Skip to content

fix: keep RPM changelog entries in descending date order on re-bump - #1549

Merged
yenienserrano merged 1 commit into
5.0.0from
bug/1547-reorder-the-rpm-changelog
Sep 1, 2026
Merged

fix: keep RPM changelog entries in descending date order on re-bump#1549
yenienserrano merged 1 commit into
5.0.0from
bug/1547-reorder-the-rpm-changelog

Conversation

@yenienserrano

@yenienserrano yenienserrano commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Description

Re-bumping an existing version in dev-tools/build-packages/rpm/wazuh-dashboard.spec updated the entry's date in place instead of repositioning it in the %changelog list. If the new date wasn't the newest one, the entry stayed in its old spot, breaking descending chronological order and making rpmbuild fail with %changelog not in descending chronological order. This has previously been patched directly on the spec file (#1516, #1548); this PR fixes the root cause in tools/repository_bumper.sh instead.

  • update_rpm_changelog now removes the existing entry (if any) and reinserts it at the position matching its date, keeping the whole list sorted.
  • convert_date_to_rpm_format / convert_date_to_deb_format now branch for BSD date (macOS) vs GNU date (Linux) — previously GNU-only date -d silently failed on macOS.
  • An invalid date now aborts the script (return 1 + caller exit 1) instead of writing the error text into the changelog — previously exit 1 inside a $(...) subshell only killed the subshell, not the script.
  • update_deb_changelog switched its raw sed -i call to the script's own sed_inplace helper for macOS/Linux portability, matching the RPM function.

Closes: #1547

How to Test

bash tools/repository_bumper.sh --stage beta5 --tag --date 2026-09-10

Then check dev-tools/build-packages/rpm/wazuh-dashboard.spec's %changelog section stays in descending date order, including re-running the same command (existing entry gets repositioned, not just re-dated) and testing with a date older than an existing entry.

@yenienserrano @claude
fix: keep RPM changelog entries in descending date order on re-bump
f713331 
Re-bumping an existing version updated its date in place instead of
repositioning it, so a newer date could end up below older entries and
rpmbuild rejected the spec (%changelog not in descending chronological
order). The entry is now removed and reinserted at the position
matching its date.

Also fixes date/sed portability on macOS (BSD date/sed vs GNU), and
makes an invalid date abort the script instead of writing the error
text into the changelog.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
@yenienserrano yenienserrano linked an issue Sep 1, 2026 that may be closed by this pull request
Error while generating dashboard rpm packages #1547
Closed
@yenienserrano yenienserrano self-assigned this Sep 1, 2026
@yenienserrano
yenienserrano marked this pull request as ready for review September 1, 2026 15:07
@yenienserrano yenienserrano mentioned this pull request Sep 1, 2026
Merged
@Desvelao

Desvelao commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Test

bash tools/repository_bumper.sh --stage beta5 --tag --date 2026-09-10

Result:

