@oneuptime/common 12.0.34 → 13.0.1

package/Types/Permission.ts

@@ -703,12 +703,24 @@ enum Permission {
   EditCephClusterOwnerRule = "EditCephClusterOwnerRule",
   ReadCephClusterOwnerRule = "ReadCephClusterOwnerRule",
 
+  // vCenter (VMware) Owner Rule Permissions
+  CreateVMwareVCenterOwnerRule = "CreateVMwareVCenterOwnerRule",
+  DeleteVMwareVCenterOwnerRule = "DeleteVMwareVCenterOwnerRule",
+  EditVMwareVCenterOwnerRule = "EditVMwareVCenterOwnerRule",
+  ReadVMwareVCenterOwnerRule = "ReadVMwareVCenterOwnerRule",
+
   // Ceph Cluster Label Rule Permissions
   CreateCephClusterLabelRule = "CreateCephClusterLabelRule",
   DeleteCephClusterLabelRule = "DeleteCephClusterLabelRule",
   EditCephClusterLabelRule = "EditCephClusterLabelRule",
   ReadCephClusterLabelRule = "ReadCephClusterLabelRule",
 
+  // vCenter (VMware) Label Rule Permissions
+  CreateVMwareVCenterLabelRule = "CreateVMwareVCenterLabelRule",
+  DeleteVMwareVCenterLabelRule = "DeleteVMwareVCenterLabelRule",
+  EditVMwareVCenterLabelRule = "EditVMwareVCenterLabelRule",
+  ReadVMwareVCenterLabelRule = "ReadVMwareVCenterLabelRule",
+
   // Runbook Owner Rule Permissions
   CreateRunbookOwnerRule = "CreateRunbookOwnerRule",
   DeleteRunbookOwnerRule = "DeleteRunbookOwnerRule",
@@ -1075,6 +1087,10 @@ enum Permission {
   EditCephClusterFeed = "EditCephClusterFeed",
   ReadCephClusterFeed = "ReadCephClusterFeed",
 
+  CreateVMwareVCenterFeed = "CreateVMwareVCenterFeed",
+  EditVMwareVCenterFeed = "EditVMwareVCenterFeed",
+  ReadVMwareVCenterFeed = "ReadVMwareVCenterFeed",
+
   CreatePodmanHostFeed = "CreatePodmanHostFeed",
   EditPodmanHostFeed = "EditPodmanHostFeed",
   ReadPodmanHostFeed = "ReadPodmanHostFeed",
@@ -1507,6 +1523,11 @@ enum Permission {
   EditCephCluster = "EditCephCluster",
   ReadCephCluster = "ReadCephCluster",
 
+  CreateVMwareVCenter = "CreateVMwareVCenter",
+  DeleteVMwareVCenter = "DeleteVMwareVCenter",
+  EditVMwareVCenter = "EditVMwareVCenter",
+  ReadVMwareVCenter = "ReadVMwareVCenter",
+
   CreateProxmoxClusterOwnerTeam = "CreateProxmoxClusterOwnerTeam",
   CreateDockerSwarmClusterOwnerTeam = "CreateDockerSwarmClusterOwnerTeam",
   DeleteProxmoxClusterOwnerTeam = "DeleteProxmoxClusterOwnerTeam",
@@ -1540,11 +1561,21 @@ enum Permission {
   EditCephClusterOwnerTeam = "EditCephClusterOwnerTeam",
   ReadCephClusterOwnerTeam = "ReadCephClusterOwnerTeam",
 
+  CreateVMwareVCenterOwnerTeam = "CreateVMwareVCenterOwnerTeam",
+  DeleteVMwareVCenterOwnerTeam = "DeleteVMwareVCenterOwnerTeam",
+  EditVMwareVCenterOwnerTeam = "EditVMwareVCenterOwnerTeam",
+  ReadVMwareVCenterOwnerTeam = "ReadVMwareVCenterOwnerTeam",
+
   CreateCephClusterOwnerUser = "CreateCephClusterOwnerUser",
   DeleteCephClusterOwnerUser = "DeleteCephClusterOwnerUser",
   EditCephClusterOwnerUser = "EditCephClusterOwnerUser",
   ReadCephClusterOwnerUser = "ReadCephClusterOwnerUser",
 
