passbolt-styleguide 5.12.0-alpha.0 → 5.12.0

package/.devcontainer/Dockerfile

@@ -0,0 +1,15 @@
+FROM mcr.microsoft.com/devcontainers/typescript-node:22
+
+RUN npm install -g @aikidosec/safe-chain \
+ && install -d -o node -g node /home/node/.safe-chain \
+ && su node -c "safe-chain setup-ci"
+COPY --chown=node:node safe-chain-config.json /home/node/.safe-chain/config.json
+COPY safe-chain-shims.sh /etc/profile.d/safe-chain-shims.sh
+RUN chmod 0644 /etc/profile.d/safe-chain-shims.sh \
+ && printf '\n# Force safe-chain shims to front of PATH for non-login shells\n[ -f /etc/profile.d/safe-chain-shims.sh ] && . /etc/profile.d/safe-chain-shims.sh\n' \
+    >> /etc/bash.bashrc
+ENV PATH="/home/node/.safe-chain/shims:${PATH}"
+
+RUN curl -fsSL https://claude.ai/install.sh | bash -s stable \
+    && cp /root/.local/bin/claude /usr/local/bin/claude
+

package/.devcontainer/devcontainer.json

@@ -0,0 +1,38 @@
+// @see: https://containers.dev/implementors/json_reference/#general-properties
+{
+  "name": "[passbolt-styleguide] Devcontainer",
+  "dockerComposeFile": "docker-compose.yml",
+  "service": "devcontainer",
+  "workspaceFolder": "/workspaces/passbolt-styleguide",
+  "features": {
+    "ghcr.io/devcontainers/features/git:1": {}
+  },
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "Anthropic.claude-code",
+        "dbaeumer.vscode-eslint",
+        "esbenp.prettier-vscode",
+        "Orta.vscode-jest"
+      ]
+    },
+    "jetbrains": {
+      "plugins": [
+        "com.anthropic.code.plugin",
+        "com.intellij.reactivestreams",
+        "intellij.prettierJS"
+      ]
+    }
+  },
+  "forwardPorts": [6006],
+  "portsAttributes": {
+    "6006": {
+      "label": "Storybook",
+      "onAutoForward": "notify"
+    }
+  },
+  "remoteUser": "node",
+  "initializeCommand": "mkdir -p ${localEnv:HOME}/.claude/managed-settings && cp \"/Library/Application Support/ClaudeCode/managed-settings.json\" ${localEnv:HOME}/.claude/managed-settings/ 2>/dev/null || true",
+  "postCreateCommand": "npm install && echo 'Dev environment is ready!'",
+  "postStartCommand": "chmod +x .devcontainer/post-start.sh && .devcontainer/post-start.sh"
+}

package/.devcontainer/docker-compose.yml

@@ -0,0 +1,11 @@
+services:
+  devcontainer:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    container_name: passbolt-styleguide-devcontainer
+    volumes:
+      - ..:/workspaces/passbolt-styleguide:cached
+      - ${HOME}/.claude:/home/node/.claude:cached
+      - ${HOME}/.claude/managed-settings:/etc/claude-code:ro
+    command: sleep infinity

package/.devcontainer/post-start.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+set -e
+
+echo "==> Checking Claude mounts..."
+ERRORS=0
+
+if [ ! -d "$HOME/.claude" ]; then
+  echo "ERROR: ~/.claude directory is not mounted"
+  ERRORS=$((ERRORS + 1))
+else
+  echo "OK: ~/.claude directory is mounted"
+fi
+
+if [ "$ERRORS" -gt 0 ]; then
+  echo "WARNING: $ERRORS mount(s) missing. Claude Code may not work correctly."
+fi
+
+echo "==> Updating Claude Code..."
+curl -fsSL https://claude.ai/install.sh | bash -s stable
+claude --version

package/.devcontainer/safe-chain-config.json

@@ -0,0 +1,6 @@
+{
+  "minimumPackageAgeHours": 48,
+  "npm": {
+    "minimumPackageAgeExclusions": ["@passbolt/*", "@aikidosec/*"]
+  }
+}

