dependabot[bot]
19e9068b2d
chore(deps): bump vue from 3.5.35 to 3.5.41
...
Bumps [vue](https://github.com/vuejs/core ) from 3.5.35 to 3.5.41.
- [Release notes](https://github.com/vuejs/core/releases )
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md )
- [Commits](https://github.com/vuejs/core/compare/v3.5.35...v3.5.41 )
---
updated-dependencies:
- dependency-name: vue
dependency-version: 3.5.40
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-12 06:55:01 +00:00
Ewald ALOEBOETOE
83e2e76d93
Merge pull request #198 from MajoorWaldi/dependabot/npm_and_yarn/knip-6.31.0
...
chore(deps-dev): bump knip from 6.29.0 to 6.31.0
2026-08-12 08:54:25 +02:00
Ewald ALOEBOETOE
bbdcdab4a8
Merge pull request #199 from MajoorWaldi/dependabot/npm_and_yarn/types/node-26.1.2
...
chore(deps-dev): bump @types/node from 26.1.1 to 26.1.2
2026-08-12 08:52:57 +02:00
Ewald ALOEBOETOE
9bd900ffb2
Merge pull request #200 from MajoorWaldi/dependabot/npm_and_yarn/tanstack/vue-virtual-3.13.35
...
chore(deps): bump @tanstack/vue-virtual from 3.13.34 to 3.13.35
2026-08-12 08:52:47 +02:00
Ewald ALOEBOETOE
93f7af414a
Merge pull request #195 from MajoorWaldi/copilot/fix-failing-github-actions-job-test-3-13
...
refactor: reduce cyclomatic complexity of handle_output_scope below CC=25 limit
2026-08-12 08:51:40 +02:00
dependabot[bot]
13849fd5c6
chore(deps): bump @tanstack/vue-virtual from 3.13.34 to 3.13.35
...
Bumps [@tanstack/vue-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/vue-virtual ) from 3.13.34 to 3.13.35.
- [Release notes](https://github.com/TanStack/virtual/releases )
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/vue-virtual/CHANGELOG.md )
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/vue-virtual@3.13.35/packages/vue-virtual )
---
updated-dependencies:
- dependency-name: "@tanstack/vue-virtual"
dependency-version: 3.13.35
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-07 07:34:27 +00:00
dependabot[bot]
098f7248cd
chore(deps-dev): bump @types/node from 26.1.1 to 26.1.2
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 26.1.1 to 26.1.2.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.1.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-07 07:34:20 +00:00
dependabot[bot]
4c8c123afd
chore(deps-dev): bump knip from 6.29.0 to 6.31.0
...
Bumps [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip ) from 6.29.0 to 6.31.0.
- [Release notes](https://github.com/webpro-nl/knip/releases )
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.31.0/packages/knip )
---
updated-dependencies:
- dependency-name: knip
dependency-version: 6.31.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-07 07:34:14 +00:00
copilot-swe-agent[bot] and MajoorWaldi
45cbab07bf
refactor: add type annotation for out_res in _maybe_fallback_to_filesystem
...
Co-authored-by: MajoorWaldi <129623145+MajoorWaldi@users.noreply.github.com >
2026-08-06 19:09:52 +00:00
copilot-swe-agent[bot] and MajoorWaldi
acf6195959
refactor: extract _maybe_fallback_to_filesystem to reduce CC in handle_output_scope
...
Co-authored-by: MajoorWaldi <129623145+MajoorWaldi@users.noreply.github.com >
2026-08-06 19:08:55 +00:00
copilot-swe-agent[bot]
26acc4d929
Initial plan
2026-08-06 18:55:18 +00:00
Ewald
bf0fe4b9af
Hide unavailable file info and update frontend build
2026-08-06 20:22:59 +02:00
MajoorWaldi
30b2d394b9
Harden bundled Pinia state merging
2026-08-06 19:12:07 +02:00
MajoorWaldi
e7a2f8b88d
Improve save placeholders and floating viewer
2026-08-06 19:08:06 +02:00
Ewald ALOEBOETOE
a19948ea2d
Merge pull request #192 from MajoorWaldi/dependabot/npm_and_yarn/vite-8.1.5
...