+  CreateVMwareVCenterOwnerUser = "CreateVMwareVCenterOwnerUser",
+  DeleteVMwareVCenterOwnerUser = "DeleteVMwareVCenterOwnerUser",
+  EditVMwareVCenterOwnerUser = "EditVMwareVCenterOwnerUser",
+  ReadVMwareVCenterOwnerUser = "ReadVMwareVCenterOwnerUser",
+
   CreateHost = "CreateHost",
   DeleteHost = "DeleteHost",
   EditHost = "EditHost",
@@ -3499,6 +3530,37 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      {
+        permission: Permission.CreateVMwareVCenterFeed,
+        title: "Create vCenter Feed",
+        description:
+          "This permission can create the activity feed of a vCenter in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterFeed,
+        title: "Edit vCenter Feed",
+        description:
+          "This permission can edit the activity feed of a vCenter in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterFeed,
+        title: "Read vCenter Feed",
+        description:
+          "This permission can read the activity feed of a vCenter in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       {
         permission: Permission.CreatePodmanHostFeed,
         title: "Create Podman Host Feed",
@@ -9259,6 +9321,43 @@ export class PermissionHelper {
         isRolePermission: false,
         group: PermissionGroup.Telemetry,
       },
+
+      {
+        permission: Permission.CreateVMwareVCenter,
+        title: "Create vCenter",
+        description: "This permission can create vCenter in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenter,
+        title: "Delete vCenter",
+        description: "This permission can delete vCenter of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenter,
+        title: "Edit vCenter",
+        description: "This permission can edit vCenter of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenter,
+        title: "Read vCenter",
+        description: "This permission can read vCenter of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: true,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
     ];
 
     /*
@@ -10316,6 +10415,47 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      {
+        permission: Permission.CreateVMwareVCenterOwnerTeam,
+        title: "Create vCenter Team Owner",
+        description:
+          "This permission can create vCenter Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenterOwnerTeam,
+        title: "Delete vCenter Team Owner",
+        description:
+          "This permission can delete vCenter Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterOwnerTeam,
+        title: "Edit vCenter Team Owner",
+        description:
+          "This permission can edit vCenter Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterOwnerTeam,
+        title: "Read vCenter Team Owner",
+        description:
+          "This permission can read vCenter Team Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       {
         permission: Permission.CreateCephClusterOwnerUser,
         title: "Create Ceph Cluster User Owner",
@@ -10357,6 +10497,47 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      {
+        permission: Permission.CreateVMwareVCenterOwnerUser,
+        title: "Create vCenter User Owner",
+        description:
+          "This permission can create vCenter User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenterOwnerUser,
+        title: "Delete vCenter User Owner",
+        description:
+          "This permission can delete vCenter User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterOwnerUser,
+        title: "Edit vCenter User Owner",
+        description:
+          "This permission can edit vCenter User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterOwnerUser,
+        title: "Read vCenter User Owner",
+        description:
+          "This permission can read vCenter User Owner of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       {
         permission: Permission.CreateDockerHostOwnerTeam,
         title: "Create Docker Host Team Owner",
@@ -12994,6 +13175,48 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      // vCenter (VMware) Owner Rule Permissions
+      {
+        permission: Permission.CreateVMwareVCenterOwnerRule,
+        title: "Create vCenter Owner Rule",
+        description:
+          "This permission can create vCenter Owner Rules in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenterOwnerRule,
+        title: "Delete vCenter Owner Rule",
+        description:
+          "This permission can delete vCenter Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterOwnerRule,
+        title: "Edit vCenter Owner Rule",
+        description:
+          "This permission can edit vCenter Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterOwnerRule,
+        title: "Read vCenter Owner Rule",
+        description:
+          "This permission can read vCenter Owner Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       // Ceph Cluster Label Rule Permissions
       {
         permission: Permission.CreateCephClusterLabelRule,
@@ -13036,6 +13259,48 @@ export class PermissionHelper {
         group: PermissionGroup.Telemetry,
       },
 
+      // vCenter (VMware) Label Rule Permissions
+      {
+        permission: Permission.CreateVMwareVCenterLabelRule,
+        title: "Create vCenter Label Rule",
+        description:
+          "This permission can create vCenter Label Rules in this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.DeleteVMwareVCenterLabelRule,
+        title: "Delete vCenter Label Rule",
+        description:
+          "This permission can delete vCenter Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.EditVMwareVCenterLabelRule,
+        title: "Edit vCenter Label Rule",
+        description:
+          "This permission can edit vCenter Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+      {
+        permission: Permission.ReadVMwareVCenterLabelRule,
+        title: "Read vCenter Label Rule",
+        description:
+          "This permission can read vCenter Label Rules of this project.",
+        isAssignableToTenant: true,
+        isAccessControlPermission: false,
+        isRolePermission: false,
+        group: PermissionGroup.Telemetry,
+      },
+
       // Runbook Owner Rule Permissions
       {
         permission: Permission.CreateRunbookOwnerRule,