diff --git a/dev-tools/build-packages/base-packages-to-base/README.md b/dev-tools/build-packages/base-packages-to-base/README.md
index 553cd903b1..f6caef5e22 100644
--- a/dev-tools/build-packages/base-packages-to-base/README.md
+++ b/dev-tools/build-packages/base-packages-to-base/README.md
@@ -29,15 +29,15 @@ Example:
 
 ```bash
 bash run-docker-compose.sh \
-    --app 5.0.0 \
-    --base 5.0.0 \
-    --security 5.0.0 \
-    --securityAnalytics 5.0.0 \
-    --reporting 5.0.0 \
-    --alerting 5.0.0 \
-    --notifications 5.0.0 \
+    --app v5.0.0-beta5 \
+    --base v5.0.0-beta5 \
+    --security v5.0.0-beta5 \
+    --securityAnalytics v5.0.0-beta5 \
+    --reporting v5.0.0-beta5 \
+    --alerting v5.0.0-beta5 \
+    --notifications v5.0.0-beta5 \
     --arm \
     --node-version 22.22.0
\`\`\`
 
-This example will create a packages folder that inside will have the packages divided by repository of the 5.0.0 git reference of each one.
+This example will create a packages folder that inside will have the packages divided by repository of the v5.0.0-beta5 git reference of each one.
diff --git a/dev-tools/build-packages/deb/debian/changelog b/dev-tools/build-packages/deb/debian/changelog
index 8454ff4c80..fb0b86b858 100644
--- a/dev-tools/build-packages/deb/debian/changelog
+++ b/dev-tools/build-packages/deb/debian/changelog
@@ -2,7 +2,7 @@ wazuh-dashboard (5.0.0-RELEASE) stable; urgency=low
 
   * More info: https://documentation.wazuh.com/current/release-notes/release-5-0-0.html
 
- -- Wazuh, Inc <info@wazuh.com>  Wed, 23 Sep 2026 12:00:00 +0000
+ -- Wazuh, Inc <info@wazuh.com>  Thu, 10 Sep 2026 12:00:00 +0000
 
 wazuh-dashboard (4.14.9-RELEASE) stable; urgency=low
 
diff --git a/dev-tools/build-packages/rpm/wazuh-dashboard.spec b/dev-tools/build-packages/rpm/wazuh-dashboard.spec
index 5de352f5e7..85c14101df 100644
--- a/dev-tools/build-packages/rpm/wazuh-dashboard.spec
+++ b/dev-tools/build-packages/rpm/wazuh-dashboard.spec
@@ -479,10 +479,10 @@ rm -fr %{buildroot}
 %attr(644, root, root) "/usr/lib/systemd/system/wazuh-dashboard.service"
 
 %changelog
-* Wed Sep 23 2026 support <info@wazuh.com> - 5.0.0
-- More info: https://documentation.wazuh.com/current/release-notes/release-5-0-0.html
 * Wed Sep 16 2026 support <info@wazuh.com> - 4.14.9
 - More info: https://documentation.wazuh.com/current/release-notes/release-4-14-9.html
+* Thu Sep 10 2026 support <info@wazuh.com> - 5.0.0
+- More info: https://documentation.wazuh.com/current/release-notes/release-5-0-0.html
 * Thu Sep 03 2026 support <info@wazuh.com> - 4.10.5
 - More info: https://documentation.wazuh.com/current/release-notes/release-4-10-5.html
 * Wed Sep 02 2026 support <info@wazuh.com> - 4.14.8

@yenienserrano
yenienserrano merged commit 56ef8b2 into 5.0.0 Sep 1, 2026
46 checks passed
@yenienserrano
yenienserrano deleted the bug/1547-reorder-the-rpm-changelog branch September 1, 2026 15:32
yenienserrano added a commit that referenced this pull request Sep 1, 2026
@yenienserrano @claude
fix: keep RPM changelog entries in descending date order on re-bump (#…
4a0c799 
…1550)

* fix: keep RPM changelog entries in descending date order on re-bump

Port of the 5.0.0 fix (#1549) to 4.14.9. Re-bumping an existing
version updated its date in place instead of repositioning it, so a
newer date could end up below older entries and rpmbuild rejected the
spec (%changelog not in descending chronological order). The entry is
now removed and reinserted at the position matching its date.

Also fixes date/sed portability on macOS (BSD date/sed vs GNU) and
makes an invalid date abort the script instead of writing the error
text into the changelog. This branch didn't have the sed_inplace
helper yet, so it's added here too (ported from 5.0.0).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

* fix: make repository_bumper.sh's remaining sed -i calls portable

The rest of the script's raw sed -i calls (VERSION.json, package.json,
workflow branch refs, base-packages Dockerfile, README.md, rendering
service snapshot, CHANGELOG.md) had the same GNU-only sed -i issue
already fixed for the changelog updates, breaking on macOS (BSD sed)
with errors like "command i expects \ followed by text" or "\1 not
defined in the RE". Switched them all to the existing sed_inplace
helper so the whole script runs end-to-end on macOS.

Also fixed VERSION.json/package.json field extraction, which used the
GNU-only \s regex shorthand (unsupported by BSD sed), replaced with
the portable [[:space:]] POSIX class.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

---------

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
yenienserrano added a commit that referenced this pull request Sep 4, 2026
@yenienserrano @asteriscos
@Desvelao @claude @rodrigofez @wazuhci
Merge 5.0.0 into 5.0.1 (#1564)
cd04694 
* Report skipped bumps in the repository bumper workflow (#1492)

Improve repository bumper error handling

* Recalculate flyout position when the sidecar is opened (#1503)

* Adapt flyout position in relation to the sidecar

* Add changelog

* Change resizable button emphasis style from :focus to :active (#1508)

* fix(sidecar): change resizable button emphasis style from :focus to :active

Update the .sidecar-resizableButton CSS to emphasize the "grab" icon
