v2.0.0-rc.6

This release candidate fixes various issues with plugin imports in v2.0.0-rc.5, as well as a few documentation issues.

What's Changed

• docs: add deployment guide by @tabathad in #1385
• chore: drop node 20 support by @jescalada in #1462
• chore(deps): update github-actions - workflows - .github/workflows/ci.yml by @renovate[bot] in #1465
• chore(deps): update httpd:2.4 docker digest to 331548c - localgit - localgit/dockerfile by @renovate[bot] in #1466
• chore(deps): update dependency node to v24 - workflows - .github/workflows/unused-dependencies.yml by @renovate[bot] in #1436
• chore(deps): update node.js to v24 - - dockerfile by @renovate[bot] in #1445
• chore: update meeting_minutes.md issue template by @kriswest in #1473
• chore(deps): update actions/upload-artifact action to v6 - workflows - .github/workflows/e2e.yml by @renovate[bot] in #1468
• chore(deps): update github/codeql-action digest to 72c0b0e - workflows - .github/workflows/codeql.yml by @renovate[bot] in #1469
• chore(deps): update docker/setup-buildx-action action to v4 - workflows - .github/workflows/docker-publish.yml by @renovate[bot] in #1475
• chore(deps): update github-actions to v7 - workflows - .github/workflows/e2e.yml (major) by @renovate[bot] in #1476
• fix: release drafter permission error by @jescalada in #1482
• feat: Add action summary to push view by @andypols in #1446
• fix: broken plugin exports by @jescalada in #1489
• docs: fix link to installation page by @gep13 in #1491
• ci: optimize e2e workflow by @fabiovincenzi in #1490
• ci: optimize CI workflow by @fabiovincenzi in #1492
• fix: restore broken CLI package by @fabiovincenzi in #1499
• ci: run test coverage on CLI package by @fabiovincenzi in #1500
• fix(plugins): update sample plugin imports to use package subpath exports by @coopernetes in #1484