package/Types/Probe/RequestFailedDetails.ts

@@ -20,6 +20,13 @@ export enum RequestFailedPhase {
   NetworkError = "Network Error",
   // Certificate error
   CertificateError = "Certificate Error",
+  /*
+   * The probe never opened a socket: it could not turn the target hostname
+   * into an address it is allowed to dial. Covers DNS failures and egress
+   * policy rejections, which are deliberately reported as one phase so a
+   * tenant cannot tell them apart (see EgressGuardException).
+   */
+  TargetResolution = "Target Resolution",
   // Unknown error
   Unknown = "Unknown",
 }

package/Types/Runner/RunnerLiveStatus.ts

@@ -83,7 +83,7 @@ export const getRunnerLiveStatus: GetRunnerLiveStatusFunction = (
 /*
  * The English label for each state, which is also its i18next lookup key.
  *
- * "Connected" and "Disconnected" already had translations in all sixteen
+ * "Connected" and "Disconnected" already had translations in all seventeen
  * Dashboard locale files before any of this — the probe pages have used them
  * for years — so routing every Runner status label through these three
  * constants is what lets the new state reuse them instead of inventing a

package/Types/SecurityEvent/GoogleSecOpsDiagnostics.ts

@@ -0,0 +1,56 @@
+export type GoogleSecOpsRunType = "test" | "poll" | "preview" | "backfill";
+
+export type GoogleSecOpsRunStatus =
+  | "queued"
+  | "running"
+  | "success"
+  | "empty"
+  | "partial"
+  | "failed";
+
+export interface GoogleSecOpsRunOptions {
+  type: GoogleSecOpsRunType;
+  runId?: string | undefined;
+  startTime?: string | undefined;
+  endTime?: string | undefined;
+}
+
+export interface GoogleSecOpsDetectionSample {
+  id: string;
+  ruleName: string;
+  detectionTime?: string | undefined;
+  createdTime?: string | undefined;
+  isAlert?: boolean | undefined;
+}
+
+export interface GoogleSecOpsDiagnosticCheck {
+  name: string;
+  status: "success" | "failed";
+  durationMs: number;
+  message: string;
+}
+
+export interface GoogleSecOpsRunResult {
+  type: GoogleSecOpsRunType;
+  runId?: string | undefined;
+  status: GoogleSecOpsRunStatus;
+  startedAt: string;
+  completedAt: string;
+  durationMs: number;
+  windowStart: string;
+  windowEnd: string;
+  includeNonAlertingDetections: boolean;
+  fetchedCount: number;
+  ingestedCount: number;
+  duplicateCount: number;
+  rejectedCount: number;
+  failedCount: number;
+  complete: boolean;
+  requestCount: number;
+  warnings: Array<string>;
+  samples: Array<GoogleSecOpsDetectionSample>;
+  checks: Array<GoogleSecOpsDiagnosticCheck>;
+  eventTimeStart?: string | undefined;
+  eventTimeEnd?: string | undefined;
+  error?: string | undefined;
+}

package/Types/SerializableObjectDictionary.ts

@@ -8,6 +8,7 @@ import GreaterThanOrEqual from "./BaseDatabase/GreaterThanOrEqual";
 import InBetween from "./BaseDatabase/InBetween";
 import Includes from "./BaseDatabase/Includes";
 import IncludesAll from "./BaseDatabase/IncludesAll";
+import IncludesAnyOfGroups from "./BaseDatabase/IncludesAnyOfGroups";
 import IncludesNone from "./BaseDatabase/IncludesNone";
 import StartsWith from "./BaseDatabase/StartsWith";
 import EndsWith from "./BaseDatabase/EndsWith";
@@ -155,6 +156,9 @@ const SerializableObjectDictionary: Dictionary<any> = {
   get [ObjectType.IncludesAll](): any {
     return IncludesAll;
   },
+  get [ObjectType.IncludesAnyOfGroups](): any {
+    return IncludesAnyOfGroups;
+  },
   get [ObjectType.IncludesNone](): any {
     return IncludesNone;
   },