chore(deps-dev): bump vite from 8.1.4 to 8.1.5
2026-08-06 18:30:31 +02:00
Ewald ALOEBOETOE
23c9113e9f
Merge branch 'main' into dependabot/npm_and_yarn/vite-8.1.5
2026-08-06 18:28:32 +02:00
Ewald ALOEBOETOE
1ac0aa6f55
Merge pull request #190 from MajoorWaldi/dependabot/npm_and_yarn/eslint-10.8.0
...
chore(deps-dev): bump eslint from 10.7.0 to 10.8.0
2026-08-06 18:26:21 +02:00
Ewald ALOEBOETOE
ef218854b1
Merge pull request #189 from MajoorWaldi/dependabot/npm_and_yarn/knip-6.29.0
...
chore(deps-dev): bump knip from 6.25.0 to 6.29.0
2026-08-06 18:25:54 +02:00
Ewald ALOEBOETOE
38bfb2a431
Merge pull request #191 from MajoorWaldi/dependabot/npm_and_yarn/vitejs/plugin-vue-6.0.8
...
chore(deps-dev): bump @vitejs/plugin-vue from 6.0.7 to 6.0.8
2026-08-06 18:25:24 +02:00
Ewald ALOEBOETOE
14fb5090c6
Merge pull request #193 from MajoorWaldi/dependabot/npm_and_yarn/tanstack/vue-virtual-3.13.34
...
chore(deps): bump @tanstack/vue-virtual from 3.13.31 to 3.13.34
2026-08-06 18:25:05 +02:00
MajoorWaldi
6b34e87098
feat: opt-in folder browsing default + browse-mode index kickoff
...
- Default 'Show folders in Input / Output panels' (browser.showFolders) to
disabled: fresh installs keep the classic flat grid until the user opts in
(backend settings service, frontend defaults, settings UI toggle).
- Gate the root-level 'Create folder here' context menu on the setting.
- Kick off a throttled incremental background scan when browse mode serves
the first page, so unindexed files get indexed/enriched and asset status
dots resolve instead of staying pending (blue).
- Document the feature and setting in README, CHANGELOG, and
docs/SETTINGS_CONFIGURATION.md.
2026-08-06 18:07:26 +02:00
Ewald ALOEBOETOE
998bd7e6f3
Merge pull request #188 from bsawang/pr-folder-browse
...
feat: folder browsing, drag-move, parent navigation & subfolder create for Input/Output scopes
2026-08-06 17:58:27 +02:00
dependabot[bot]
fc61d8c583
chore(deps): bump @tanstack/vue-virtual from 3.13.31 to 3.13.34
...
Bumps [@tanstack/vue-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/vue-virtual ) from 3.13.31 to 3.13.34.
- [Release notes](https://github.com/TanStack/virtual/releases )
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/vue-virtual/CHANGELOG.md )
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/vue-virtual@3.13.34/packages/vue-virtual )
---
updated-dependencies:
- dependency-name: "@tanstack/vue-virtual"
dependency-version: 3.13.34
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-31 07:34:14 +00:00
dependabot[bot]
609bbcc90f
chore(deps-dev): bump vite from 8.1.4 to 8.1.5
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 8.1.4 to 8.1.5.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 8.1.5
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-31 07:34:07 +00:00
dependabot[bot]
54bbd5266d
chore(deps-dev): bump @vitejs/plugin-vue from 6.0.7 to 6.0.8
...
Bumps [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue ) from 6.0.7 to 6.0.8.
- [Release notes](https://github.com/vitejs/vite-plugin-vue/releases )
- [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.8/packages/plugin-vue )
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-vue"
dependency-version: 6.0.8
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-31 07:33:58 +00:00
dependabot[bot]
31b2ba4007
chore(deps-dev): bump eslint from 10.7.0 to 10.8.0
...
Bumps [eslint](https://github.com/eslint/eslint ) from 10.7.0 to 10.8.0.
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v10.7.0...v10.8.0 )
---
updated-dependencies:
- dependency-name: eslint
dependency-version: 10.8.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-31 07:33:48 +00:00
dependabot[bot]
c42b2b5579
chore(deps-dev): bump knip from 6.25.0 to 6.29.0
...