on :active instead of :focus, matching the intended interaction
feedback when dragging the resizer.

Closes wazuh/wazuh-dashboard-plugins#8989

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* fix(sidecar): remove leftover native focus outline on resizable button

The resizable button programmatically calls .focus() on every click,
so after removing the custom :focus emphasis in favor of :active, the
browser's default focus outline was left showing as an unstyled
colored border until focus moved elsewhere. Suppress it for
mouse/touch interaction while keeping it for keyboard users via
:focus-visible.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* fix(sidecar): opt out resizable button from the global focus-ring animation

The resizable button programmatically calls .focus() on every click,
which triggered OSD's global brute-force focus-ring animation
(:focus:not([class^="eui"]):not(.osd-resetFocusState) in _base.scss)
since the button isn't an EUI component. That showed as a lingering
colored border after dragging, independent from the button's own
:active styling. Opt out via the "osd-resetFocusState" class, which is
the mechanism _base.scss already documents for components with
hand-crafted focus states, instead of fighting the rule's
!important/specificity locally. Supersedes the previous outline:none
attempt, which didn't target the actual animation.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* feat(sidecar): allow configuring the resizable button className

Add an optional className prop to ResizableButton, and forward it from
a new classNameButton option on OverlaySidecarOpenOptions/Sidecar, so
callers of overlays.sidecar.open() can style/opt-out the resizer
button (e.g. pass "osd-resetFocusState" to drop the global focus-ring
animation) without hardcoding it in the component.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

---------

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude <noreply@anthropic.com>

* Change top bar health-check icon (#1505)

* feat: update health check indicator

* Change top bar health-check icon to a pulse shown only when attention is needed

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>

* fix(core): use kebab-case for sidecar docked-mode CSS variable

Rename --osdSidecarSize to --osd-sidecar-size and switch attribute
selectors to double quotes to satisfy the repo's stylelint rules
(custom-property-pattern, string-quotes), registering sidecar.scss
in the global selectors allowlist for its .euiFlyout references.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* chore: use constant

* Rework health-check popover

* Rework health-check popover

* List failing health checks in the nav-button popover

Show the enabled non-green checks as an EuiHealth list in the health-check
popover, labelled by the check name and with the error surfaced in a tooltip.
Use the shared mapTaskStatusToHealthColor helper and TASK.RUN_RESULT constants
instead of magic strings.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>

* Fix popover closes when clicking inside

* Close popover after navigating to the health check

---------

Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com>

* Bump 5.0.0 branch (#1513)

feat: bump 5.0.0

* Fix RPM changelog entry order causing build failure (#1516)

Fix RPM changelog entry order for 5.0.0

The 5.0.0 changelog entry was placed out of descending chronological
order, causing rpmbuild to fail while parsing %changelog.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

* Merge 4.14.9 into 5.0.0 (#1517)

Remove unnecessary debhelper install-time dependency (#1484)

fix: remove unnecessary debhelper install-time dependency

debhelper is only required to build the .deb package (declared under
Build-Depends in dev-tools/build-packages/deb/debian/control), not to
install a pre-built one. Remove it from the apt-get install steps used
to test package install/upgrade.

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

* Merge 4.14.9 into 5.0.0 (#1537)

Merge 4.14.9 into 5.0.0: no changes (verified 2026-08-28)

* fix: remove inert opensearch_security.cookie.ttl setting (#1534)

The dashboard config declares opensearch_security.cookie.ttl, but the
security plugin never reads it: only opensearch_security.session.ttl
governs session/cookie expiry. Shipping the setting misleads operators
into believing it bounds the cookie lifetime.

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude <noreply@anthropic.com>

* Bump 5.0.0 branch (#1545)

feat: bump 5.0.0

* Revert bump 5.0.0 branch (#1546)

feat: revert 5.0.0 references

* Fix changelog not in descending chronological order (#1548)

* fix: keep RPM changelog entries in descending date order on re-bump (#1549)

Re-bumping an existing version updated its date in place instead of
repositioning it, so a newer date could end up below older entries and
rpmbuild rejected the spec (%changelog not in descending chronological
order). The entry is now removed and reinserted at the position
matching its date.

Also fixes date/sed portability on macOS (BSD date/sed vs GNU), and
makes an invalid date abort the script instead of writing the error
text into the changelog.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

* Bump 5.0.0 branch (#1551)

