Skip to content

CHANGELOG.md

Latest commit

 

History

History
257 lines (195 loc) · 16.7 KB

CHANGELOG.md

File metadata and controls

257 lines (195 loc) · 16.7 KB

Changelog

All notable changes to airgap-cpp-devkit are documented here.

Format follows Keep a Changelog. Versions follow Semantic Versioning.

Unreleased

[1.3.4] — 2026-05-04

Fixed

Air-gap correctness

  • server/internal/api/network.go — internet probes (/api/network, /api/updates, update download) are now gated behind allow_egress in devkit.config.json (defaults false); previously the server unconditionally dialled 8.8.8.8:53 and api.github.com on every /api/updates call, breaking the air-gap contract
  • examples/devkit.config.json — added allow_egress: false field so the template is explicit; server/internal/config/config.go gains the matching AllowEgress field

Tool install failures

  • tools/dev-tools/git/setup.sh — now exits 0 with a "skipping" message on Linux (was exit 1); matches the pattern already used by notepadpp, servy, sourcetree, and grpc

Authentication

  • server/main.go — browser auto-open URL corrected from ?token= to ?devkit_token=; the auth handler requires devkit_token but the launch URL was using the wrong parameter name, causing every auto-open to return 401

Documentation

  • README.md — Configuration section updated: setup_complete and allow_egress now shown in the example block with explanation; Network status and Update checker feature rows clarified to reflect the egress gate; First-run setup note corrected (was describing the wrong condition)

1.3.3 — 2026-05-03

Fixed

Air-gap / install

  • scripts/build-server.sh — removed unconditional go mod tidy + go mod download; build now uses -mod=vendor when server/vendor/ is present; exits with a clear error when GOPROXY=off and the vendor dir is absent instead of silently reaching out to the network
  • scripts/install-cli.sh step 1 — no longer calls git submodule update when prebuilt/ is already populated; in a true air-gap (no network) it warns and continues rather than hard-failing the entire install

Server API

  • server/internal/api/auth.go — GET /auth/bootstrap now reads ?devkit_token= (was ?token=), matching the token middleware and README; using the documented query parameter now correctly sets the session cookie
  • server/internal/api/handlers.go — prefixOverridePath moved to ~/.config/airgap-cpp-devkit/prefix (via os.UserConfigDir()); previously pointed at the nonexistent manager/src/… path, causing POST /api/prefix to always return 500
  • packages/pip-packages/devkit.json — corrected setup path from languages/python/setup.sh (resolved to a nonexistent sibling) to ../../tools/languages/python/setup.sh; GET /install/pip-packages no longer returns "No such file or directory"

Tool install failures

  • tools/dev-tools/vscode-extensions/setup.sh — VSIX_DIR now tries prebuilt/dev-tools/vscode-extensions/ first, then falls back to prebuilt/dev-tools/vscode/extensions/ and prebuilt/dev-tools/vscode/; was hard-coded to the missing vscode-extensions/ path
  • tools/toolchains/ninja/setup.sh — tar member changed from ninja to ./ninja to match archive entry format; extraction no longer fails with "Not found in archive"
  • tools/toolchains/gcc/setup.sh — non-root Linux install now uses rpm2cpio | cpio -idmv to extract RPM payloads into $PREFIX; previously hard-exited with "Root required" for non-root users despite README claiming user-prefix mode is supported

Server setup gate (H7)

  • server/internal/config/config.go — on a fresh install with no devkit.config.json, SetupComplete now defaults to true; every GET /api/* no longer silently 302-redirects to /setup before the user has a chance to complete the wizard

Launch script

  • scripts/launch.sh — default port corrected 8080 → 9090 to match README and devkit.config.json documentation
  • scripts/launch.sh — _free_port() now uses ss -ltnp/lsof on Linux instead of netstat -ano (which parses Windows column layout and misidentifies Linux's Timer column as a PID)
  • scripts/launch.sh — --yes, --profile, --prefix, --admin, --rebuild flags are now forwarded to install-cli.sh when the server binary is missing and the script falls back to CLI install; previously all CLI flags were silently dropped
  • scripts/status.sh — stale tools/toolchains/clang/style-formatter/ paths updated to tools/toolchains/llvm/style-formatter/
  • scripts/install-cli.sh — header comment updated: removed stale Python 3.8+ requirement, corrected port reference to 9090, replaced clang path with llvm

1.3.2 — 2026-05-01

Added

  • scripts/sign-binaries.sh — Authenticode (Windows, via osslsigncode or signtool) and GPG detached-signature (Linux) support
  • scripts/verify-signatures.sh — verify Authenticode and GPG signatures on prebuilt binaries
  • scripts/virustotal-scan.sh — VirusTotal API v3 scan with JSON report output; supports files >32 MB via large-file upload URL
  • ci/sign.sh — thin CI entry-point that calls scripts/sign-binaries.sh
  • .github/workflows/sign-and-scan.yml — manual workflow_dispatch workflow to sign binaries and/or run VirusTotal scan in CI
  • osslsigncode 2.13 entry in scripts/download-prebuilt.sh (Windows zip + Linux source archive)