Bumps [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip ) from 6.25.0 to 6.29.0.
- [Release notes](https://github.com/webpro-nl/knip/releases )
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.29.0/packages/knip )
---
updated-dependencies:
- dependency-name: knip
dependency-version: 6.29.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-31 07:33:41 +00:00
bsawang
51cdcce4b6
fix: sort folders by mtime in browse mode to respect sort order
...
The _build_browse_response function now sorts folder entries by
modification time according to the requested sort_key (mtime_desc /
mtime_asc). The parent-navigation '..' entry is kept at the top
regardless of sort.
2026-07-29 15:14:53 +08:00
bsawang
957960005d
fix: npm audit vulnerabilities via postcss upgrade and brace-expansion overrides
...
- npm audit fix upgrades postcss to a non-vulnerable version.
- Add package.json overrides for brace-expansion@5.0.8 to resolve
nested dependency chain (js-beautify -> glob -> minimatch ->
brace-expansion) without forced breaking changes.
2026-07-29 15:01:41 +08:00
bsawang
2c585f5908
fix: mypy type error in _list_filesystem_folders and vitest drag effectAllowed
...
- Fix return type mismatch in filesystem.py:1501 by converting error
Result to the expected generic type before returning.
- Update drag_out.vitest.ts to expect 'copyMove' instead of 'copy'
to match the DragOut.ts change for folder drag support.
2026-07-29 15:01:41 +08:00
bsawang
1d974209d5
fix: add test adapters for folder-browsing browse mode and missing 'mode' field
...
- Add _Settings mock returning show_folders=False to 3 DB-index tests
so they bypass the new browse mode and exercise the index path.
- Add mode='filesystem' to _build_browse_response payload for
consistency with the filesystem-fallback path.
2026-07-29 14:09:09 +08:00
bsawang
10a6fd6fa3
feat: folder browsing, drag-move, parent navigation & subfolder create
2026-07-29 13:35:38 +08:00
Ewald ALOEBOETOE
07071e7d76
Merge pull request #186 from MajoorWaldi/agent/fix-viewer-paths-and-write-access-docs
...
fix(security): harden workflow path containment and bump brace-expansion
2026-07-24 16:20:00 +02:00
Ewald
17db2fe9d7
fix(security): harden workflow path containment and bump brace-expansion
...
- Resolve CodeQL py/path-injection alerts: enforce lexical containment
(normpath + prefix check) before any filesystem access in
list_workflow_versions, diff_workflow_versions,
list_workflow_thumbnail_candidates and _resolve_path_under_roots,
with post-resolve symlink re-validation. Also removes a file
existence oracle for paths outside the allowed roots.
- npm audit fix: brace-expansion DoS (GHSA-3jxr-9vmj-r5cp, dev-only).
2026-07-24 16:16:50 +02:00
Ewald ALOEBOETOE
fe9bb8300e
Merge pull request #182 from MajoorWaldi/dependabot/npm_and_yarn/prettier-3.9.6
...
chore(deps-dev): bump prettier from 3.9.4 to 3.9.6
2026-07-24 15:59:54 +02:00
dependabot[bot]
47999da63d
chore(deps-dev): bump prettier from 3.9.4 to 3.9.6
...
Bumps [prettier](https://github.com/prettier/prettier ) from 3.9.4 to 3.9.6.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.9.4...3.9.6 )
---
updated-dependencies:
- dependency-name: prettier
dependency-version: 3.9.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 13:53:24 +00:00
Ewald ALOEBOETOE
0cbcb0b69a
Merge pull request #183 from MajoorWaldi/dependabot/npm_and_yarn/happy-dom-20.11.1
...
chore(deps-dev): bump happy-dom from 20.10.6 to 20.11.1
2026-07-24 15:51:00 +02:00
dependabot[bot]
efcc19fe4e
chore(deps-dev): bump happy-dom from 20.10.6 to 20.11.1
...
Bumps [happy-dom](https://github.com/capricorn86/happy-dom ) from 20.10.6 to 20.11.1.
