Merge 1.0.0-rc1 into master branch #24

PaperStrange · 2025-05-19T14:06:26Z

Changes 🏗️

Close task and OKRS from project phase 6 to 7
For more details, refering to this file

Checklist 📋

For code changes:

I have clearly listed my changes in the PR description
[ X I have made a test plan
I have tested my changes according to the test plan:
- All front-end and backend tests documentated in this folder
- Notice for API testing, statistical front component and user jouerney testing, mock data is used
- ...

Example test plan

- Rrefering to folders mentioned above

For configuration changes:

.env.example is updated or already compatible with my changes
docker-compose.yml is updated or already compatible with my changes
I have included a list of my configuration changes in the PR description (under Changes)

Examples of configuration changes

refering to README.md in the project root path

…enhance documentation

…://github.com/PaperStrange/TourGuideAI/actions/workflows/ci-cd.yml/badge.svg)](https://github.com/PaperStrange/TourGuideAI/actions/workflows/ci-cd.yml)

…TourGuideAI/actions/workflows/ci-cd.yml

…e documentations

…ocesses, and remove obsolete files fix issue #16

…nto project_lifecycle directory fix issue #13

…wright for testing and improve stability test instructions fix issue #12

…sults as artifacts; update documentation to reflect new testing processes fix issue #12

…ge and enhance survey components

…t code 1

…ing API keys

.github/workflows/ci-cd.yml

+        grep -r --include="*.js" --include="*.jsx" --include="*.ts" --include="*.tsx" "\/\* global " src/
+
+    - name: Install PowerShell
+      uses: bjompen/UpdatePWSHAction@v1.0.1


.github/workflows/ci-cd.yml


    - name: Set up AWS CLI
-      uses: aws-actions/configure-aws-credentials@v1
+      uses: aws-actions/configure-aws-credentials@v4


.github/workflows/ci-cd.yml


    - name: Set up AWS CLI
-      uses: aws-actions/configure-aws-credentials@v1
+      uses: aws-actions/configure-aws-credentials@v4


.github/workflows/ci-cd.yml

+      run: npm ci
+
+    - name: Install PowerShell
+      uses: bjompen/UpdatePWSHAction@v1.0.1


.github/workflows/dependency-updates.yml

+
+      # Use Dependabot to update dependencies
+      - name: Enable Dependabot
+        uses: dependabot/fetch-metadata@v1.6.0


.github/workflows/security-scan.yml

      # OWASP ZAP Baseline Scan
      - name: ZAP Baseline Scan
-        uses: zaproxy/action-baseline@v0.7.0
+        uses: zaproxy/action-baseline@v0.9.0


.github/workflows/security-scan.yml


+      # License compliance scanning
+      - name: License Scanning
+        uses: fossas/fossa-action@main


.github/workflows/stability-tests.yml

+          NODE_ENV=test npm test -- tests/security/security-audit.test.js --passWithNoTests
+
+      - name: Install PowerShell
+        uses: bjompen/UpdatePWSHAction@v1.0.1


.github/workflows/stability-tests.yml

scripts/generate-keys.js

+if (fs.existsSync(gitignoreFile)) {
+  let gitignoreContent = fs.readFileSync(gitignoreFile, 'utf8');
+  if (!gitignoreContent.includes('generated-keys.txt')) {
+    fs.appendFileSync(gitignoreFile, '\n# Security keys\nscripts/generated-keys.txt\n');


scripts/run-security-audit.js

scripts/run-user-journeys.js

scripts/utils/test-script-template.js

+           (headerEnd < content.length ? content.substring(headerEnd) : '');
+
+  // Write updated content
+  fs.writeFileSync(summaryFile, content);


src/features/beta-program/services/FeatureRequestService.js

src/features/beta-program/services/SurveyService.js

src/features/beta-program/services/analytics/AnalyticsService.js

…controlled format string Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

…contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

…led command line Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

…controlled format string Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

…led command line Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

…controlled format string Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

…contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

scripts/run-security-audit.js

+      spawn('cmd', ['/c', 'start', '/b', zapPath, '-daemon', '-config', 'api.disablekey=true'], {
+        stdio: 'ignore',
+        detached: true
+      }).unref();


PaperStrange · 2025-05-19T14:36:09Z

Securty check failures and warnings shall be addressed with issure here dynamically after this pr