package/.devcontainer/safe-chain-shims.sh

@@ -0,0 +1,10 @@
+# Force the safe-chain shims dir to the FRONT of PATH on every shell start.
+# VS Code's remote terminal layer can re-prepend nvm / npm-global after the
+# Dockerfile's ENV PATH ran, which would otherwise push the shims behind
+# corepack-managed pnpm/yarn under /usr/local/share/npm-global/bin.
+if [ -d "$HOME/.safe-chain/shims" ]; then
+    _sc_shims="$HOME/.safe-chain/shims"
+    PATH=$(printf ':%s:' "$PATH" | sed -e "s|:$_sc_shims:|:|g" -e 's|^:||' -e 's|:$||')
+    export PATH="$_sc_shims:$PATH"
+    unset _sc_shims
+fi

package/RELEASE_NOTES.md

@@ -1,9 +1,54 @@
-## v5.12.0-alpha.0
+# v5.12.0
+
+## Browser extension
+### Added
+- PB-51015 Add PIN code resource type in resourceTypeSchemasDefinition
+- PB-51016 Handle PIN code in resourceTypeEntity
+- PB-51017 Handle PIN code in resourceTypesCollection
+- PB-51019 PINCODE - 1.5 Create secretDataV5StandalonePinCodeEntity  and add...
+- PB-51020 PINCODE - 1.6 Add pin code to ResourceEditCreateFormEnumerationTypes
+- PB-51023 Update resourceTypesFormEntity to handle the new pin code resource type
+- PB-51046 PINCODE - 3.2 Adapt ExternalResourceEntity to handle the pin code resource type schema
+- PB-51047 PINCODE - 3.3 Adapt ExportResourcesService to handle the mapping of pin code
+- PB-51048 PINCODE - 3.4 Adapt resourcesKdbxImportParser and to map pin code in case it exist to the correct resource types
+- PB-51049 Add PIN code icon to passboltDefaultResourceTypeIcons.data
+- PB-51050 Update DisplayContentTypesAllowedContentTypesAdministration to handle PIN code
+- PB-51051 Add the pin code resource type to DisplayResourceCreationMenu
+- PB-51052 Add PIN code in SelectResourceForm
+- PB-51053 Create the new pin code resource type form
+- PB-51054 Adapt OrchestrateResourceForm to handle the new AddResourcePinCode
+- PB-51055 Create the new DisplayResourceDetailsPinCode to display the pin code into detail
+- PB-51056 PINCODE - 3.5 Adapt resourcesKdbxExporter and to map pin code in case it exist to the correct resource types
+- PB-51073 PINCODE - 2.8 Add pin code into the grid
+- PB-51201 Fix notes-related issues
+- PB-51246 Add pin code to workspace create menu
 
 ### Fixed
-- PINCODE - 1.1 Add the PIN code resource type slug in resourceTypeSchemasDefinition
-- PINCODE - 1.2 Add the new PIN code type into resourceTypeEntity
-- PINCODE - 1.3 Add the new PIN code type into resourceTypesCollection
-- PINCODE - 1.4 Update resourceTypesFormEntity to handle the new pin code resource type
-- PINCODE - 1.5 Create secretDataV5StandalonePinCodeEntity  and add it to secretDataV5DefaultEntity
-- PINCODE - 1.6 Add pin code to ResourceEditCreateFormEnumerationTypes
+- PB-49888 The contents of Resource Creation Progress Dialog always shows Creating Password
+- PB-50166 Fix break vs continue bug in MoveResourcesService batch permission calculation
+- PB-50535 DisplayuserbadgeMenu should display attention required on page served by API if MFA is required
+- PB-50617 Add PingOne redirect URL field
+- PB-50945 Fix expired session when port is disconnected
+- PB-51012 Hide 'set expired' option for already expired resources
+- PB-51018 Tighten fields selectors to avoid false positives
+- PB-51077 Fix typo "susccessfully" to "successfully"
+
+### Security
+- PB-50623 Fix GHSA-2328-f5f3-gj25 (HIGH)
+- PB-50877 Fix undici GHSA-f269-vfmq-vjvj - MEDIUM CVSS3.1
+- PB-50906 Fix svgo GHSA-xpqw-6gx7-v673 - HIGH CVSS3.1
+- PB-50907 Fix flatted GHSA-rf6f-7fwh-wjgh - HIGH CVSS4.0
+- PB-50908 Fix @xmldom/xmldom GHSA-wh4c-j3r5-mjhp - HIGH CVSS3.1
+- PB-50920 Upgrade webpack-cli
+- PB-50921 Upgrade web-ext
+- PB-51060 Fix protocol-buffers-schema GHSA-j452-xhg8-qg39 - MEDIUM CVSS3.1
+- PB-51151 Fix i18next-http-backend GHSA-r5fr-rjxr-66jc - MEDIUM CVSS3.1
+- PB-51152 Fix uuid GHSA-w5hq-g745-h8pq - MEDIUM CVSS3.1
+- PB-51170 Fix @xmldom/xmldom GHSA-2v35-w6hq-6mfw - HIGH CVSS4.0
+- PB-51179 Investigate and/or enforce package cool down mechanism with safe-chain or npm or both
+
+### Maintenance
+- PB-50224 Add devcontainer to bext
+- PB-50301 removed GitLab CI definition as it's been moved to the ci-definitions repo
+- PB-50340 Small upgrade for picomatch (Medium)
+- PB-51086 keep notify expired session tests skipping