New Contributors

• @gep13 made their first contribution in #1491

Full Changelog: v2.0.0-rc.5...v2.0.0-rc.6

v2.0.0-rc.5

What's Changed

• feat: e2e tests using docker compose by @coopernetes in #1165
• chore: remove unused NPM auth token and flags by @jescalada in #1351
• fix: Dockerfile permissions error by @jescalada in #1341
• fix: file permission issue in e2e tests & regression on db init by @coopernetes in #1358
• fix: trigger for e2e tests by @coopernetes in #1359
• fix: remove unused fileDB params from config schema, defaults, and docs by @dcoric in #1360
• chore: fix NPM publish flow by @jescalada in #1352
• feat: automatic Docker build and upload to Docker Hub by @jescalada in #1339
• fix(deps): update npm - li-cli - experimental/li-cli/package.json by @renovate[bot] in #1308
• fix(deps): update npm - website - website/package.json by @renovate[bot] in #1309
• fix(deps): update dependency uuid to v13 - - package.json by @renovate[bot] in #1224
• chore(deps): update npm to v30 - li-cli - experimental/li-cli/package.json (major) by @renovate[bot] in #1083
• feat: Improve push filtering by @andypols in #1349
• chore(deps): pin httpd docker tag to dd17859 - localgit - localgit/dockerfile by @renovate[bot] in #1369
• chore(deps): update github-actions - workflows - .github/workflows/e2e.yml by @renovate[bot] in #1370
• fix(deps): update dependency axios to ^1.13.4 - git-proxy-cli - packages/git-proxy-cli/package.json by @renovate[bot] in #1371
• fix(deps): update dependency express to ^5.2.1 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @renovate[bot] in #1372
• fix: enable skipped proxy tests by @fabiovincenzi in #1357
• fix(deps): update npm - - package.json by @renovate[bot] in #1307
• fix: error message on fetching auth'd user by @jescalada in #1353
• ci: add Windows to test matrix and fix cross-platform compatibility by @fabiovincenzi in #1361
• fix: make tests independent of execution order by @fabiovincenzi in #1378
• docs: add v2 upgrade doc by @jescalada in #1333
• fix: reduce DB and log bloat by not logging writePack content by @kriswest in #1389
• fix: correct the API base url used to call cancel push in admin UI by @kriswest in #1394
• feat: bundle dependencies for strict network support by @dcoric in #1395
• feat: Add MongoDB integration tests with CI support by @dcoric in #1382
• fix: bump mongodb-github-action version to 1.12.1 by @jescalada in #1405
• docs: architecture guide by @jescalada in #1391
• fix: add invalid regex validation for commitConfig by @jescalada in #1355
• chore: add CODEOWNERS with basic setup by @jescalada in #1381
• fix: improve handling of repository clones in the .remote folder by @kriswest in #1393
• fix: update @types/express-serve-static-core to 5.1.1 and fix typing of Request params by @kriswest in #1409
• docs(website): update website homepage by @tabathad in #1286
• feat: Add reject reason by @andypols in #1396
• chore: add andypols to list of maintainers by @jescalada in #1413
• feat: enhance error handling in git-push and repo services by @dcoric in #1406
• fix(deps): rm duplicate supertest dependency by @andypols in #1419
• chore: ignore experimental packages in renovate.json by @jescalada in #1401
• chore(deps): update github-actions - workflows - .github/workflows/docker-publish.yml by @renovate[bot] in #1424
• docs: move usage to quickstart by @tabathad in #1417
• docs: restructure contributing docs and improve E2E test infrastructure by @coopernetes in #1398
• chore(deps): update httpd:2.4 docker digest to 96b1e8f - localgit - localgit/dockerfile by @renovate[bot] in #1425
• chore(deps): update actions/download-artifact action to v8 - workflows - .github/workflows/ci.yml by @renovate[bot] in #1429
• chore(deps): update github-actions - workflows - .github/workflows/e2e.yml by @renovate[bot] in #1426
• fix(deps): update dependency axios to ^1.13.6 - git-proxy-cli - packages/git-proxy-cli/package.json by @renovate[bot] in #1427
• chore(deps): update dependency @eslint/json to v1 - - package.json by @renovate[bot] in #1434
• chore: fix push sort order to be latest-first by @andypols in #1431
• chore(deps): update github-actions to v5 - workflows - .github/workflows/e2e.yml (major) by @renovate[bot] in #1437
• chore: push, don't overwrite history so browser works by @andypols in #1433
• chore(deps): update github-actions to v6 - workflows - .github/workflows/unused-dependencies.yml (major) by @renovate[bot] in #1438
• chore(deps): update github-actions to v7 - workflows - .github/workflows/scorecard.yml (major) by @renovate[bot] in #1439
• refactor: replace async/await and promise chaining by @fabiovincenzi in #1421
• chore(deps): update github-actions to v4 - workflows - .github/workflows/docker-publish.yml (major) by @renovate[bot] in #1441
• chore(deps): update github-actions - workflows - .github/workflows/unused-dependencies.yml by @renovate[bot] in #1440
• test: improve test coverage by @jescalada in #1356
• chore: add license header eslint plugin by @jescalada in #1447
• refactor: remove any and as throughout codebase by @jescalada in #1323
• feat: add Cypress e2e tests for dashboard push actions by @fabiovincenzi in #1403
• fix: use CompletedAttestation.answers in AttestationView by @fabiovincenzi in #1459
• refactor: improve logging in src/proxy/processors, remove log-related stubs/spies in tests by @jescalada in #1448
• chore: bump git-proxy version to 2.0.0-rc.5 by @jescalada in #1461

Full Changelog: v2.0.0-rc.4...v2.0.0-rc.5

v2.0.0-rc.4.1

Re-releasing v2.0.0-rc4 with NPM publish workflow changes.

