Bump version to v0.4.2#295
Merged
Merged
Conversation
Patch release covering 25 commits since v0.4.1. The headline theme is infrastructure & quality: backend hardening (CSRF, rate limiting, request validation, structured logging), a new @wafflebase/tokens shared design-tokens package, a frontend test migration to Vitest, a repaired and CI-wired frontend Yorkie integration lane, and a dependency sweep clearing 22 Dependabot alerts. Product work: Slides rulers + guides, group/ungroup, connector hit-test and drag fixes, ghost-preview drag-move, a mobile editor shell, and PPTX shape-level blipFill import; Sheets gained power(^) and unary postfix percentage operators plus an IFERROR/IFNA fix. No Prisma migration. #289 adds three optional backend env vars (BACKEND_TRUST_PROXY, BACKEND_JSON_BODY_LIMIT, LOG_LEVEL) with safe defaults, so the devops image bump stays routine. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
|
Warning Review limit reached
Your plan currently allows 1 review/hour. Refill in 21 minutes and 59 seconds. Your organization has run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After more review capacity refills, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than trial, open-source, and free plans. In all cases, review capacity refills continuously over time. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (10)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Contributor
Verification: verify:selfResult: ✅ PASS in 235.7s
Verification: verify:integrationResult: ✅ PASS |
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
hackerwins
added a commit
that referenced
this pull request
May 24, 2026
Patch release covering 25 commits since v0.4.1. The headline theme is infrastructure & quality: backend hardening (CSRF, rate limiting, request validation, structured logging), a new @wafflebase/tokens shared design-tokens package, a frontend test migration to Vitest, a repaired and CI-wired frontend Yorkie integration lane, and a dependency sweep clearing 22 Dependabot alerts. Product work: Slides rulers + guides, group/ungroup, connector hit-test and drag fixes, ghost-preview drag-move, a mobile editor shell, and PPTX shape-level blipFill import; Sheets gained power(^) and unary postfix percentage operators plus an IFERROR/IFNA fix. No Prisma migration. #289 adds three optional backend env vars (BACKEND_TRUST_PROXY, BACKEND_JSON_BODY_LIMIT, LOG_LEVEL) with safe defaults, so the devops image bump stays routine. Also move @wafflebase/tokens from dependencies to devDependencies in @wafflebase/docs. tokens is private (never published to npm) and is bundled into the docs dist by the Vite library build, so declaring it as a runtime dependency made the published @wafflebase/[email protected] manifest reference a package that does not exist on the registry, breaking the npm publish. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
4 tasks
hackerwins
added a commit
that referenced
this pull request
May 25, 2026
The v0.4.2 release Docker build exceeded GitHub's 6-hour job limit and was cancelled, while normal main-push builds finished in ~3 minutes. The workflow built linux/amd64,linux/arm64 in one job on an amd64 runner, so arm64 was produced under QEMU emulation. The Dockerfile builder stage is pinned to $BUILDPLATFORM (native), but the runtime stage is not, so the arm64 'pnpm install --prod' and 'npx prisma generate' ran emulated. These were normally inline-cache hits; the preceding dependency bump (#294/#295) rewrote pnpm-lock.yaml and package.json, invalidating the cache and forcing the emulated steps to execute for the first time -> 6h timeout. Build each platform on its own native runner (ubuntu-24.04 / ubuntu-24.04-arm, free on this public repo), push by digest, and merge a multi-arch manifest. Replace the broken type=inline cache with type=gha,mode=max scoped per arch, and add timeout-minutes so a hang fails fast instead of burning 6h. Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>
hackerwins
added a commit
that referenced
this pull request
May 25, 2026
These tasks landed on main per recent commit log: docker-publish-arm64 (#296), import-progress-toast (#299), pptx-blipfill-fillrect-crop (#297), release-v0.4.2 (#295), slides-textbox-autogrow (cf83a49), and slides-textbox-edit-theme-color (#300). Move their docs to archive/2026/05 and regenerate the task indexes. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
hackerwins
added a commit
that referenced
this pull request
May 25, 2026
These tasks landed on main per recent commit log: docker-publish-arm64 (#296), import-progress-toast (#299), pptx-blipfill-fillrect-crop (#297), release-v0.4.2 (#295), slides-textbox-autogrow (cf83a49), and slides-textbox-edit-theme-color (#300). Move their docs to archive/2026/05 and regenerate the task indexes. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Patch release bumping
0.4.1 → 0.4.2across the root and all 8packages (backend, cli, docs, documentation, frontend, sheets, slides,
tokens). Covers the 25 commits merged since
v0.4.1.The dominant theme this cycle is infrastructure & quality:
@wafflebase/tokensshared design tokens package (Introduce @wafflebase/tokens shared design tokens package #292)node:testto Vitest (Migrate frontend tests from node:test to Vitest #291)Product work: Slides rulers + presentation-wide guides (#285),
group/ungroup with a nested element tree (#263), connector hit-test
(#266) and drag-UX fixes (#265), ghost-preview drag-move (#267), a
mobile editor shell + morphing toolbar (#268), share-link toolbar with
viewer read-only (#282), lazy-painted thumbnails (#271), and PPTX
shape-level blipFill import (#284). Sheets / Formulas gained a power
(
^) operator (#276), a unary postfix percentage operator (#286), andan IFERROR/IFNA referenced-error fix (#275).
Devops impact
No Prisma migration. #289 adds three optional backend env vars with
safe defaults —
BACKEND_TRUST_PROXY(0),BACKEND_JSON_BODY_LIMIT(
25mb),LOG_LEVEL(info). The image bump stays routine, butproduction behind a reverse proxy should set
BACKEND_TRUST_PROXY=1sothe new rate limiter reads the real client IP.
Test plan
pnpm verify:fast— lint + unit tests greenpnpm verify:self— all 10 build/test lanes green (90.7s)🤖 Generated with Claude Code