package/Types/StatusPage/StatusPageLanguage.ts

@@ -31,6 +31,7 @@ export const SUPPORTED_STATUS_PAGE_LANGUAGES: Array<StatusPageLanguage> = [
     englishName: "Chinese (Traditional)",
   },
   { code: "hi", nativeName: "हिन्दी", englishName: "Hindi" },
+  { code: "fa", nativeName: "فارسی", englishName: "Persian" },
 ];
 
 export const SUPPORTED_STATUS_PAGE_LANGUAGE_CODES: Array<string> =

package/Types/Telemetry/EntityType.ts

@@ -38,6 +38,27 @@ enum EntityType {
   ProxmoxNode = "proxmox.node",
   ProxmoxGuest = "proxmox.guest",
   CephCluster = "ceph.cluster",
+  /*
+   * VMware vSphere types are OneUptime-defined (no upstream semconv exists)
+   * and follow the same dotted naming convention. The root identity
+   * attribute `vmware.vcenter.name` is NOT emitted by vSphere: it is stamped
+   * by the OneUptime VMware agent's collector config (a `resource`
+   * processor), names the vCenter Server or standalone ESXi endpoint the
+   * agent connects to, and doubles as the typed VMwareVCenter row's
+   * project-unique `name`. Every other identifying attribute
+   * (`vcenter.datacenter.name`, `vcenter.cluster.name`, `vcenter.host.name`,
+   * `vcenter.vm.id` / `vcenter.vm_template.id`, `vcenter.datastore.name`)
+   * is a resource attribute the OpenTelemetry Collector `vcenter` receiver
+   * emits per vSphere object; each child identity folds the vCenter
+   * identity in so two vCenters with a cluster named "Prod" never collide.
+   * Datacenters and resource pools are inventory rows (VMwareResource) but
+   * deliberately not entities.
+   */
+  VMwareVCenter = "vmware.vcenter",
+  VMwareCluster = "vmware.cluster",
+  VMwareHost = "vmware.host",
+  VMwareVirtualMachine = "vmware.vm",
+  VMwareDatastore = "vmware.datastore",
   /*
    * Docker Swarm types are OneUptime-defined (no upstream semconv
    * exists) but follow the same dotted naming convention. The

package/Types/Telemetry/InventoryLiveness.ts

@@ -0,0 +1,56 @@
+import EntitySource from "./EntitySource";
+
+export enum InventoryLiveness {
+  Live = "live",
+  Recent = "recent",
+  Stale = "stale",
+  Never = "never",
+  NotTracked = "not-tracked",
+}
+
+export const INVENTORY_LIVE_WINDOW_MINUTES: number = 30;
+export const INVENTORY_STALE_AFTER_MINUTES: number = 24 * 60;
+
+export interface InventoryLivenessInput {
+  source?: string | undefined;
+  lastSeenAt?: Date | string | undefined | null;
+  now: Date;
+}
+
+/**
+ * A last-seen timestamp is a heartbeat only for discovered items. Mirrored
+ * and manual items retain their creation timestamp, so aging those would
+ * incorrectly classify healthy infrastructure as stale.
+ */
+export const getInventoryLivenessState: (
+  input: InventoryLivenessInput,
+) => InventoryLiveness = (input: InventoryLivenessInput): InventoryLiveness => {
+  if (input.source !== EntitySource.Discovered) {
+    return InventoryLiveness.NotTracked;
+  }
+
+  if (!input.lastSeenAt) {
+    return InventoryLiveness.Never;
+  }
+
+  const lastSeenAt: Date = new Date(input.lastSeenAt);
+
+  if (Number.isNaN(lastSeenAt.getTime())) {
+    return InventoryLiveness.Never;
+  }
+
+  const minutesSinceLastSeen: number = Math.max(
+    0,
+    Math.floor((input.now.getTime() - lastSeenAt.getTime()) / (60 * 1000)),
+  );
+
+  if (minutesSinceLastSeen <= INVENTORY_LIVE_WINDOW_MINUTES) {
+    return InventoryLiveness.Live;
+  }
+
+  if (minutesSinceLastSeen <= INVENTORY_STALE_AFTER_MINUTES) {
+    return InventoryLiveness.Recent;
+  }
+
+  return InventoryLiveness.Stale;
+};

package/Types/Telemetry/ServiceType.ts

@@ -20,6 +20,7 @@ enum ServiceType {
   ProxmoxCluster = "ProxmoxCluster",
   CephCluster = "CephCluster",
   DockerSwarmCluster = "DockerSwarmCluster",
+  VMwareVCenter = "VMwareVCenter",
   IoTDevice = "IoTDevice",
   ServerlessFunction = "ServerlessFunction",
   CloudResource = "CloudResource",