This is a release candidate for GitProxy v2 which improves stability by fixing various bugs and wrapping up the codebase's TypeScript conversion. Some notable changes include:

• Added support for AWS Credential Provider to authenticate MongoDB connections in #1319
• Added documentation page for config properties in #1243
  • Schema reference available on our website
• Fixed failure on subsequent pushes to the same branch (Invalid revision range) in #1305
• Fixed startup error due to mismatched default repos in #1284

What's Changed

• fix: rename definitions/authentication in schema to make it more inutitive by @kriswest in #1231
• chore(deps): update github-actions - workflows - .github/workflows/dependency-review.yml by @renovate[bot] in #1226
• chore: remove defunct release workflow by @kriswest in #1234
• chore(deps): update dependency @types/node to ^22.18.7 - li-cli - experimental/li-cli/package.json by @renovate[bot] in #1235
• chore: deprecate github api baseUrl by @andypols in #1232
• feat: improve login page flexibility by @jescalada in #1227
• chore: generate provenance statement when publishing to npm by @kriswest in #1242
• test: fix generated-config test and default config for updated schema by @kriswest in #1244
• refactor: git-proxy-cli package to TS + ESM (v2) by @jescalada in #1180
• fix(deps): update npm - - package.json by @renovate[bot] in #1236
• feat: config schema for missing properties by @kriswest in #1243
• chore(deps): update npm - - package.json by @renovate[bot] in #1247
• refactor: service module to TS + ESM (v2) by @jescalada in #1166
• fix: escape literals in scan diff by @kriswest in #1251
• chore(deps): update github-actions - workflows - .github/workflows/dependency-review.yml by @renovate[bot] in #1250
• refactor: Add TypeScript support by @fabiovincenzi in #1142
• fix: infinite loop in UserList component by @andypols in #1255
• fix: the npm check-types failures by @andypols in #1254
• refactor: remove unnecessary getUserLoggedIn API call in User component by @andypols in #1257
• refactor: convert remaining UI files to TS by @jescalada in #1256
• fix: correct and simplify git push/pull request classification using content-type headers by @kriswest in #1249
• fix: Plugin loader tests by @jescalada in #1262
• chore: add confirmation dialog by @andypols in #1267
• fix: broken user links by @andypols in #1268
• test: add tests for plugins written in ESM by @jescalada in #1266
• fix: empty pagination by @andypols in #1274
• refactor: consolidate TS types by @jescalada in #1275
• fix(deps): update npm - - package.json by @renovate[bot] in #1252
• chore(deps): update github-actions - workflows - .github/workflows/unused-dependencies.yml by @renovate[bot] in #1279
• fix: proxy preparations mismatch bug by @jescalada in #1284
• fix: demo video by @tabathad in #1298
• refactor: migrate tests to Vitest + TS by @jescalada in #1202
• fix(deps): update npm to v5 - - package.json (major) by @renovate[bot] in #900
• chore(deps): update github-actions - workflows - .github/workflows/scorecard.yml by @renovate[bot] in #1306
• chore(deps): update npm to v2 - - package.json (major) by @renovate[bot] in #1132
• fix(deps): update dependency axios to ^1.13.2 - git-proxy-cli - packages/git-proxy-cli/package.json by @renovate[bot] in #1290
• fix: revert singleBranch option in pullRemote action by @jescalada in #1305
• fix: the condition "types" here will never be used warning by @andypols in #1311
• fix: macos test failures due to concurrent file access by @coopernetes in #1312
• fix: misleading endpoint status codes and error messages by @jescalada in #1293
• fix: defer reading of database configuration until needed to fix race by @kriswest in #1316
• feat: add support for using an AWS Credential Provider to authenticate MongoDB connections by @kriswest in #1319
• chore: upgrade node & mongo versions in ci, actions upgrades by @coopernetes in #1315
• fix: drop dependency on jwk-to-pem by using native crypto by @dgl in #1283
• fix: move supertest to dev dependencies by @andypols in #1328
• fix: convert remaining UI javascript to typescript by @andypols in #1329
• chore: bump git-proxy version to v2.0.0-rc.4 by @jescalada in #1322
• feat: e2e tests using docker compose by @coopernetes in #1165
• chore: remove unused NPM auth token and flags by @jescalada in #1351

New Contributors

• @dgl made their first contribution in #1283

Full Changelog: v2.0.0-rc.3...v2.0.0-rc.4.1

v2.0.0-rc.4

This is a release candidate for GitProxy v2 which improves stability by fixing various bugs and wrapping up the codebase's TypeScript conversion. Some notable changes include:

• Added support for AWS Credential Provider to authenticate MongoDB connections in #1319
• Added documentation page for config properties in #1243
  • Schema reference available on our website
• Fixed failure on subsequent pushes to the same branch (Invalid revision range) in #1305
• Fixed startup error due to mismatched default repos in #1284

What's Changed

• fix: rename definitions/authentication in schema to make it more inutitive by @kriswest in #1231
• chore(deps): update github-actions - workflows - .github/workflows/dependency-review.yml by @renovate[bot] in #1226
• chore: remove defunct release workflow by @kriswest in #1234
• chore(deps): update dependency @types/node to ^22.18.7 - li-cli - experimental/li-cli/package.json by @renovate[bot] in #1235
• chore: deprecate github api baseUrl by @andypols in #1232
• feat: improve login page flexibility by @jescalada in #1227
• chore: generate provenance statement when publishing to npm by @kriswest in #1242
• test: fix generated-config test and default config for updated schema by @kriswest in #1244
• refactor: git-proxy-cli package to TS + ESM (v2) by @jescalada in #1180
• fix(deps): update npm - - package.json by @renovate[bot] in #1236
• feat: config schema for missing properties by @kriswest in #1243
• chore(deps): update npm - - package.json by @renovate[bot] in #1247
• refactor: service module to TS + ESM (v2) by @jescalada in #1166
• fix: escape literals in scan diff by @kriswest in #1251
• chore(deps): update github-actions - workflows - .github/workflows/dependency-review.yml by @renovate[bot] in #1250
• refactor: Add TypeScript support by @fabiovincenzi in #1142
• fix: infinite loop in UserList component by @andypols in #1255
• fix: the npm check-types failures by @andypols in #1254
• refactor: remove unnecessary getUserLoggedIn API call in User component by @andypols in #1257
• refactor: convert remaining UI files to TS by @jescalada in #1256
• fix: correct and simplify git push/pull request classification using content-type headers by @kriswest in #1249
• fix: Plugin loader tests by @jescalada in #1262
• chore: add confirmation dialog by @andypols in #1267
• fix: broken user links by @andypols in #1268
• test: add tests for plugins written in ESM by @jescalada in #1266
• fix: empty pagination by @andypols in #1274
• refactor: consolidate TS types by @jescalada in #1275
• fix(deps): update npm - - package.json by @renovate[bot] in #1252
• chore(deps): update github-actions - workflows - .github/workflows/unused-dependencies.yml by @renovate[bot] in #1279
• fix: proxy preparations mismatch bug by @jescalada in #1284
• fix: demo video by @tabathad in #1298
• refactor: migrate tests to Vitest + TS by @jescalada in #1202
• fix(deps): update npm to v5 - - package.json (major) by @renovate[bot] in #900
• chore(deps): update github-actions - workflows - .github/workflows/scorecard.yml by @renovate[bot] in #1306
• chore(deps): update npm to v2 - - package.json (major) by @renovate[bot] in #1132
• fix(deps): update dependency axios to ^1.13.2 - git-proxy-cli - packages/git-proxy-cli/package.json by @renovate[bot] in #1290
• fix: revert singleBranch option in pullRemote action by @jescalada in #1305
• fix: the condition "types" here will never be used warning by @andypols in #1311
• fix: macos test failures due to concurrent file access by @coopernetes in #1312
• fix: misleading endpoint status codes and error messages by @jescalada in #1293
• fix: defer reading of database configuration until needed to fix race by @kriswest in #1316
• feat: add support for using an AWS Credential Provider to authenticate MongoDB connections by @kriswest in #1319
• chore: upgrade node & mongo versions in ci, actions upgrades by @coopernetes in #1315
• fix: drop dependency on jwk-to-pem by using native crypto by @dgl in #1283
• fix: move supertest to dev dependencies by @andypols in #1328
• fix: convert remaining UI javascript to typescript by @andypols in #1329
• chore: bump git-proxy version to v2.0.0-rc.4 by @jescalada in #1322
• feat: e2e tests using docker compose by @coopernetes in #1165
• chore: remove unused NPM auth token and flags by @jescalada in #1351