Changed

  • scripts/release.sh — integrated signing (--skip-sign) and VirusTotal scan (--skip-vt) steps; both are run by default when env vars are present
  • .github/workflows/build-llvm-rhel8.yml — actions/upload-artifact v4.6.0 → v7.0.1; actions/download-artifact v4 → v8.0.1 (pinned SHA)
  • .github/workflows/smoke-test.yml — actions/upload-artifact v4.6.0 → v7.0.1 (pinned SHA)
  • .gitignore — added .claudeignore
  • Server binaries rebuilt against current Go toolchain

1.3.1 — 2026-05-01

Fixed

  • scripts/launch.sh, scripts/uninstall.sh, tests/check-installed-tools.sh — removed unused variables flagged by ShellCheck (SC2034)
  • scripts/pkg.sh — fixed printf format/argument mismatch (SC2183) by splitting composite argument into two separate args
  • tests/run-tests.sh, tests/check-installed-tools.sh — added ShellCheck source directive for non-constant source paths (SC1090)
  • tests/validate-manifests.sh — removed redundant quotes around regex RHS in [[ =~ ]] (SC2076)

Changed

  • Go deps: go-chi/chi v5.2.2 → v5.2.5, golang.org/x/text v0.22.0 → v0.36.0; server binaries rebuilt
  • Python build deps: setuptools>=75, wheel>=0.45

1.3.0 — 2026-05-01

Changed

  • Repository layout — aligned to project standard: ci/ (renamed from .ci/), scripts/launch.sh, scripts/install-cli.sh, scripts/uninstall.sh (moved from root), docs/TOOLS.md (moved from root), ci/Dockerfile.rhel8-test (moved from root)
  • CI workflows — ci.yml thinned to call ci/lint.sh, ci/test.sh, and ci/smoke.sh; server health-check logic extracted to ci/smoke.sh
  • All Jenkinsfile, .gitlab-ci.yml, smoke-test.yml, and rhel8-test.yml references updated for new script paths
  • scripts/launch.sh and scripts/install-cli.sh internal path resolution updated for new location in scripts/

Added

  • ci/build.sh, ci/test.sh, ci/lint.sh, ci/release.sh, ci/smoke.sh — canonical CI entry-point scripts
  • .github/CODEOWNERS — primary maintainer assigned for all files and CI paths
  • .github/dependabot.yml — weekly dependency updates for Go modules, pip, and GitHub Actions
  • docs/assets/ — home for project screenshots and diagrams
  • examples/ — placeholder for runnable configuration examples
  • packages/python/src/airgap_devkit/py.typed — PEP 561 typed package marker
  • packages/python/.python-version — pinned Python version for the packaging environment
  • .pre-commit-config.yaml — ruff lint/format and standard pre-commit hooks

1.2.1 — 2026-05-01

Fixed

  • Dockerfile.rhel8-test — RHEL 8 CI $(ldd --version | head -1) command substitution was evaluated by the outer /bin/sh and the result embedded unquoted, causing bash to choke on the parentheses in ldd (GNU libc) 2.28 with a syntax error; wrapped the substitution in escaped double quotes so the parentheses are safely quoted when bash receives the string
  • .github/workflows/ — updated actions/checkout from v4.2.2 (Node.js 20, deprecated) to v4.3.1 (Node.js 24) across all three workflow files

1.2.0 — 2026-05-01

Added

  • Manual install fallback — when the devkit-ui cannot complete an installation, a "Show manual install commands" button appears in the terminal drawer; clicking it opens a modal with tabbed Windows / Linux steps, pre-filled copy-ready shell commands, and split-archive reassembly instructions generated from GET /api/tool/{id}/manual-install
  • GET /api/tool/{id}/manual-install API endpoint — returns platform-specific env block, install command, custom prefix example, split-archive reassembly commands, and per-platform notes
  • scanPrebuiltParts — server-side scanner that finds .part-* files in prebuilt/ and builds cat | tar reassembly commands for each split archive
  • scripts/manual-install.sh — CLI fallback installer; --list enumerates tools, --tool <id> installs, --prefix sets a custom path, --verify-only confirms split parts are present
  • docs/manual-install.md — step-by-step manual install guide for Windows (Git Bash) and Linux, with tool-specific examples, manual split-archive reassembly commands, receipt creation, PATH wiring, and troubleshooting table
  • .github/workflows/rhel8-test.yml — CI workflow that builds Dockerfile.rhel8-test and runs the full install + smoke-test suite inside UBI 8.10 (RHEL 8 / glibc 2.28); triggers on install-related path changes, weekly Monday schedule, and workflow_dispatch

Fixed

  • install-cli.sh — added --admin flag (selects system-wide install prefix); Jenkinsfile and .gitlab-ci.yml both pass --admin when ADMIN_INSTALL=true but the flag was previously unrecognised, crashing the install step
  • Jenkinsfile and .gitlab-ci.yml server-ops stage — all API calls now include X-DevKit-Token header; auth.go requires the token for every route except /health, /auth/bootstrap, and /static/, so every curl to /api/config, /api/health/tools, etc. was returning 401
  • .gitlab-ci.yml — replace fragile /proc/*/cmdline PID scan in after_script with a .server.pid file (after_script runs in a fresh shell and cannot access variables set in the main script)