package/build/css/help.min.css

@@ -1,7 +1,7 @@
 /**!
  * @name		passbolt-styleguide
- * @version		v5.12.0-alpha.0
- * @date		2026-04-20
+ * @version		v5.12.0
+ * @date		2026-05-06
  * @copyright	Copyright 2023 Passbolt SA
  * @source		https://github.com/passbolt/passbolt_styleguide
  * @license		AGPL-3.0

package/build/css/public.min.css

@@ -1,7 +1,7 @@
 /**!
  * @name		passbolt-styleguide
- * @version		v5.12.0-alpha.0
- * @date		2026-04-20
+ * @version		v5.12.0
+ * @date		2026-05-06
  * @copyright	Copyright 2023 Passbolt SA
  * @source		https://github.com/passbolt/passbolt_styleguide
  * @license		AGPL-3.0

package/build/css/themes/default/api_authentication.min.css

@@ -1,7 +1,7 @@
 /**!
  * @name		passbolt-styleguide
- * @version		v5.12.0-alpha.0
- * @date		2026-04-20
+ * @version		v5.12.0
+ * @date		2026-05-06
  * @copyright	Copyright 2023 Passbolt SA
  * @source		https://github.com/passbolt/passbolt_styleguide
  * @license		AGPL-3.0

package/build/css/themes/default/api_cloud.min.css

@@ -1,7 +1,7 @@
 /**!
  * @name		passbolt-styleguide
- * @version		v5.12.0-alpha.0
- * @date		2026-04-20
+ * @version		v5.12.0
+ * @date		2026-05-06
  * @copyright	Copyright 2023 Passbolt SA
  * @source		https://github.com/passbolt/passbolt_styleguide
  * @license		AGPL-3.0

package/build/css/themes/default/api_main.min.css

@@ -1,7 +1,7 @@
 /**!
  * @name		passbolt-styleguide
- * @version		v5.12.0-alpha.0
- * @date		2026-04-20
+ * @version		v5.12.0
+ * @date		2026-05-06
  * @copyright	Copyright 2023 Passbolt SA
  * @source		https://github.com/passbolt/passbolt_styleguide
  * @license		AGPL-3.0

package/build/css/themes/default/api_reports.min.css

@@ -1,7 +1,7 @@
 /**!
  * @name		passbolt-styleguide
- * @version		v5.12.0-alpha.0
- * @date		2026-04-20
+ * @version		v5.12.0
+ * @date		2026-05-06
  * @copyright	Copyright 2023 Passbolt SA
  * @source		https://github.com/passbolt/passbolt_styleguide
  * @license		AGPL-3.0

package/build/css/themes/default/api_webinstaller.min.css

@@ -1,7 +1,7 @@
 /**!
  * @name		passbolt-styleguide
- * @version		v5.12.0-alpha.0
- * @date		2026-04-20
+ * @version		v5.12.0
+ * @date		2026-05-06
  * @copyright	Copyright 2023 Passbolt SA
  * @source		https://github.com/passbolt/passbolt_styleguide
  * @license		AGPL-3.0