feat: bump 5.0.0

* Review the 5.0.0 changelog (#1556)

* docs(changelog): review the 5.0.0 entries

Removed the open redirect fix entry (#1285) and the pre install script
check entry (#1328, #1365).

Reordered the sections to Added, Changed, Removed, Fixed, and qualified
the two wazuh-dashboard-plugins references so they no longer read as
wazuh-dashboard issues.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* docs(changelog): reference issues instead of pull requests

Each entry now links the issue the pull request closed, so the reference
carries the description and the discussion instead of just the diff.

Where an entry listed several references that resolve the same issue, it
collapses to that one; where they resolve different issues, the entry
keeps the main one and the rest are attached to it as sub-issues on
GitHub, following the shape of wazuh-dashboard-plugins#8789.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* docs(changelog): merge the health check service and app entries

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

* docs(changelog): point the health check entry at its parent issue

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

---------

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

* Merge 4.14.9 into 5.0.0 (#1563)

Merge 4.14.8 into 4.14.9 (#1562)

Merge pull request #1507 from wazuh/change/1506-add-dev-image-construction-in-4x

Add dev image build tooling for 4.14.x
# Conflicts:
#	dev-tools/build-dev-image/README.md
#	dev-tools/build-dev-image/build-multiarch.sh
#	dev-tools/build-dev-image/install-plugins.sh
#	dev-tools/build-dev-image/plugins
#	dev-tools/build-dev-image/warmup-opensearch_dashboards.yml
#	dev-tools/build-dev-image/warmup-optimizer.sh
#	dev-tools/build-dev-image/wzd.dockerfile

---------

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>
Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com>
Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com>
Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com>
yenienserrano added a commit that referenced this pull request Sep 4, 2026
@yenienserrano @asteriscos
@Desvelao @claude @rodrigofez @wazuhci
Merge 5.0.1 into main (#1565)
a91d766 
* Merge 5.0.0 into 5.0.1 (#1518)

* Report skipped bumps in the repository bumper workflow (#1492)

Improve repository bumper error handling

* Recalculate flyout position when the sidecar is opened (#1503)

* Adapt flyout position in relation to the sidecar

* Add changelog

* Change resizable button emphasis style from :focus to :active (#1508)

* fix(sidecar): change resizable button emphasis style from :focus to :active

Update the .sidecar-resizableButton CSS to emphasize the "grab" icon
on :active instead of :focus, matching the intended interaction
feedback when dragging the resizer.

Closes wazuh/wazuh-dashboard-plugins#8989

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* fix(sidecar): remove leftover native focus outline on resizable button

The resizable button programmatically calls .focus() on every click,
so after removing the custom :focus emphasis in favor of :active, the
browser's default focus outline was left showing as an unstyled
colored border until focus moved elsewhere. Suppress it for
mouse/touch interaction while keeping it for keyboard users via
:focus-visible.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* fix(sidecar): opt out resizable button from the global focus-ring animation

The resizable button programmatically calls .focus() on every click,
which triggered OSD's global brute-force focus-ring animation
(:focus:not([class^="eui"]):not(.osd-resetFocusState) in _base.scss)
since the button isn't an EUI component. That showed as a lingering
colored border after dragging, independent from the button's own
:active styling. Opt out via the "osd-resetFocusState" class, which is
the mechanism _base.scss already documents for components with
hand-crafted focus states, instead of fighting the rule's
!important/specificity locally. Supersedes the previous outline:none
attempt, which didn't target the actual animation.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* feat(sidecar): allow configuring the resizable button className

Add an optional className prop to ResizableButton, and forward it from
a new classNameButton option on OverlaySidecarOpenOptions/Sidecar, so
callers of overlays.sidecar.open() can style/opt-out the resizer
button (e.g. pass "osd-resetFocusState" to drop the global focus-ring
animation) without hardcoding it in the component.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

---------

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude <noreply@anthropic.com>

* Change top bar health-check icon (#1505)

* feat: update health check indicator

* Change top bar health-check icon to a pulse shown only when attention is needed

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>

* fix(core): use kebab-case for sidecar docked-mode CSS variable

Rename --osdSidecarSize to --osd-sidecar-size and switch attribute
selectors to double quotes to satisfy the repo's stylelint rules
(custom-property-pattern, string-quotes), registering sidecar.scss
in the global selectors allowlist for its .euiFlyout references.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* chore: use constant