New Contributors

• @dgl made their first contribution in #1283

Full Changelog: v2.0.0-rc.3...v2.0.0-rc.4.1

v2.0.0-rc.3

This is a release candidate for GitProxy v2 which includes a addresses a diverse set of security, functionality, stability and performance issues/enhancement requests including:

• optimize pullRemote for large repos #985
• [Feature]: Create admin protected endpoint for creating users #40 & Feature Request: User Creation Endpoint and CLI Command #980
• [Refactor]: Improve configuration loading #32
• (bug) scanDiff fails on force pushes #1008
• chore: add /healthcheck endpoint to the proxy #1197
• Incorrect error message on cloning unauthorized repo #1181
• Investigate duplication of process steps in push approval flow #1196
• Z_DATA_ERROR during push parsing #1040
• Log out with AD auth fails in production #1201

A number of improvements to Git Proxy tests and dependency updates are also included in this release.

What's Changed

• chore(deps): update dependency cross-env to v10 - license-inventory - experimental/license-inventory/package.json by @renovate[bot] in #1173
• fix: prevent DOS when checking an unknown repo by @andypols in #1095
• feat: Create admin protected endpoint for creating users by @dcoric in #981
• chore: add testing documentation and coverage checks by @jescalada in #1147
• chore(deps): update github-actions - workflows - .github/workflows/dependency-review.yml by @renovate[bot] in #1170
• chore(deps): update dependency @types/node to ^22.18.1 - li-cli - experimental/li-cli/package.json by @renovate[bot] in #1190
• fix(deps): update npm - website - website/package.json by @renovate[bot] in #1131
• test: improve repo DB tests and CheckRepoInAuthList tests by @andypols in #1109
• refactor: migrate configuration system from JSON Schema to QuickType by @fabiovincenzi in #1140
• chore(deps): update dependency cypress to v15 - - package.json by @renovate[bot] in #1192
• fix: allowing empty diffs in scanDiff by @fabiovincenzi in #1182
• chore: add /healthcheck endpoint to the proxy by @andypols in #1197
• chore(deps): update github-actions - workflows - .github/workflows/scorecard.yml by @renovate[bot] in #1198
• feat: push speed optimizations by @jescalada in #1189
• fix(deps): update dependency axios to ^1.12.2 - git-proxy-cli - packages/git-proxy-cli/package.json by @renovate[bot] in #1205
• fix: incorrect error message on cloning unauthorized repos by @fabiovincenzi in #1204
• fix: Logout calls localhost in prod; standardise API base resolution by @andypols in #1201
• chore: update to eslint v9 by @06kellyjac in #955
• chore(deps): update dependency lint-staged to v16 - - package.json by @renovate[bot] in #1195
• fix(deps): update npm - li-cli - experimental/li-cli/package.json by @renovate[bot] in #1203
• fix(deps): update npm - - package.json by @renovate[bot] in #1183
• fix(deps): update npm - website - website/package.json by @renovate[bot] in #1208
• chore(deps): update github-actions to v5 - workflows - .github/workflows/unused-dependencies.yml (major) by @renovate[bot] in #1214
• fix(deps): update dependency dotenv to v17 - license-inventory - experimental/license-inventory/package.json by @renovate[bot] in #1215
• fix(deps): update dependency express to v5 - license-inventory - experimental/license-inventory/package.json by @renovate[bot] in #1219
• fix(deps): update dependency express to v5 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @renovate[bot] in #1217
• fix(deps): update dependency express-rate-limit to v8 - - package.json by @renovate[bot] in #1220
• refactor: eliminate duplicate executeChain calls in push approval flow by @fabiovincenzi in #1209
• fix: reimplement push parsing to prevent Z_DATA_ERROR by @kriswest in #1187
• fix(deps): update dependency express-rate-limit to v8 - license-inventory - experimental/license-inventory/package.json by @renovate[bot] in #1221
• fix: linter warnings and CI failure by @jescalada in #1218
• fix(deps): update dependency env-paths to v3 - - package.json by @renovate[bot] in #1216
• fix: "MongoServerError: The _id cannot be changed" when updating users by @andypols in #1230
• fix: bug in using API_BASE with URL by @andypols in #1228

