479a2af6c3
Patch the Brotli decoder CVE in bundled Node and yaak-http
...
CVE-2026-111497 is an out-of-bounds write in the Brotli decoder. It
reaches Yaak through the bundled Node (`yaaknode`, used by plugins) and
through the pure-Rust `brotli-decompressor` that yaak-http uses to decode
`br` responses.
- Bump the plugin runtime Node from 24.11.1 to 24.22.2 and update the
vendoring script's SHA256 pins from the signed SHASUMS256.txt.
- Move yaak-http from `brotli = "8"` to `brotli = "9"`, locking brotli
9.1.1 and brotli-decompressor 6.2.0.
- Bump compression-codecs 0.4.43 -> 0.4.45 (as on main) so
async-compression's streaming decoder also uses brotli 9.1.1.
Tauri's pinned git rev still pulls brotli 8.0.1 and brotli-decompressor
5.0.0 for its embedded-asset compression; that needs a Tauri bump.
(cherry picked from commit 39ff1351)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-30 23:56:11 -07:00
8a6e4810fd
Listen on HOST and PORT instead of a bind address ( #666 )
...
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-09-15 13:27:07 -07:00
48889b6550
Add scripts for running Yaak in a browser ( #664 )
...
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-09-15 10:12:53 -07:00
Gregory Schier
5cce23566a
Allow manual worktree setup
2026-08-16 22:32:33 -07:00
Gregory Schier and GitHub
78954e10c8
Fix 23 Dependabot alerts ( #562 )
2026-08-16 10:27:28 -07:00
Gregory Schier
d4a963e216
Pass per-worktree Tauri config to dev runs
2026-08-13 09:35:27 -07:00
Gregory Schier and GitHub
cc05fec59d
Add CEF runtime to Linux builds ( #494 )
2026-07-03 14:22:47 -07:00
13a667a9b1
Add commercial use nudge banners ( #478 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Nguyễn Huỳnh Anh Khoa <113995598+anhkhoakz@users.noreply.github.com >
Co-authored-by: startsevdenis <mail@startsevds.ru >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 10:23:13 -07:00
Gregory Schier and GitHub
09adcda2d9
Add plugin metadata generation ( #485 )
2026-06-29 12:31:49 -07:00
Gregory Schier and GitHub
10559c8f4f
Split codebase ( #455 )
2026-05-07 15:50:10 -07:00
Gregory Schier and Claude Opus 4.6
b4a1c418bb
Run oxfmt across repo, add format script and docs
...
Add .oxfmtignore to skip generated bindings and wasm-pack output.
Add npm format script, update DEVELOPMENT.md for Vite+ toolchain,
and format all non-generated files with oxfmt.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-13 10:15:49 -07:00
Gregory Schier and GitHub
45262edfbd
Migrate to Vite+ unified toolchain ( #428 )
2026-03-13 09:27:56 -07:00
37d0cabb22
fix: preserve drive letter in Windows plugin paths ( #410 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-26 16:23:24 -08:00
Gregory Schier
50c7992b42
Unify plugin bootstrap and prep vendored assets in CLI release
2026-02-22 15:01:34 -08:00
Gregory Schier and GitHub
76ee3fa61b
Flatpak: build from source instead of repackaging debs ( #389 )
2026-02-10 23:05:33 -08:00
Gregory Schier
f2be52bfec
Fix npm audit
2026-01-09 14:23:03 -08:00
Gregory Schier and GitHub
ef80216ca1
Decouple core Yaak logic from Tauri ( #354 )
2026-01-08 20:44:25 -08:00
Gregory Schier
33afafd890
Use unique Tauri identifier per worktree for app data isolation
2026-01-06 15:09:06 -08:00
Gregory Schier and GitHub
1f8fa0f8c3
Separate app DB per Git worktree ( #348 )
2026-01-05 15:35:25 -08:00
Gregory Schier and GitHub
52f7447f85
Support running multiple Yaak instances via git worktrees ( #341 )
2026-01-03 09:31:35 -08:00
Gregory Schier and GitHub
6b9b207e1c
MCP Server Plugin ( #335 )
2025-12-31 08:41:57 -08:00
Gregory Schier
daba21fbca
Couple small fixes for Windows
2025-12-05 10:18:21 -08:00
Gregory Schier
a7574f2e5a
Fix vendor scripts for arm
2025-11-28 08:16:24 -08:00
Gregory Schier
07f4696a2c
Install wasm-pack from cargo for Windows ARM compat
2025-11-28 06:04:48 -08:00
Gregory Schier
8d1b17cac1
Add previewArgs support for template functions and enhance validation logic for form inputs
2025-11-27 12:55:39 -08:00
Gregory Schier and GitHub
2bac610efe
Official 1Password Template Function ( #305 )
2025-11-22 06:08:13 -08:00
Gregory Schier
5465efea84
Don't build in vendor-plugins
2025-11-18 08:53:55 -08:00
Gregory Schier
6df13c452b
Upgrade dependencies
2025-07-14 07:35:37 -07:00
Gregory Schier
6c0f9377cd
Fix plugin builds
2025-07-07 14:17:47 -07:00
Gregory Schier
47722643ee
Add descriptions to plugins
2025-07-06 12:47:13 -07:00
Gregory Schier
1abe01aa5a
Embed migrations into Rust binary
2025-06-07 19:25:36 -07:00
Gregory Schier and GitHub
9d9e83d59f
Remove sqlx for migrations ( #224 )
2025-06-03 14:42:32 -07:00
Gregory Schier
101efdd512
Merge plugins repo into mono
2025-05-29 08:02:24 -07:00
7cba082eb0
Allow building and running on aarch64 Linux ( #206 )
...
Co-authored-by: Haochen Tong <haochentong@bytedance.com >
2025-05-01 08:06:13 -07:00
Gregory Schier and GitHub
252d23bb0e
Support for OAuth 2.0 ( #5 )
2025-01-26 13:32:17 -08:00
Gregory Schier
e1363cf151
Make protoc writable before signing
2024-11-23 06:18:17 -08:00
Gregory Schier
80a7c2a9c7
Try updating protoc
2024-11-22 07:09:59 -08:00
Gregory Schier
f8c3f71cfe
Increase node download timeout
2024-10-02 10:14:51 -07:00
Gregory Schier and GitHub
917adcfb2e
Better plugin development experience ( #118 )
2024-09-29 10:41:07 -07:00
Gregory Schier and GitHub
2be45d6101
Simpler Tauri resource paths ( #112 )
2024-09-25 09:25:51 -07:00
Gregory Schier
574a92f5b7
Only download protoc if necessary
2024-09-24 07:14:15 -07:00
Gregory Schier
5ba11ca788
Bump plugin deps
2024-08-22 11:27:57 -07:00
Gregory Schier
9cdc13b632
Pass render purpose to render
2024-08-22 11:27:55 -07:00
Gregory Schier
5efd0c9c10
Tweak release things
2024-07-29 14:38:57 -07:00
Gregory Schier
3001bafb7f
Update vendor scripts again
2024-07-28 16:04:05 -07:00
Gregory Schier
430599d8b8
Refine vendor scripts
2024-07-28 15:56:48 -07:00
Gregory Schier
307ca480f3
Better NodeJS vendoring
2024-07-26 00:01:21 -07:00
Gregory Schier
2170a04ccc
Unique sidecar names
2024-07-24 07:04:14 -07:00
Gregory Schier
2273bb2df5
Fix NodeJS vendoring on Linux
2024-07-23 20:41:50 -07:00
Gregory Schier
f622f12bee
Fix nodejs vendoring
2024-07-23 15:37:27 -07:00
