/desktop-client/src/notifications/notificationsSlice.ts` (+3 -2) 📝 `packages/desktop-client/src/payees/mutations.ts` (+2 -1) 📝 `packages/desktop-client/src/reports/mutations.ts` (+2 -1) 📝 `packages/desktop-client/src/tags/mutations.ts` (+2 -1) 📝 `packages/desktop-client/src/util/ruleUtils.ts` (+3 -1) ➕ `packages/desktop-client/src/util/uuid.ts` (+5 -0) 📝 `packages/loot-core/package.json` (+1 -0) 📝 `packages/loot-core/src/platform/client/connection/index.ts` (+3 -0) 📝 `packages/loot-core/src/platform/server/connection/index.ts` (+3 -0) ➕ `packages/loot-core/src/shared/uuid.ts` (+25 -0) ➕ `upcoming-release-notes/7724.md` (+6 -0) 📝 `yarn.lock` (+2 -0) </details> ### 📄 Description <!-- Thank you for submitting a pull request! Make sure to follow the instructions to write release notes for your PR — it should only take a minute or two: https://actualbudget.org/docs/contributing/#writing-good-release-notes. Try running yarn generate:release-notes *before* pushing your PR for an interactive experience. --> ## Description <!-- What does this PR do? Why is it needed? Please give context on the "why?": why do we need this change? What problem is it solving for you?--> Since v26.5.0, we're no longer able to use local ip over http without the app crashing with an error (https://github.com/actualbudget/actual/issues/7715). This PR allows us to utilise a new way of generating uuid's in an insecure context. ## Related issue(s) <!-- e.g. Fixes #123, Relates to #456 --> Fixes: https://github.com/actualbudget/actual/issues/7715 ## Testing <!-- What did you test? How can we reproduce the issue you are fixing or how can we test the feature you built? --> I went on the old version, got the error from the issue. Then went and applied my changes locally and went over my pc's ip to the webpage to notice that the issue is no longer there and I can access the app once again. ## Checklist - [x] Release notes added (see link above) - [x] No obvious regressions in affected areas - [x] Self-review has been performed - I understand what each change in the code does and why it is needed <!--- actual-bot-sections ---> <!--- bundlestats-action-comment key:combined start ---> ### Bundle Stats Bundle | Files count | Total bundle size | % Changed ------ | ----------- | ----------------- | --------- desktop-client | 34 | 13.93 MB → 13.94 MB (+2.43 kB) | +0.02% loot-core | 1 | 5.27 MB → 5.27 MB (+2.46 kB) | +0.05% api | 2 | 3.89 MB | 0% cli | 1 | 7.97 MB | 0% crdt | 1 | 41.83 kB | 0% <details> <summary>View detailed bundle stats</summary> #### desktop-client **Total** Files count | Total bundle size | % Changed ----------- | ----------------- | --------- 34 | 13.93 MB → 13.94 MB (+2.43 kB) | +0.02% <details> <summary>Changeset</summary> File | Δ | Size ---- | - | ---- `node_modules/uuid/dist/esm-browser/stringify.js` | 🆕 +739 B | 0 B → 739 B `node_modules/uuid/dist/esm-browser/v4.js` | 🆕 +696 B | 0 B → 696 B `node_modules/uuid/dist/esm-browser/rng.js` | 🆕 +449 B | 0 B → 449 B `home/runner/work/actual/actual/packages/loot-core/src/shared/uuid.ts` | 🆕 +355 B | 0 B → 355 B `node_modules/uuid/dist/esm-browser/native.js` | 🆕 +214 B | 0 B → 214 B `src/util/uuid.ts` | 🆕 +82 B | 0 B → 82 B `home/runner/work/actual/actual/packages/loot-core/src/platform/client/connection/index.ts` | 📈 +22 B (+0.64%) | 3.35 kB → 3.37 kB `package.json` | 📈 +20 B (+0.22%) | 8.96 kB → 8.98 kB `src/components/accounts/Account.tsx` | 📉 -5 B (-0.01%) | 44.12 kB → 44.11 kB `src/accounts/mutations.ts` | 📉 -5 B (-0.04%) | 12.61 kB → 12.61 kB `src/budget/mutations.ts` | 📉 -5 B (-0.04%) | 12.37 kB → 12.37 kB `src/reports/mutations.ts` | 📉 -5 B (-0.06%) | 7.6 kB → 7.6 kB `src/components/rules/RuleEditor.tsx` | 📉 -45 B (-0.09%) | 47.02 kB → 46.98 kB `src/tags/mutations.ts` | 📉 -5 B (-0.18%) | 2.76 kB → 2.75 kB `src/payees/mutations.ts` | 📉 -5 B (-0.23%) | 2.1 kB → 2.09 kB `src/notifications/notificationsSlice.ts` | 📉 -10 B (-0.66%) | 1.48 kB → 1.47 kB `src/util/ruleUtils.ts` | 📉 -5 B (-1.37%) | 366 B → 361 B </details> <details> <summary>View detailed bundle breakdown</summary> <div> **Added** No assets were added **Removed** No assets were removed **Bigger** Asset | File Size | % Changed ----- | --------- | --------- static/js/extends.js | 518.66 kB → 521.14 kB (+2.48 kB) | +0.48% static/js/index.js | 1.93 MB → 1.93 MB (+10 B) | +0.00% **Smaller** Asset | File Size | % Changed ----- | --------- | --------- static/js/Value.js | 4.94 MB → 4.94 MB (-50 B) | -0.00% static/js/ReportRouter.js | 1.22 MB → 1.22 MB (-5 B) | -0.00% static/js/bankSyncUtils.js | 53.96 kB → 53.96 kB (-5 B) | -0.01% **Unchanged** Asset | File Size | % Changed ----- | --------- | --------- static/js/BackgroundImage.js | 121.09 kB | 0% static/js/FormulaEditor.js | 962.55 kB | 0% static/js/ScheduleEditForm.js | 145.68 kB | 0% static/js/TransactionEdit.js | 189.54 kB | 0% static/js/TransactionList.js | 85.81 kB | 0% static/js/alerts.js | 800.08 kB | 0% static/js/ca.js | 188.08 kB | 0% static/js/client.js | 451.37 kB | 0% static/js/da.js | 101.57 kB | 0% static/js/de.js | 170.73 kB | 0% static/js/en-GB.js | 8.2 kB | 0% static/js/en.js | 185.36 kB | 0% static/js/es.js | 179.16 kB | 0% static/js/fr.js | 179.07 kB | 0% static/js/indexeddb-main-thread-worker-e59fee74.js | 13.46 kB | 0% static/js/it.js | 165.19 kB | 0% static/js/narrow.js | 364.02 kB | 0% static/js/nb-NO.js | 148.48 kB | 0% static/js/nl.js | 106.65 kB | 0% static/js/pl.js | 86.67 kB | 0% static/js/pt-BR.js | 190.09 kB | 0% static/js/resize-observer.js | 18.06 kB | 0% static/js/th.js | 175.02 kB | 0% static/js/theme.js | 31.67 kB | 0% static/js/uk.js | 207.95 kB | 0% static/js/useFormatList.js | 4.96 kB | 0% static/js/wide.js | 453 B | 0% static/js/workbox-window.prod.es5.js | 7.33 kB | 0% static/js/zh-Hans.js | 117.58 kB | 0% </div> </details> --- #### loot-core **Total** Files count | Total bundle size | % Changed ----------- | ----------------- | --------- 1 | 5.27 MB → 5.27 MB (+2.46 kB) | +0.05% <details> <summary>Changeset</summary> File | Δ | Size ---- | - | ---- `node_modules/uuid/dist/esm-browser/stringify.js` | 🆕 +744 B | 0 B → 744 B `node_modules/uuid/dist/esm-browser/v4.js` | 🆕 +711 B | 0 B → 711 B `node_modules/uuid/dist/esm-browser/rng.js` | 🆕 +458 B | 0 B → 458 B `home/runner/work/actual/actual/packages/loot-core/src/shared/uuid.ts` | 🆕 +362 B | 0 B → 362 B `node_modules/uuid/dist/esm-browser/native.js` | 🆕 +216 B | 0 B → 216 B `home/runner/work/actual/actual/packages/loot-core/src/platform/server/connection/index.ts` | 📈 +23 B (+0.73%) | 3.06 kB → 3.09 kB </details> <details> <summary>View detailed bundle breakdown</summary> <div> **Added** Asset | File Size | % Changed ----- | --------- | --------- kcab.worker.BMiLFWOp.js | 0 B → 5.27 MB (+5.27 MB) | - **Removed** Asset | File Size | % Changed ----- | --------- | --------- kcab.worker.DiBErB6z.js | 5.27 MB → 0 B (-5.27 MB) | -100% **Bigger** No assets were bigger **Smaller** No assets were smaller **Unchanged** No assets were unchanged </div> </details> --- #### api **Total** Files count | Total bundle size | % Changed ----------- | ----------------- | --------- 2 | 3.89 MB | 0% <details> <summary>View detailed bundle breakdown</summary> <div> **Added** No assets were added **Removed** No assets were removed **Bigger** No assets were bigger **Smaller** No assets were smaller **Unchanged** Asset | File Size | % Changed ----- | --------- | --------- index.js | 3.89 MB | 0% models.js | 0 B | 0% </div> </details> --- #### cli **Total** Files count | Total bundle size | % Changed ----------- | ----------------- | --------- 1 | 7.97 MB | 0% <details> <summary>View detailed bundle breakdown</summary> <div> **Added** No assets were added **Removed** No assets were removed **Bigger** No assets were bigger **Smaller** No assets were smaller **Unchanged** Asset | File Size | % Changed ----- | --------- | --------- cli.js | 7.97 MB | 0% </div> </details> --- #### crdt **Total** Files count | Total bundle size | % Changed ----------- | ----------------- | --------- 1 | 41.83 kB | 0% <details> <summary>View detailed bundle breakdown</summary> <div> **Added** No assets were added **Removed** No assets were removed **Bigger** No assets were bigger **Smaller** No assets were smaller **Unchanged** Asset | File Size | % Changed ----- | --------- | --------- index.js | 41.83 kB | 0% </div> </details> </details> <!--- bundlestats-action-comment key:combined end ---> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-06-05 21:44:54 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/actual#114164