- [Release notes](https://github.com/capricorn86/happy-dom/releases )
- [Commits](https://github.com/capricorn86/happy-dom/compare/v20.10.6...v20.11.1 )
---
updated-dependencies:
- dependency-name: happy-dom
dependency-version: 20.11.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 13:50:46 +00:00
Ewald ALOEBOETOE
872d9ca3cd
Merge pull request #180 from MajoorWaldi/dependabot/github_actions/actions/setup-python-7.0.0
...
chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0
2026-07-24 15:50:30 +02:00
dependabot[bot]
2913a9e590
chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 6.3.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b97 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 13:50:16 +00:00
Ewald ALOEBOETOE
bfac49a82e
Merge pull request #179 from MajoorWaldi/dependabot/npm_and_yarn/oxlint-1.75.0
...
chore(deps-dev): bump oxlint from 1.67.0 to 1.75.0
2026-07-24 15:50:14 +02:00
Ewald ALOEBOETOE
71634978c8
Merge pull request #181 from MajoorWaldi/dependabot/npm_and_yarn/primevue-5.0.0
...
chore(deps): bump primevue from 4.5.5 to 5.0.0
2026-07-24 15:49:20 +02:00
Ewald ALOEBOETOE
e7a3c9a5d7
Merge pull request #184 from MajoorWaldi/dependabot/npm_and_yarn/eslint-10.7.0
...
chore(deps-dev): bump eslint from 10.6.0 to 10.7.0
2026-07-24 15:48:32 +02:00
Ewald ALOEBOETOE
c43bd6829b
Merge pull request #178 from MajoorWaldi/dependabot/github_actions/actions/checkout-7.0.1
...
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1
2026-07-24 15:48:20 +02:00
Ewald ALOEBOETOE
11d535b7ed
Merge pull request #185 from MajoorWaldi/agent/fix-viewer-paths-and-write-access-docs
...
feat: add Collect Files (context menu + sidebar) bundling asset, work…
2026-07-24 15:47:38 +02:00
Ewald
e3999f8ef9
docs: document Collect Files feature (new guide, README, API reference, index, changelog)
2026-07-24 15:44:31 +02:00
Ewald
e3afb1a0d3
feat: add Collect Files (context menu + sidebar) bundling asset, workflow, traced prompt text and media inputs into a zip
...
- New POST /mjr/am/collect-files route (CSRF, write token, rate limit, path allowlist)
- collect_service: extracts workflow media/model refs, resolves inputs within allowed roots, builds {stem}_collected.zip next to the asset with writable-dir fallback to output/_mjr_collected
- Zip contains asset, workflow.json, prompt_graph.json, prompt.json (positive/negative traced via geninfo parser), inputs/ and collected_files.txt manifest
- comfy_core adapter: get_model_full_path helper
- Frontend: 'Collect files' grid context menu item + sidebar (D) MButton, collectFiles() API client op
- Tests: tests/features/test_collect_service.py (10 tests)
2026-07-24 15:41:48 +02:00
dependabot[bot]
d7b49bb018
chore(deps-dev): bump eslint from 10.6.0 to 10.7.0
...
Bumps [eslint](https://github.com/eslint/eslint ) from 10.6.0 to 10.7.0.
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v10.6.0...v10.7.0 )
---
updated-dependencies:
- dependency-name: eslint
dependency-version: 10.7.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 07:34:28 +00:00
dependabot[bot]
28e06ce64a
chore(deps): bump primevue from 4.5.5 to 5.0.0
...
Bumps [primevue](https://github.com/primefaces/primevue/tree/HEAD/packages/primevue ) from 4.5.5 to 5.0.0.
- [Release notes](https://github.com/primefaces/primevue/releases )
- [Changelog](https://github.com/primefaces/primevue/blob/master/CHANGELOG.md )
- [Commits](https://github.com/primefaces/primevue/commits/HEAD/packages/primevue )
---
updated-dependencies:
- dependency-name: primevue
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 07:34:10 +00:00
dependabot[bot]
28904da36a
chore(deps-dev): bump oxlint from 1.67.0 to 1.75.0
...
Bumps [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint ) from 1.67.0 to 1.75.0.
- [Release notes](https://github.com/oxc-project/oxc/releases )
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md )
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.75.0/npm/oxlint )
---
updated-dependencies:
- dependency-name: oxlint
dependency-version: 1.75.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 07:34:02 +00:00