1.1.0 — 2026-04-30

Added

  • First-run setup wizard — /setup page with animated gradient UI; server redirects all requests there until setup is complete (setup_complete flag in devkit.config.json)
  • Team Config Repository sync — configure a git repo URL in Settings; devkit auto-syncs team config on every launch and provides a manual sync button with last-sync status indicator
  • server/internal/team/ package — CloneOrPull, LoadConfig, LastCommit helpers for team config git sync
  • setupCheck middleware — enforces setup wizard flow on first launch before any dashboard access
  • validateRepoURL — server-side validation for team config repo URL input
  • sanitizeDisplayName — sanitization for display name fields
  • GET /api/team/status and POST /api/team/sync API endpoints for team config sync
  • Dashboard installed/all filter — clickable stat chip to toggle between all tools and installed-only view
  • escHtml and escJs helper functions in dashboard JS to prevent XSS in dynamic content
  • GitHub update version badges in the dashboard update checker UI
  • scripts/release.sh — atomic version bump, Go binary build, Python wheel build, and optional PyPI upload
  • scripts/download-prebuilt.sh — download prebuilt binaries from GitHub releases
  • packages/python/ — PyPI package source (pyproject.toml, __main__.py, __init__.py, stage-binaries script)
  • dist/ to .gitignore — wheel build artifacts are no longer tracked
  • .github/profile/README.md — GitHub org profile landing page

Changed

  • devkit.config.json schema: added team_config_repo (string) and setup_complete (bool) fields
  • /api/config accepts team_config_repo; triggers background sync when the repo URL changes
  • Removed 7zip from the built-in cpp-dev and devops profile tool lists
  • .gitignore: fixed .pyirc typo → .pypirc; added dist/ build artifact exclusion
  • README.md: updated version reference to v1.1.0

1.0.1-rc.2 — 2026-04-26

Changed

  • .gitignore — added .devkit-token and TLS certificate exclusions
  • Updated prebuilt/ submodule to v1.0.1-rc.2 binaries

1.0.0-rc.1 — 2026-04-25

Added

  • CONTRIBUTING.md — dual-licensing CLA with copyright assignment and patent grant
  • CHANGELOG.md — Keep a Changelog format with full backfilled history
  • SECURITY.md — private disclosure policy, SLA table, scope definition, security design notes
  • CODE_OF_CONDUCT.md — professional conduct standards and enforcement contact
  • .github/ISSUE_TEMPLATE/bug_report.md — structured bug report template
  • .github/ISSUE_TEMPLATE/feature_request.md — feature request template with air-gap compatibility checklist
  • .github/ISSUE_TEMPLATE/config.yml — issue chooser with security advisory, discussions, and commercial licensing links
  • .github/pull_request_template.md — PR checklist enforcing binary policy, SBOM, syntax checks
  • .github/FUNDING.yml — GitHub sponsor button placeholder
  • SUPPORT.md — help channels: issues, discussions, security email, commercial contact
  • AGPL v3 license badge and CI badge in README
  • Contributing and License sections in README with dual-licensing note

Changed

  • Version bumped to v1.0.0-rc.1 — first release candidate
  • LICENSE — relicensed from custom Source-Available License v1.0 to GNU Affero General Public License v3.0
  • SECURITY.md — corrected TLS note: --tls auto-generates a self-signed certificate
  • .editorconfig — added Go (tabs), JSON (2-space), and Makefile (tabs) sections

0.2.0-alpha.2 — 2025-04-19

Added

  • Session token authentication — one-time bootstrap redirect on first launch; token saved to .devkit-token
  • Optional HTTPS support — pass --tls-cert and --tls-key to launch.sh
  • Response header hardening (X-Content-Type-Options, X-Frame-Options, Cache-Control)
  • VS Code integration tool entry

Changed

  • DevKit Manager is now a single pre-compiled Go binary; no Python, pip, or runtime dependencies required
  • launch.sh selects the correct binary for the current platform automatically

0.2.0-alpha.1 — 2025-04-13

Added

  • CI/CD pipeline (GitHub Actions): build + smoke-test matrix across Windows and RHEL
  • Atlassian integration placeholders
  • Layout configuration support in devkit.config.json
  • My Team button relocated to top bar for quicker access

Changed

  • Top bar height adjusted for denser layout
  • Profile cards and settings panel layout polish

0.1.0 — 2025-03

Added

  • Initial air-gapped C++ developer toolkit
  • FastAPI + HTMX devkit-ui with SSE live install output
  • Tool auto-discovery from devkit.json per tool directory
  • Install receipt tracking (INSTALL_RECEIPT.txt)
  • Air-gap wheel vendoring under tools/dev-tools/devkit-ui/vendor/
  • Multi-profile support: cpp-dev, devops, minimal, full
  • Team config export/import (GET /api/export, POST /api/import)
  • Update checker comparing installed version vs current devkit.json
  • SBOM generation (scripts/generate-sbom.sh → sbom.spdx.json)
  • Windows 11 (Git Bash) and RHEL 8 (Bash 4.x) support