* Rework health-check popover

* Rework health-check popover

* List failing health checks in the nav-button popover

Show the enabled non-green checks as an EuiHealth list in the health-check
popover, labelled by the check name and with the error surfaced in a tooltip.
Use the shared mapTaskStatusToHealthColor helper and TASK.RUN_RESULT constants
instead of magic strings.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>

* Fix popover closes when clicking inside

* Close popover after navigating to the health check

---------

Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com>

* Bump 5.0.0 branch (#1513)

feat: bump 5.0.0

* Fix RPM changelog entry order causing build failure (#1516)

Fix RPM changelog entry order for 5.0.0

The 5.0.0 changelog entry was placed out of descending chronological
order, causing rpmbuild to fail while parsing %changelog.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

* Merge 4.14.9 into 5.0.0 (#1517)

Remove unnecessary debhelper install-time dependency (#1484)

fix: remove unnecessary debhelper install-time dependency

debhelper is only required to build the .deb package (declared under
Build-Depends in dev-tools/build-packages/deb/debian/control), not to
install a pre-built one. Remove it from the apt-get install steps used
to test package install/upgrade.

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

---------

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>
Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com>
Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com>
Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com>

* Merge 5.0.0 into 5.0.1 (#1541)

* Report skipped bumps in the repository bumper workflow (#1492)

Improve repository bumper error handling

* Recalculate flyout position when the sidecar is opened (#1503)

* Adapt flyout position in relation to the sidecar

* Add changelog

* Change resizable button emphasis style from :focus to :active (#1508)

* fix(sidecar): change resizable button emphasis style from :focus to :active

Update the .sidecar-resizableButton CSS to emphasize the "grab" icon
on :active instead of :focus, matching the intended interaction
feedback when dragging the resizer.

Closes wazuh/wazuh-dashboard-plugins#8989

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* fix(sidecar): remove leftover native focus outline on resizable button

The resizable button programmatically calls .focus() on every click,
so after removing the custom :focus emphasis in favor of :active, the
browser's default focus outline was left showing as an unstyled
colored border until focus moved elsewhere. Suppress it for
mouse/touch interaction while keeping it for keyboard users via
:focus-visible.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* fix(sidecar): opt out resizable button from the global focus-ring animation

The resizable button programmatically calls .focus() on every click,
which triggered OSD's global brute-force focus-ring animation
(:focus:not([class^="eui"]):not(.osd-resetFocusState) in _base.scss)
since the button isn't an EUI component. That showed as a lingering
colored border after dragging, independent from the button's own
:active styling. Opt out via the "osd-resetFocusState" class, which is
the mechanism _base.scss already documents for components with
hand-crafted focus states, instead of fighting the rule's
!important/specificity locally. Supersedes the previous outline:none
attempt, which didn't target the actual animation.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* feat(sidecar): allow configuring the resizable button className

Add an optional className prop to ResizableButton, and forward it from
a new classNameButton option on OverlaySidecarOpenOptions/Sidecar, so
callers of overlays.sidecar.open() can style/opt-out the resizer
button (e.g. pass "osd-resetFocusState" to drop the global focus-ring
animation) without hardcoding it in the component.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

---------

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude <noreply@anthropic.com>

* Change top bar health-check icon (#1505)

* feat: update health check indicator

* Change top bar health-check icon to a pulse shown only when attention is needed

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>

* fix(core): use kebab-case for sidecar docked-mode CSS variable

Rename --osdSidecarSize to --osd-sidecar-size and switch attribute
selectors to double quotes to satisfy the repo's stylelint rules
(custom-property-pattern, string-quotes), registering sidecar.scss
in the global selectors allowlist for its .euiFlyout references.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* chore: use constant

* Rework health-check popover

* Rework health-check popover

* List failing health checks in the nav-button popover

Show the enabled non-green checks as an EuiHealth list in the health-check
popover, labelled by the check name and with the error surfaced in a tooltip.
Use the shared mapTaskStatusToHealthColor helper and TASK.RUN_RESULT constants
instead of magic strings.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>

* Fix popover closes when clicking inside

* Close popover after navigating to the health check