Full Changelog: v2.0.0-rc2...v2.0.0-rc.3

v2.0.0-rc2

This is a release candidate for GitProxy v2 which adds support for SCM providers other than GitHub, (including Gitlab and basic git servers) and prevents proxying for requests for unknown git repositories.

Breaking changes are included in #1043 ( feat(key on repo url): support git hosts other than GitHub + multiple forks) and (also in v2.0.0-rc2) in #973 (associate commits by email).

What's Changed

• test: Implement fuzz tests for processors by @jescalada in #1115
• chore(deps): update github-actions - workflows - .github/workflows/unused-dependencies.yml by @renovate[bot] in #1156
• chore: update npm release workflow to handle pre-releases by @jescalada in #1159
• feat(key on repo url): support git hosts other than GitHub + multiple forks by @kriswest in #1043
• chore: bump version to rc.2 by @jescalada in #1162
• fix: flaky fuzz test errors by @jescalada in #1158
• feat: JWT apiAuthentication UI integration by @jescalada in #1096
• test: fix Cypress test data dependency by @jescalada in #1154
• feat: implement formatting checks to CI by @fabiovincenzi in #1153
• feat: don't forward requests for unknown repos by @kriswest in #1164
• fix(deps): update npm - li-cli - experimental/li-cli/package.json by @renovate[bot] in #1114
• chore(deps): update amannn/action-semantic-pull-request action to v6 - workflows - .github/workflows/pr-lint.yml by @renovate[bot] in #1157
• fix(deps): update npm - - package.json by @renovate[bot] in #1135
• fix: mongoDB client impl issues by @kriswest in #1167
• fix: return 200 status codes on rejection to ensure error message renders in git client by @kriswest in #1178
• fix: render committer and author email links instead of estimated profile links by @kriswest in #1179
• fix: display errors when adding a new repo by @andypols in #1120

Full Changelog: v2.0.0-rc.1...v2.0.0-rc2

v2.0.0-rc.1

This is a release candidate for GitProxy v2. Breaking changes are included in #973 (associate commits by email).

If you encounter any problems, feel free to open an issue!

What's Changed

• fix(deps): update npm - - package.json by @renovate[bot] in #883
• fix: restore user configs being merged with defaults by @coopernetes in #1129
• chore(deps): update github-actions - workflows - .github/workflows/ci.yml by @renovate[bot] in #1127
• chore(deps): update dependency @finos/git-proxy to ^1.19.2 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @renovate[bot] in #1128
• fix(deps): update dependency axios to ^1.11.0 - git-proxy-cli - packages/git-proxy-cli/package.json by @renovate[bot] in #1130
• chore: prepare for 2.x release with rc version by @coopernetes in #1137
• refactor: replace getMissingData action with checkEmptyBranch by @jescalada in #1134
• fix: 946 associate commits by email by @kriswest in #973

Full Changelog: v1.19.2...v2.0.0-rc.1

v1.19.2

❗️ Important security updates ❗️

This release contains security fixes for newly discovered high severity issues. These issues were privately reported to the GitProxy & FINOS teams. Special thanks to the following individuals for their contributions:

• @dgl for the initial report, analysis and reproductions
• @jescalada @fabiovincenzi @06kellyjac for implementing & reviewing the various fixes

The following advisories are resolved in this release:

• GHSA-qr93-8wwf-22g4
• GHSA-xxmh-rf63-qwjv
• GHSA-39p2-8hq9-fwj6
• GHSA-v98g-8rqx-g93g

All GitProxy users & implementations are strongly advised to upgrade to this latest version to receive these critical fixes. Additional bug fixes and enhancements are included below.