package/Typings/Index.d.ts

@@ -13,3 +13,66 @@ declare module "*.gif";
  * supplies the behaviour at runtime.
  */
 declare module "i18next-browser-languagedetector";
+
+/*
+ * Billing's Common tests import Dashboard pages and provide virtual Stripe
+ * mocks. Stripe's browser packages are installed only by Dashboard, so the
+ * Common-only CI job needs declarations for the browser API those tests use.
+ * Keep these contracts narrow rather than declaring the packages as `any`.
+ * Dashboard's tsconfig does not include this file: production compilation
+ * continues to check against the packages' complete upstream declarations.
+ */
+declare module "@stripe/stripe-js" {
+  export interface StripeError {
+    message?: string;
+  }
+
+  export type StripeElements = Record<string, unknown>;
+
+  export interface PaymentIntentResult {
+    error?: StripeError;
+  }
+
+  export interface Stripe {
+    confirmSetup(options: {
+      elements: StripeElements;
+      confirmParams: { return_url: string };
+    }): Promise<{ error?: StripeError }>;
+    confirmCardPayment(
+      clientSecret: string,
+      options: { payment_method: string },
+    ): Promise<PaymentIntentResult>;
+  }
+
+  export interface StripeElementsOptions {
+    clientSecret?: string;
+    appearance?: {
+      theme?: "stripe" | "night" | "flat";
+      variables?: Record<string, string>;
+    };
+  }
+
+  export function loadStripe(publishableKey: string): Promise<Stripe | null>;
+}
+
+declare module "@stripe/react-stripe-js" {
+  import {
+    Stripe,
+    StripeElements,
+    StripeElementsOptions,
+  } from "@stripe/stripe-js";
+  import { FunctionComponent, ReactNode } from "react";
+
+  export const Elements: FunctionComponent<{
+    stripe: Stripe | PromiseLike<Stripe | null> | null;
+    options?: StripeElementsOptions;
+    children?: ReactNode;
+  }>;
+  export const PaymentElement: FunctionComponent;
+  export function useStripe(): Stripe | null;
+  export function useElements(): StripeElements | null;
+}
+
+declare module "@stripe/stripe-js/pure" {
+  export { loadStripe } from "@stripe/stripe-js";
+}

package/UI/Components/Breadcrumbs/Breadcrumbs.tsx

@@ -16,8 +16,8 @@ const Breadcrumbs: FunctionComponent<ComponentProps> = ({
 }: ComponentProps): ReactElement => {
   const { translateString } = useTranslateValue();
   return (
-    <nav className="flex hidden md:block" aria-label="Breadcrumb">
-      <ol role="list" className="flex items-center space-x-1">
+    <nav className="block" aria-label="Breadcrumb">
+      <ol role="list" className="flex flex-wrap items-center gap-x-1 gap-y-2">
         {links &&
           links.length > 0 &&
           links.map((link: Link, i: number) => {

package/UI/Components/CSVFileUpload/CSVFileUpload.tsx

@@ -93,7 +93,14 @@ const CSVFileUpload: FunctionComponent<ComponentProps> = (
   const [error, setError] = useState<string>("");
   const [parsedRows, setParsedRows] = useState<Array<CSVRow>>([]);
   const [fileName, setFileName] = useState<string>("");
-  const fileInputRef: React.RefObject<HTMLInputElement | null> =
+  /*
+   * The element type goes in T on its own: RefObject<T> already declares
+   * `current` as `T | null`, and RefObject<HTMLInputElement | null> is a
+   * structurally identical but non-assignable type, rejected on the `ref`
+   * prop below because RefObject is covariant in T. That mismatch is what
+   * used to need a cast there.
+   */
+  const fileInputRef: React.RefObject<HTMLInputElement> =
     useRef<HTMLInputElement>(null);
 
   const downloadTemplate: DownloadTemplateFunction = (): void => {
@@ -270,7 +277,7 @@ const CSVFileUpload: FunctionComponent<ComponentProps> = (
           </div>
           <p className="text-xs text-gray-500">CSV files only</p>
           <input
-            ref={fileInputRef as React.RefObject<HTMLInputElement>}
+            ref={fileInputRef}
             type="file"
             accept=".csv"
             className="sr-only"