-
Notifications
You must be signed in to change notification settings - Fork 349
v15.18.0 #2496
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
v15.18.0 #2496
Changes from all commits
Commits
Show all changes
55 commits
Select commit
Hold shift + click to select a range
767c1b8
upgrade deps (bp6)
gabrielburnworth bba871d
clear parcel assets before building
gabrielburnworth 761eb61
Merge branch 'main' of https://github.com/FarmBot/Farmbot-Web-App int…
gabrielburnworth ccc4559
fix csp_reports error
gabrielburnworth 0ace718
add commit SHAs to release info
gabrielburnworth d668a84
upgrade deps (postgres:17)
gabrielburnworth b16ef34
add menu configs and sun angle debugger
gabrielburnworth 6f7eeeb
add demo account lua runner
gabrielburnworth e79a158
add more demo account bot controls
gabrielburnworth 3d50b2f
add estop and helpers to lua runner
gabrielburnworth 0f0539f
add more to and refactor lua runner
gabrielburnworth 2870de2
upgrade deps
gabrielburnworth e6d5ea7
improve 3D and demo account tool handling
gabrielburnworth e9ab867
add move and execute to lua runner
gabrielburnworth dc6e730
support queueing and track call depth in lua runner
gabrielburnworth 07dceb8
add point group loops and safe z to demo accounts
gabrielburnworth 3163ffb
add warnings, flowrate, bugfixes, and points to demo accounts
gabrielburnworth 87ee6cc
support demo sequence scope declarations
gabrielburnworth 64c91c9
improve watering animation
gabrielburnworth 3ff065c
add axis_order
gabrielburnworth ebad9c6
add seeder_tip_z_offset
gabrielburnworth f889139
fix lua runner move helper
gabrielburnworth 3a8e1d6
change move axis_order to grouping and route
gabrielburnworth ada920d
fix watering animation
gabrielburnworth 4f48caa
add dev settings and fix inactive color
gabrielburnworth 06c716b
move calculate move code
gabrielburnworth 175db8f
add demo account logging
gabrielburnworth 71b624b
upgrade deps (ruby)
gabrielburnworth 1d6f702
add default axis order setting
gabrielburnworth f2f8d90
eslint-ignore problem file
gabrielburnworth 92bfa11
use correct tooltip
gabrielburnworth 9fab685
add 3D sequence visualization and fix demo trough movements
gabrielburnworth 001ad26
handle JSON errors
gabrielburnworth 20723fd
sequence editor styling improvements
roryaronson 394786c
improve nav popup tabs
roryaronson 8830e81
better icon button active states
roryaronson 4eef26f
update seeded sequences and demo account lua runner
gabrielburnworth 3fc462e
add filtering to get_point lua runner functions
gabrielburnworth bca2f6d
add new slot setup steps
gabrielburnworth cc15858
shorten water job name
gabrielburnworth e922aed
upgrade deps
gabrielburnworth bd64d8e
add max_auto_reruns to ci config
gabrielburnworth 739b70b
handle ai error messages
gabrielburnworth cbc9f96
increase spinach demo water amount
gabrielburnworth f0b7e8b
show v1.8 seed option during setup
gabrielburnworth aa96c7c
better align wizard slot components
roryaronson 61f78b4
add is_demo lua helper
gabrielburnworth 692b29d
adjust job css and nav order
gabrielburnworth e73ff80
add toolslot tool dropdowns to setup wizard
gabrielburnworth 2bf6d46
remove v1.8 feature wall
gabrielburnworth 1640488
upgrade deps
gabrielburnworth a62b828
allow viewing of os download table on mobile
gabrielburnworth 50ac600
setup wizard slot assignment alignment
roryaronson 909e1c2
beacon highlight improvement
roryaronson c53ef0e
fix motor load indicator position
gabrielburnworth File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -115,6 +115,7 @@ commands: | |
| workflows: | ||
| version: 2 | ||
| build_and_test: | ||
| max_auto_reruns: 1 | ||
| jobs: | ||
| #- build | ||
| - all | ||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,2 +1,3 @@ | ||
| hacks.d.ts | ||
| .eslintrc.js | ||
| frontend/wizard/step.tsx |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1 +1 @@ | ||
| 3.4.4 | ||
| 3.4.5 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Check failure
Code scanning / CodeQL
CSRF protection weakened or disabled High
Copilot Autofix
AI 4 months ago
To fix the potential CSRF vulnerability, we should remove the line that disables CSRF protection (
skip_before_action :verify_authenticity_token, only: [:csp_reports]) from theDashboardController. This will restore the default CSRF protection provided by Rails and ensure that all actions, includingcsp_reports, require valid CSRF tokens. If there is a valid need to allow CSRF-exempt endpoints, a more secure approach should be taken (such as limiting the action format to JSON, authenticating requests, or whitelisting trusted sources; but that is outside the scope since we only have the provided snippet). Remove line 3 fromapp/controllers/dashboard_controller.rb.