What's Changed

• fix: additional user api leaks by @andypols in #1098
• fix(deps): update dependency body-parser to v2 - license-inventory - experimental/license-inventory/package.json by @renovate[bot] in #1087
• chore(deps): update github-actions - workflows - .github/workflows/unused-dependencies.yml by @renovate[bot] in #1112
• fix: updated URL for FINOS community slack channel by @sam-holmes2 in #1011
• docs: update SECURITY.md with reporting guidance by @tabathad in #1117
• fix: dependency vulnerability fixes by @jescalada in #1103
• fix: default config validation error and extras by @jescalada in #1124
• fix: parsePush regression on tmp directory by @jescalada in #1118

New Contributors

• @tabathad made their first contribution in #1117

Full Changelog: v1.19.1...v1.19.2

Version 1.19.1

What's Changed

• fix: prevent non-admin users changing another user's gitAccount by @andypols in #1093
• refactor(tsx): Migrate React components to TSX by @fabiovincenzi in #984
• fix: only trim trailing .git not any match by @06kellyjac in #1094
• chore: bump by patch to v1.19.1 by @jescalada in #1102

Full Changelog: v1.19.0...v1.19.1

Version 1.19.0

What's Changed

• chore(deps): update dependency @types/node to ^22.15.34 - li-cli - experimental/li-cli/package.json by @renovate in #1067
• chore(deps): update dependency @finos/git-proxy to ^1.18.0 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @renovate in #1073
• chore(deps): update github-actions - workflows - .github/workflows/scorecard.yml by @renovate in #1072
• chore(deps): update dependency @finos/git-proxy to ^1.18.2 - git-proxy-plugin-samples - plugins/git-proxy-plugin-samples/package.json by @renovate in #1074
• fix(deps): update dependency eslint to ^9.30.0 - website - website/package.json by @renovate in #1075
• chore(deps): update dependency lint-staged to v16 - license-inventory - experimental/license-inventory/package.json by @renovate in #1076
• chore(deps): update dependency node to v22 - workflows - .github/workflows/unused-dependencies.yml by @renovate in #1077
• chore(deps): update dependency sinon to v20 - - package.json by @renovate in #1078
• fix(deps): update dependency eslint to ^9.30.1 - website - website/package.json by @renovate in #1079
• fix(deps): update npm - li-cli - experimental/li-cli/package.json by @renovate in #1080
• chore(deps): update dependency sinon to v21 - - package.json by @renovate in #1081
• chore(deps): update grafana/grafana docker tag to v12 - license-inventory - experimental/license-inventory/docker-compose.yaml by @renovate in #1082
• fix(deps): update dependency body-parser to v2 - - package.json by @renovate in #1084
• fix(proxy): preserve original Git pack POST streams before validation by @fabiovincenzi in #1060
• feat: mongo connection string & cookie secret from env vars by @coopernetes in #1086
• fix(deps): update dependency zod to ^3.25.73 - li-cli - experimental/li-cli/package.json by @renovate in #1085
• fix: updated README and documentation site with info on community meeting by @sam-holmes2 in #1026
• chore: add @jescalada as a featured maintainer on docs site and remov… by @JamieSlome in #1097
• fix: use a public user object to prevent passwords and other secrets … by @andypols in #1090
• chore: bump by minor to v1.19.0 by @JamieSlome in #1099

New Contributors

• @sam-holmes2 made their first contribution in #1026
• @andypols made their first contribution in #1090

Full Changelog: v1.18.2...v1.19.0