Commit Graph

12305 Commits

Author SHA1 Message Date
CES Marvin
5d3f985ee3 Release version 2.31.0 2.31.0 2022-02-18 12:34:36 +00:00
René Pfeuffer
673aa69755 Adjust changelog for release 2.31.0 2022-02-18 13:25:59 +01:00
Eduard Heimbuch
a50e38077c Fix npe for searchable types which no longer exist because the plugin that provided the type was deleted 2022-02-18 08:19:51 +01:00
Matthias Thieroff
1fe7b0a01e Improve accessibility (#1956)
Fixes several accessibility issues:

- Provide a style for empty table column headers
- Add aria references and aria-labels
- Remove aria references if the referenced element is not rendered
2022-02-17 14:00:16 +01:00
Eduard Heimbuch
9fa0396167 Fix missing css for migration wizard 2022-02-17 10:25:14 +01:00
Eduard Heimbuch
1c2e00455d Improve tooltip accessibility (#1954)
There has been the requirement to improve accessibility for our tooltips by allowing tooltips to be closed via the escape key as well as allowing users to hover over the tooltip text. These combined requirements were not possible with the previous implementation that used a bulma-tooltip extension. That meant we had to implement the full tooltip html and css from scratch. A declared goal was to keep the new implementation as close to the previous look-and-feel as possible. The redundant dependency has been removed in the process.

This is the fixed re-commit of #1938 (Commit 67bd96ea81)

Co-authored-by: Konstantin Schaper <konstantin.schaper@cloudogu.com>
Co-authored-by: René Pfeuffer <rene.pfeuffer@cloudogu.com>
2022-02-16 10:51:30 +01:00
René Pfeuffer
2ededac869 Update RestEasy (#1953)
Updates RestEasy to version 4.7.5.Final.

Co-authored-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
2022-02-15 14:51:09 +01:00
René Pfeuffer
cf52209c1d Revert "improve tooltip accessibility (#1938)" (#1949)
This reverts commit 67bd96ea81, because the changes to the tooltips caused a rendering error for ahead/behind tags for branches.
2022-02-15 12:08:43 +01:00
Matthias Thieroff
44f0046f25 Collapse folders with only one child folder (#1951)
Collapses a folder in code view which only has another folder as its only child. This lets you access a sub-folder which has content directly instead of navigating down the folder tree by clicking every folder separately.

Co-authored-by: René Pfeuffer <rene.pfeuffer@cloudogu.com>
2022-02-15 10:59:32 +01:00
René Pfeuffer
8d9c18c23c Fix changelog entry 2022-02-14 15:06:02 +01:00
René Pfeuffer
211749a5e3 Update docker base image (#1948)
Updates to latest version of adoptopenjdk:
adoptopenjdk/openjdk11:jdk-11.0.14_9-alpine-slim
2022-02-08 09:23:53 +01:00
Eduard Heimbuch
e03afe61ab Adjust reload button on plugin actions (#1946)
Adjust the reload button on plugin actions after restart to be a proper button instead an link styled button.
2022-02-03 14:16:01 +01:00
Eduard Heimbuch
5cbf9e4b32 Link directly to file sources from file history view (#1945)
Link directly to the selected file with the file history sources link instead of the root dir.
2022-02-02 16:13:10 +01:00
Konstantin Schaper
ac06cb7827 fix storyshots 2022-02-02 14:26:27 +01:00
Konstantin Schaper
b47a099d7c login attempt input fields now only allow numbers 2022-02-02 13:54:40 +01:00
Konstantin Schaper
4e3c1ffe02 fix copy button not having pointer cursor 2022-02-02 13:49:14 +01:00
dependabot[bot]
2a53d15deb Bump cached-path-relative from 1.0.2 to 1.1.0 (#1937)
Bumps [cached-path-relative](https://github.com/ashaffer/cached-path-relative) from 1.0.2 to 1.1.0.
- [Release notes](https://github.com/ashaffer/cached-path-relative/releases)
- [Commits](https://github.com/ashaffer/cached-path-relative/commits)