PaperStrange and others added 30 commits March 23, 2025 15:05

Feat: add feedback and visualization components for beta launch

0e3e40b

Feat: embed RBAC system

e019bc5

Feat: add email-verification and reset logic

5826c94

Feat: enhance onboarding flow and add statical dashboard

caa55a3

Docs: update with new features and new test cases

e1b6f09

Fix: remove security vulnerabilities

4a5a40b

Docs: add security.md

6a62003

Feat: init github action and workflow fix #issue 3

40908ef

Feat: implement secure token vault system for API key management and …

b6b7b46

…enhance documentation

Fix: apply new token security solution to related codebase

7baa93c

Fix: fix issue #3 workflow error [![TourGuideAI CI/CD Pipeline](https…

9d31f13

…://github.com/PaperStrange/TourGuideAI/actions/workflows/ci-cd.yml/badge.svg)](https://github.com/PaperStrange/TourGuideAI/actions/workflows/ci-cd.yml)

Fix: fix issue #3 fix workflow error https://github.com/PaperStrange/…

8ef2be9

…TourGuideAI/actions/workflows/ci-cd.yml

Fix: fix issue #3 enhance frontend stability and error handling updat…

2afd0c6

…e documentations

Docs: update package lists

faa62de

Docs: adjust template issues fix issue #9

3654734

Test: run npm test, records and fix errors

7307adc

Docs: update project structure and documentation, enhance workflow pr…

f5f41c6

…ocesses, and remove obsolete files fix issue #16

Docs: reorganize project documentation structure, consolidate files i…

34790a7

…nto project_lifecycle directory fix issue #13

Docs: add visualization for .md files and project workflows

149f0bd

Feat: update dependencies and enhance testing documentation; add Play…

06c7bf4

…wright for testing and improve stability test instructions fix issue #12

Feat: Enhance CI/CD workflow by adding stability tests and storing re…

67cb55b

…sults as artifacts; update documentation to reflect new testing processes fix issue #12

Feat: add more stability tests to align with the test plan

28ca45c

Fix: add stability test documentation; restructure test results stora…

6354047

…ge and enhance survey components

Feat: update github workflow and add new README.MD

bb82ba8

Docs: update file relationship

85b4707

Feat: complete okr for Beta Program Infrastructure

69db220

Feat: create heatmap visualization

e25a538

Docs: rectify the wrong status marks according to the programming codes

3e34f08

Feat: embed hotjar service

ec83194

Feat: expand User Testing Program with new tasks and UI components

ed354de

PaperStrange added 9 commits May 16, 2025 15:49

Fix: fix Setup PowerShell Execution Policy Process completed with exi…

0b736c2

…t code 1

Fix: fix Run Stability Tests Process completed with exit code 64

7550781

Fix test execution issues

0f58963

Fix: fix Run Feature Tests Process completed with exit code 1

efce795

Docs: add introduction to api config and verification

03e9830

Docs: expand API configuration section with detailed steps for obtain…

894efdb

…ing API keys

Version: update package version and version timeline

178c34b

Docs: remove duplicated file

111d7dd

Fix: add missing file

070e521

PaperStrange self-assigned this May 19, 2025

PaperStrange added good first issue Good for newcomers release new version release labels May 19, 2025

github-advanced-security bot found potential problems May 19, 2025

View reviewed changes

PaperStrange and others added 11 commits May 19, 2025 22:13

Fix: Potential fix for code scanning alert no. 53: Use of externally-…

570a451

…controlled format string Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 41: Workflow does not …

65ad0ce

…contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 58: Indirect uncontrol…

7693050

…led command line Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 55: Use of externally-…

a130d5c

…controlled format string Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 57: Indirect uncontrol…

6e523e4

…led command line Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 33: Log injection

5d19ec4

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 52: Insecure randomness

10776f5

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 56: Use of externally-…

34a8270

…controlled format string Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 54: Use of externally-…

50d0e62

…controlled format string Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 40: Workflow does not …

da0baf8

…contain permissions Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Fix: Potential fix for code scanning alert no. 34: Log injection

e3bab74

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

github-advanced-security bot found potential problems May 19, 2025

View reviewed changes

PaperStrange closed this May 19, 2025

PaperStrange reopened this May 19, 2025

PaperStrange merged commit 5a426f3 into master May 19, 2025
8 of 11 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Merge 1.0.0-rc1 into master branch #24

Merge 1.0.0-rc1 into master branch #24

Uh oh!

PaperStrange commented May 19, 2025

Uh oh!

Check warning

Check warning

Check warning

Check warning

Check warning

Check warning

Check warning

Uh oh!

Check warning

Uh oh!

Check failure

Uh oh!

Uh oh!

Uh oh!

Check failure

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Check warning

PaperStrange commented May 19, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Merge 1.0.0-rc1 into master branch #24

Merge 1.0.0-rc1 into master branch #24

Uh oh!

Conversation

PaperStrange commented May 19, 2025

Changes 🏗️

Checklist 📋

For code changes:

For configuration changes:

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Uh oh!

Check warning

Uh oh!

Uh oh!

Check failure

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Check failure

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Check warning

Uh oh!

Uh oh!

PaperStrange commented May 19, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants