Skip to content

Commit 90c37a9

Browse files
committed
test: dependency refresh (18 advisories → 0) + Printers table headers i18n
Dependency refresh entirely within the existing semver ranges — package.json untouched, only the lockfile was stale: builder-util-runtime 9.5.1 → 9.7.0 (GHSA-p2f4-r6v6-j797, the reported CVE) electron-builder / app-builder-lib 26.8.1 → 26.15.3 (AppImage search path) electron-updater 6.8.3 → 6.8.9 electron 41.3.0 → 41.10.6 (three advisories) tar, undici, ws, js-yaml, tmp, form-data, ip-address npm audit: 18 (1 critical, 17 high) → 0. Also: six Printers table headers were hardcoded English literals and stayed in English in every language; they now reuse the table-header key family. On a test/** branch to exercise the upgraded packaging chain on a real Windows runner (nfc-pcsc is a native addon) before tagging 2.19.1.
1 parent ac1cc1b commit 90c37a9

13 files changed

Lines changed: 811 additions & 793 deletions

File tree

‎WORKLOG.md‎

Lines changed: 16 additions & 44 deletions
Original file line numberDiff line numberDiff line change
@@ -1,54 +1,26 @@
1-
# Worklog — v2.18.1 (in progress)
1+
# Worklog — v2.19.1 (in progress)
22

33
## Added
4-
- Add-material source picker — "+ Material" now opens a side card asking where the material comes
5-
from: **From Catalogue** (opens the catalogue in grid view — picking an unfamiliar product is a
6-
visual task — and yields a TigerData+) or **Manually** (you fill it in, yields a TigerData). Each
7-
row shows the tier pair its path leads to — `TigerData+` `TigerTag+` / `TigerData` `TigerTag`,
8-
drawn with the header stats' own capsules — so the outcome, chipless now and once burned, is
9-
named before you commit; the explanation sits in the shared ⓘ bubble. No scrim, like the spool
10-
detail card — the app stays visible and clickable behind it — and it joins the side-card cascade
11-
as its leftmost member, so opening a spool or a printer pushes it left instead of burying it.
12-
Same side card + rows as the printer add flow —
13-
`renderer/inventory.html`, `renderer/inventory.js`, `renderer/css/40-printers.css`
14-
- "Get it on MakerWorld" button in the TigerScale panel's empty state, next to "View on GitHub" —
15-
links to the printable TigerScale V3 body. Both CTAs now stack full-width so the pair reads the
16-
same in all 9 locales — `renderer/IoT/tigerscale/index.js`, `renderer/IoT/tigerscale/tigerscale.css`
174

185
## Changed
19-
- TigerScale onboarding card rebuilt around the V3 machine — the photo sits on a lit stage with a
20-
"V3" generation badge, the ✓ list became six icon-led feature rows (dual NFC readers, real
21-
remaining weight, on-board touchscreen + calibration wizard, account sync, offline recognition,
22-
runs unattended), and both destinations keep the brand colour they already have in the sidebar
23-
(GitHub slate, MakerWorld teal + package icon) —
24-
`renderer/IoT/tigerscale/index.js`, `renderer/IoT/tigerscale/tigerscale.css`
25-
- TigerScale illustration + header icon replaced with the V3 body (empty state, scale card
26-
thumbnail, README, header health icon) — `assets/img/TigerScale_Photo.png`,
27-
`assets/svg/icons/icon_tigerscale_3d.svg` (masters archived in `assets-src/`)
28-
- The TigerScale "View on GitHub" button pointed at the V2 repo (`TigerTag-Scale`, no longer
29-
developed); it now opens `Tiger-Scale-V3` — `renderer/IoT/tigerscale/index.js`
306

317
## Fixed
32-
- Printer photos showed as black silhouettes in the Printers list view in dark mode — the row
33-
thumbnail carried a leftover `mix-blend-mode: multiply` (needed back when the catalogue images had
34-
a white background; they are transparent PNGs now), which multiplied each photo with the dark row
35-
background. Permanent on Windows, hover-only on macOS. Blend mode dropped — `renderer/css/40-printers.css`
36-
- Windows virtual smart-card readers ("Windows Hello for Business", "Microsoft Virtual Smart Card")
37-
are no longer treated as NFC readers — PC/SC enumerates these TPM-backed certificate readers
38-
exactly like an ACR122U and they permanently report a card present, so a user with 2 readers got a
39-
3rd burn slot that never turned green and the Burn button stayed disabled. Added to the existing
40-
name filter at the reader-registration gate — `services/nfc-process.js`, `docs/READER-SELECTION-BRIEF.md`
8+
- Dependency refresh — 18 advisories (1 critical, 17 high) down to 0, entirely within the existing
9+
semver ranges: `package.json` is untouched, only the lockfile was stale. Covers the reported
10+
**CVE-2026-54673** / GHSA-p2f4-r6v6-j797 (`builder-util-runtime` 9.5.1 → 9.7.0 — electron-updater
11+
leaked `Authorization` / `PRIVATE-TOKEN` headers across a cross-origin redirect; `electron-updater`
12+
is a runtime dependency, though our update feed is a public GitHub release that carries no
13+
credentials), plus electron-builder/app-builder-lib 26.8.1 → 26.15.3 (AppImage search-path advisory),
14+
electron 41.3.0 → 41.10.6 (three advisories), and tar, undici, ws, js-yaml, tmp, form-data,
15+
ip-address. Supersedes external PR #10, which pinned a single package through `overrides` —
16+
`package-lock.json`
17+
- Six column headers in the Printers table view stayed in English in every language (Brand, Name,
18+
Model, Status, Job, Last seen) — they were hardcoded literals while their neighbours (Preview,
19+
Ends at) went through `t()`. They now reuse the existing table-header key family; switching
20+
language already re-renders this view, so they follow immediately — `renderer/inventory.js`
4121

4222
## Removed
43-
- The standalone "From Catalogue" button in the inventory action bar — it is now the first choice of
44-
the "+ Material" side card, so adding a material has one entry point instead of two.
45-
`renderer/inventory.html`, `renderer/inventory.js` (handler + its `_syncInvBarButtons` visibility
46-
line), i18n key `catalogBtn`
4723

4824
## i18n
49-
- Added: `matSourceTitle`, `matSourceSub`, `matSourceCatalogue`, `matSourceCatalogueHint`,
50-
`matSourceManual`, `matSourceManualHint` — 9 locales
51-
- Added: `scaleEmptyCtaModel`, `scaleEmptyBullet4`, `scaleEmptyBullet5`, `scaleEmptyBullet6` — 9 locales
52-
- Removed: `catalogBtn` — 9 locales
53-
- Rewritten for the V3 machine: `scaleEmptySub`, `scaleEmptyBullet1`, `scaleEmptyBullet2`,
54-
`scaleEmptyBullet3` — 9 locales
25+
- Added: `thModel`, `thStatus`, `thJob` — 9 locales (the Printers table headers; `thBrand`, `thName`
26+
and `printersLastSeen` already existed and are reused)

0 commit comments

Comments
 (0)