---
updated-dependencies:
- dependency-name: cached-path-relative
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-02 11:18:32 +01:00
dependabot[bot]
5bb69804b9 Bump node-fetch from 2.6.1 to 2.6.7 (#1932)
Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Changelog](https://github.com/node-fetch/node-fetch/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/node-fetch/node-fetch/compare/v2.6.1...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-02 11:18:22 +01:00
dependabot[bot]
ffbb2d4f90 Bump trim-off-newlines from 1.0.1 to 1.0.3 (#1930)
Bumps [trim-off-newlines](https://github.com/stevemao/trim-off-newlines) from 1.0.1 to 1.0.3.
- [Release notes](https://github.com/stevemao/trim-off-newlines/releases)
- [Commits](https://github.com/stevemao/trim-off-newlines/compare/v1.0.1...v1.0.3)

---
updated-dependencies:
- dependency-name: trim-off-newlines
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-02 11:18:12 +01:00
Florian Scholdei
400ac98e3d Add secondary color gradations to styleguide (#1944)
Add secondary colors to styleguide and use them
Replace blib image with transparent version
Reformat styleguide.html with prettier
2022-02-02 10:10:38 +01:00
Sebastian Sdorra
dff5d3aa5b Do not fail on error 502 during restart actions (#1941)
In some rare cases a reverse proxy stops forwarding traffic to scm,
before the response is returned to scm.
In such a case the reverse proxy returns 502 (bad gateway),
so we treat 502 not as error for restart actions.

Co-authored-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
2022-02-02 10:02:46 +01:00
Florian Scholdei
c155d1eb4a Correct .has-border-primary 2022-02-01 18:50:00 +01:00
Sebastian Sdorra
466334aaa7 Update vulnerable version of cron-utils (#1942)
* Update lock files

* Replace usage of org.apache.commons.lang3 with guava

* Update vulnerable version of cron-utils

Update cron-util from version 9.1.3 to 9.1.6.
Version 9.1.6 fixes an arbitrary code execution
vulnerability (CVE-2021-41269).
SCM-Manager is not affected by this issue,
because it is related to the el parsing
of an annotation which we don't use.
2022-02-01 18:06:53 +01:00
Sebastian Sdorra
44be389d0c Enable Gradle dependency locking (#1922)
Enable gradle dependency locking for all subprojects. This change allows us to use dependency ranges, without loosing reproducible builds.
It also makes it easier for third party services such as snyk to detect dependencies and their versions.
2022-02-01 15:14:18 +01:00
Sebastian Sdorra
c74e9984f6 Handle Plugin Center Authentication failures (#1940)
If the plugin center authentication fails,
the plugins are fetched without authentication
and a warning is displayed on the plugin page.

Co-authored-by: Konstantin Schaper <konstantin.schaper@cloudogu.com>
2022-01-31 15:41:12 +01:00
Konstantin Schaper
67bd96ea81 improve tooltip accessibility (#1938)
There has been the requirement to improve accessibility for our tooltips by allowing tooltips to be closed via the escape key as well as allowing users to hover over the tooltip text. These combined requirements were not possible with the previous implementation that used a bulma-tooltip extension. That meant we had to implement the full tooltip html and css from scratch. A declared goal was to keep the new implementation as close to the previous look-and-feel as possible. The redundant dependency has been removed in the process.
2022-01-28 15:32:35 +01:00
Konstantin Schaper
de36c0d09d Fix markdown toggle & only show source copy button on hover (#1939)
A recent update added a button that lets users copy source code. In markdown files, the toggle button covers the copy button visually which does not look good and makes it hard/impossible to use. Additionally, larger markdown files with multiple code blocks have too many visible buttons that clutter the screen. This PR moves the markdown toggle above the actual display and only shows the copy button upon hovering the code that is to be copied.
2022-01-28 14:01:43 +01:00
René Pfeuffer
f20be5dbec Fix changelog entry 2022-01-28 13:13:17 +01:00
René Pfeuffer
0932c6e71f Use a transparent SCMM logo in plugin center (#1936)
This replaces the SCM-Manager logo for the plugins
without own icons with a version with a transparent
background to make it less intense in dark themes.
2022-01-27 11:11:06 +01:00
Florian Scholdei
1da37725a1 Add myCloudogu data processing link (#1935)
Add data processing link to docs and plugin overview
2022-01-27 10:11:17 +01:00
CES Marvin
beff5706a3 Prepare for next development iteration 2022-01-26 10:02:01 +00:00
CES Marvin
8691f217c1 Release version 2.30.1 2.30.1 2022-01-26 09:27:00 +00:00
René Pfeuffer
d6b1ac38ed Fix Jenkinsfile for release build 2022-01-26 10:18:04 +01:00
René Pfeuffer
31040bbeeb Adjust changelog for release 2.30.1 2022-01-26 10:13:41 +01:00
René Pfeuffer
0ac6273eaa Make comparable null safe (#1933)
A request with a sortBy would have lead to a null pointer exception,
when at least one value for the objects is null. This adds checks to
avoid these exceptions. With this, null values are considered to be
less than non-null values.
2022-01-26 10:05:53 +01:00
René Pfeuffer
099c0ad6f6 Fixes input dialog for password field (#1934)
Fixes an javascript error in the create user dialog where the "event" from the password field is a simple string, no event.
2022-01-26 10:05:22 +01:00
dependabot[bot]
872a7260d1 Bump nanoid from 3.1.30 to 3.2.0 (#1931)
Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.30 to 3.2.0.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.1.30...3.2.0)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-26 09:37:27 +01:00
CES Marvin
ed3c81f3a5 Prepare for next development iteration 2022-01-24 13:13:37 +00:00
CES Marvin
8adbf29582 Release version 2.30.0 2.30.0 2022-01-24 12:46:01 +00:00
René Pfeuffer
0611cd4098 Adjust changelog for release 2.30.0 2022-01-21 15:59:17 +01:00
Konstantin Schaper
d0cf976a54 Improve modal accessibility
Implement initial focus for modals. Change all modals including forms to put initial focus on the first input. When Enter is pressed on any input (CTRL + Enter for Textareas), the form is submitted if it is valid.

Co-authored-by: Sebastian Sdorra <sebastian.sdorra@cloudogu.com>
Co-authored-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
2022-01-21 14:25:19 +01:00
dependabot[bot]
d8fcb12402 Bump postcss from 7.0.35 to 7.0.39 (#1913)
Bumps [postcss](https://github.com/postcss/postcss) from 7.0.35 to 7.0.39.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/7.0.39/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/7.0.35...7.0.39)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-21 10:37:43 +01:00
dependabot[bot]
85dd902935 Bump follow-redirects from 1.14.1 to 1.14.7 (#1921)
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.1 to 1.14.7.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.1...v1.14.7)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-21 10:32:58 +01:00
Eduard Heimbuch
49844d1595 Compare branches, tags and revisions (#1920)
Add branch/tag/revision compare to see diffs and changesets between the source and target revisions. This feature is reachable from the branch/tag detail page and also the source code view.

Co-authored-by: Florian Scholdei <florian.scholdei@cloudogu.com>
Co-authored-by: Sebastian Sdorra <sebastian.sdorra@cloudogu.com>
2022-01-20 11:00:49 +01:00
René Pfeuffer
6e555a855a Set HEAD to correct default branch (#1929)
Sets the HEAD for new Git repositories to the default branch (this is 'main' for the default configuration).
This change led to errors in unit tests, that depended on the 'master' branch.

Co-authored-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
2022-01-20 10:19:27 +01:00
Matthias Thieroff
0f01bb82c6 Fix bugs in unit tests which occur on Windows only (#1927)
On Windows it is much more necessary to close files to avoid locked files which prevent deleting a temporary file or folder. Also paths need to be handled differently because of the drive letter and colon appearing on Windows.
2022-01-20 08:48:13 +01:00
Eduard Heimbuch
63ec4e6172 Add security notifications to inform about vulnerabilities (#1924)
Add security notifications in SCM-Manager to inform running instances about known security issues. These alerts can be core or plugin specific and will be shown to every user in the header.

Co-authored-by: Matthias Thieroff <matthias.thieroff@cloudogu.com>
Co-authored-by: Philipp Ahrendt <philipp.ahrendt@cloudogu.com>
Co-authored-by: Sebastian Sdorra <sebastian.sdorra@cloudogu.com>
2022-01-19 11:58:55 +01:00
Eduard Heimbuch
07fa753f80 Encrypt myCloudogu refresh token on file system (#1923)
Encrypt myCloudogu refresh token on file system and update current stored tokens using an update step.
2022-01-19 09:26:01 +01:00
René Pfeuffer
430376bb17 Merge branch 'master' into develop 2022-01-18 10:39:55 +01:00
René Pfeuffer
46b13800a6 Merge tag '2.20.1'
Release version 2.20.1
2022-01-18 10:39:01 +01:00