---------

Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com>

* Bump 5.0.0 branch (#1513)

feat: bump 5.0.0

* Fix RPM changelog entry order causing build failure (#1516)

Fix RPM changelog entry order for 5.0.0

The 5.0.0 changelog entry was placed out of descending chronological
order, causing rpmbuild to fail while parsing %changelog.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

* Merge 4.14.9 into 5.0.0 (#1517)

Remove unnecessary debhelper install-time dependency (#1484)

fix: remove unnecessary debhelper install-time dependency

debhelper is only required to build the .deb package (declared under
Build-Depends in dev-tools/build-packages/deb/debian/control), not to
install a pre-built one. Remove it from the apt-get install steps used
to test package install/upgrade.

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

* Merge 4.14.9 into 5.0.0 (#1537)

Merge 4.14.9 into 5.0.0: no changes (verified 2026-08-28)

* fix: remove inert opensearch_security.cookie.ttl setting (#1534)

The dashboard config declares opensearch_security.cookie.ttl, but the
security plugin never reads it: only opensearch_security.session.ttl
governs session/cookie expiry. Shipping the setting misleads operators
into believing it bounds the cookie lifetime.

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude <noreply@anthropic.com>

---------

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>
Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com>
Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com>
Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com>

* Merge 5.0.0 into 5.0.1 (#1564)

* Report skipped bumps in the repository bumper workflow (#1492)

Improve repository bumper error handling

* Recalculate flyout position when the sidecar is opened (#1503)

* Adapt flyout position in relation to the sidecar

* Add changelog

* Change resizable button emphasis style from :focus to :active (#1508)

* fix(sidecar): change resizable button emphasis style from :focus to :active

Update the .sidecar-resizableButton CSS to emphasize the "grab" icon
on :active instead of :focus, matching the intended interaction
feedback when dragging the resizer.

Closes wazuh/wazuh-dashboard-plugins#8989

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* fix(sidecar): remove leftover native focus outline on resizable button

The resizable button programmatically calls .focus() on every click,
so after removing the custom :focus emphasis in favor of :active, the
browser's default focus outline was left showing as an unstyled
colored border until focus moved elsewhere. Suppress it for
mouse/touch interaction while keeping it for keyboard users via
:focus-visible.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* fix(sidecar): opt out resizable button from the global focus-ring animation

The resizable button programmatically calls .focus() on every click,
which triggered OSD's global brute-force focus-ring animation
(:focus:not([class^="eui"]):not(.osd-resetFocusState) in _base.scss)
since the button isn't an EUI component. That showed as a lingering
colored border after dragging, independent from the button's own
:active styling. Opt out via the "osd-resetFocusState" class, which is
the mechanism _base.scss already documents for components with
hand-crafted focus states, instead of fighting the rule's
!important/specificity locally. Supersedes the previous outline:none
attempt, which didn't target the actual animation.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* feat(sidecar): allow configuring the resizable button className

Add an optional className prop to ResizableButton, and forward it from
a new classNameButton option on OverlaySidecarOpenOptions/Sidecar, so
callers of overlays.sidecar.open() can style/opt-out the resizer
button (e.g. pass "osd-resetFocusState" to drop the global focus-ring
animation) without hardcoding it in the component.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

---------

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude <noreply@anthropic.com>

* Change top bar health-check icon (#1505)

* feat: update health check indicator

* Change top bar health-check icon to a pulse shown only when attention is needed

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>

* fix(core): use kebab-case for sidecar docked-mode CSS variable

Rename --osdSidecarSize to --osd-sidecar-size and switch attribute
selectors to double quotes to satisfy the repo's stylelint rules
(custom-property-pattern, string-quotes), registering sidecar.scss
in the global selectors allowlist for its .euiFlyout references.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>

* chore: use constant

* Rework health-check popover

* Rework health-check popover

* List failing health checks in the nav-button popover

Show the enabled non-green checks as an EuiHealth list in the health-check
popover, labelled by the check name and with the error surfaced in a tooltip.
Use the shared mapTaskStatusToHealthColor helper and TASK.RUN_RESULT constants
instead of magic strings.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>

* Fix popover closes when clicking inside

* Close popover after navigating to the health check

---------

Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>
Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com>

* Bump 5.0.0 branch (#1513)

feat: bump 5.0.0

* Fix RPM changelog entry order causing build failure (#1516)

Fix RPM changelog entry order for 5.0.0

The 5.0.0 changelog entry was placed out of descending chronological
order, causing rpmbuild to fail while parsing %changelog.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

* Merge 4.14.9 into 5.0.0 (#1517)

Remove unnecessary debhelper install-time dependency (#1484)

fix: remove unnecessary debhelper install-time dependency

debhelper is only required to build the .deb package (declared under
Build-Depends in dev-tools/build-packages/deb/debian/control), not to
install a pre-built one. Remove it from the apt-get install steps used
to test package install/upgrade.

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

* Merge 4.14.9 into 5.0.0 (#1537)

Merge 4.14.9 into 5.0.0: no changes (verified 2026-08-28)

* fix: remove inert opensearch_security.cookie.ttl setting (#1534)

The dashboard config declares opensearch_security.cookie.ttl, but the
security plugin never reads it: only opensearch_security.session.ttl
governs session/cookie expiry. Shipping the setting misleads operators
into believing it bounds the cookie lifetime.

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude <noreply@anthropic.com>

* Bump 5.0.0 branch (#1545)

feat: bump 5.0.0

* Revert bump 5.0.0 branch (#1546)

feat: revert 5.0.0 references

* Fix changelog not in descending chronological order (#1548)

* fix: keep RPM changelog entries in descending date order on re-bump (#1549)

Re-bumping an existing version updated its date in place instead of
repositioning it, so a newer date could end up below older entries and
rpmbuild rejected the spec (%changelog not in descending chronological
order). The entry is now removed and reinserted at the position
matching its date.

Also fixes date/sed portability on macOS (BSD date/sed vs GNU), and
makes an invalid date abort the script instead of writing the error
text into the changelog.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

* Bump 5.0.0 branch (#1551)

feat: bump 5.0.0

* Review the 5.0.0 changelog (#1556)

* docs(changelog): review the 5.0.0 entries

Removed the open redirect fix entry (#1285) and the pre install script
check entry (#1328, #1365).

Reordered the sections to Added, Changed, Removed, Fixed, and qualified
the two wazuh-dashboard-plugins references so they no longer read as
wazuh-dashboard issues.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* docs(changelog): reference issues instead of pull requests

Each entry now links the issue the pull request closed, so the reference
carries the description and the discussion instead of just the diff.

Where an entry listed several references that resolve the same issue, it
collapses to that one; where they resolve different issues, the entry
keeps the main one and the rest are attached to it as sub-issues on
GitHub, following the shape of wazuh-dashboard-plugins#8789.

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* docs(changelog): merge the health check service and app entries

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

* docs(changelog): point the health check entry at its parent issue

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>

---------

Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

* Merge 4.14.9 into 5.0.0 (#1563)

Merge 4.14.8 into 4.14.9 (#1562)

Merge pull request #1507 from wazuh/change/1506-add-dev-image-construction-in-4x

Add dev image build tooling for 4.14.x
# Conflicts:
#	dev-tools/build-dev-image/README.md
#	dev-tools/build-dev-image/build-multiarch.sh
#	dev-tools/build-dev-image/install-plugins.sh
#	dev-tools/build-dev-image/plugins
#	dev-tools/build-dev-image/warmup-opensearch_dashboards.yml
#	dev-tools/build-dev-image/warmup-optimizer.sh
#	dev-tools/build-dev-image/wzd.dockerfile

---------

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>
Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com>
Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com>
Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com>

* Update header help menu snapshot to the 5.1 documentation URL

WAZUH_DOCUMENTATION_URL is derived from the product version, so on main it
now resolves to https://documentation.wazuh.com/5.1/ while the committed
snapshot still held 5.0.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Signed-off-by: Rodrigo Lopez <rodrigo.lopez@wazuh.com>
Signed-off-by: Ian Yenien Serrano <63758389+yenienserrano@users.noreply.github.com>
Co-authored-by: Federico Rodriguez <federico.rodriguez@wazuh.com>
Co-authored-by: Antonio <34042064+Desvelao@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Rodrigo López <37187963+rodrigofez@users.noreply.github.com>
Co-authored-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Wazuh CI <22834044+wazuhci@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Desvelao Desvelao Desvelao approved these changes

Assignees

@yenienserrano yenienserrano

Labels

distinguished-contributor no-changelog

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Error while generating dashboard rpm packages

2 participants

@yenienserrano @Desvelao