mkilijanek
4667f152cf
ci: upgrade codeql-action from v3 to v4
...
CodeQL Action v3 will be deprecated in December 2026.
Updated init, autobuild, analyze steps to v4.
Reference: https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-23 19:28:05 +01:00
mkilijanek
8c8ba460b9
merge: bring master (Node 24, modern CI) into main
...
Merges all Node 24 migration, docker buildx CI, and workflow fixes from master.
Conflict resolution:
- Dockerfile: use master version (nginx:stable-alpine, docker buildx compatible)
instead of main version (nginx:1.27-alpine with manual TARGETPLATFORM for buildah)
- package.json: auto-merged successfully — master version (10.22.1, Node >=24)
combined with main's security overrides (pbkdf2, sha.js)
Changes brought from master:
- Node 18 → Node 24 across all workflows
- actions/checkout@v3 → @v4, actions/setup-node@v3 → @v4
- docker/build-push-action@v6 replacing redhat-actions/buildah-build
- codeql-action@v2 → @v3 in codeql-analysis.yml
- Separate npm-publish job with id-token provenance
- Weekly scheduled CI build
- codeql-analysis.yml: develop branch removed, security-extended queries
- dependabot.yml: literal assignee instead of invalid template expression
- package.json: newer deps (jimp ^1.6.0, bcryptjs ^3.0.3, @xmldom/xmldom ^0.9.3)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-23 18:37:03 +01:00
mkilijanek
6426d874ed
fix: remove outdated codeql.yml (superseded by codeql-analysis.yml)
...
Old file used codeql-action@v2, checkout@v3, and only targeted master branch.
Replaced by codeql-analysis.yml which uses v3 actions and covers main+master.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-23 18:36:13 +01:00
mkilijanek
b680cb93a0
fix: workflow cleanup and security overrides on master
...
- Remove non-existent 'develop' branch from CodeQL and dependency-review triggers
- Fix invalid template expression in dependabot.yml assignees (use literal username)
- Add npm overrides for pbkdf2 and sha.js security patches
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-23 18:35:42 +01:00
Kili
95c8791e2b
Merge pull request #20 from mkilijanek/claude/upgrade-gchq-master-sglFz
...
Claude/upgrade gchq master sgl fz
2026-02-23 16:46:18 +01:00
Claude
7b5fa8511d
Merge upstream GCHQ master into claude/upgrade-gchq-master-sglFz
...
Incorporates 37 upstream commits from gchq/CyberChef master including:
- Fix: Move Magic checks from Escape to Unescape Unicode Characters (#2195 )
- Paste spreadsheets as text (#2200 )
- Fix Roboto Mono font (#2199 )
- Fix return of buffer for PNG QR image generation (#2125 )
- Update JIMP (#2171 )
- Bump v10.22.1 (#2193 )
- Bump v10.22.0 (#2189 )
- Fixed Percent delimiter for hex encoding (#2137 )
- Added ability to paste Images from Clipboard (#1876 )
- Quoted Printable improvements (#2186 )
- Fix freeze when output text decoding fails (#1573 )
- Fix import operations with special chars (#1040 )
- Add Bech32 encode/decode operations
- Various bug fixes and improvements
Conflict resolution:
- Workflow files: kept Node 24 + actions@v4 (local upgrade)
- package.json: kept jsonwebtoken 9.0.0, fixJimpModule postinstall, added upstream 'tag' script
- package-lock.json: kept local version (consistent with jimp 1.6.0 install)
- sitemap.mjs: kept modern 'with' import assertion syntax
- Code.mjs: kept escaped curly brace regex for Node 24 compatibility
- newMinorVersion.mjs: added upstream ignoredAuthors constant
https://claude.ai/code/session_011xozAMdxys1JF7nLRQsMtg
2026-02-23 09:53:36 +00:00
Kili
23b8b62235
Merge pull request #19 from mkilijanek/codex/create-pr-to-merge-master-gchq-into-master
...
Sync CI workflow updates from master-gchq into master
2026-02-23 10:10:50 +01:00
Kili
37c65ee4be
Migrate project runtime from Node 18 to Node 24
2026-02-23 10:07:36 +01:00
Kili
67180d90a5
Fix flaky JPath/JWT operation tests for stricter runtimes
2026-02-23 09:59:54 +01:00
Kili
b1d279ea7b
Sync CI workflows toward upstream gchq setup
2026-02-23 09:46:43 +01:00
Kili
fa065912cc
Info about what to backport to sync with gchq
2026-02-23 09:27:55 +01:00
CatCatYu
976c8b2d56
Fix: Move Magic checks from Escape to Unescape Unicode Characters ( #2195 )
2026-02-20 17:23:58 +00:00
GCHQ Developer 85297
98fb680a92
Paste spreadsheets as text ( #2200 )
2026-02-20 17:08:11 +00:00
GCHQ Developer 85297
d71dad8568
Fix Roboto Mono font ( #2199 )
2026-02-20 16:10:15 +00:00
GCHQDeveloper581
8df8028f43
Fix return of buffer for PNG QR image generation - resolves #2124 ( #2125 )
...
Co-authored-by: GCHQ Developer 85297 <95289555+C85297@users.noreply.github.com>
2026-02-20 16:07:37 +00:00
GCHQ Developer 85297
c97baa6fdf
Update JIMP ( #2171 )
2026-02-18 11:34:31 +00:00
GCHQ Developer 85297
448cfc8012
Overwrite NGINX maintainer label ( #2194 )
2026-02-18 08:05:10 +00:00
GCHQDeveloper581
9b2868a178
Bump v10.22.1 ( #2193 )
v10.22.1
2026-02-12 10:08:48 +00:00
GCHQDeveloper581
7ba58cd4ce
Fix npm publish - Run "npm ci" and "npm run node" under node 18 then switch to node 24.5 ( #2192 )
...
Fixes a problem where some generated files were not included in the npm package as they hadn't been built.
2026-02-12 09:39:15 +00:00
GCHQDeveloper581
bb41c36578
Bump v10.22.0 ( #2189 )
v10.22.0
2026-02-11 11:59:30 +00:00
GCHQDeveloper581
293f304841
Separate npm publish out into separate job and run with Node 24.5 ( #2188 )
...
Enables trusted publishing of npm package, which requires Node >= 22.14 and npm >= 11.5.1 (npm 11.5.1 is bundled with node 24.5)
main build cannot currently be done with 24.5 due to minor incompatibilities in the codebase.
2026-02-11 09:36:43 +00:00
Benjamin Eriksson
324a23585e
Fixed Percent delimiter for hex encoding ( #2137 )
...
Co-authored-by: GCHQ Developer 85297 <95289555+C85297@users.noreply.github.com>
2026-02-11 09:20:08 +00:00
t-martine
fe69ec5881
Added the ability to paste one or more Images from the Clipboard ( #1876 )
...
Co-authored-by: a3957273 <89583054+a3957273@users.noreply.github.com>
Co-authored-by: GCHQ Developer 85297 <95289555+C85297@users.noreply.github.com>
2026-02-09 20:30:45 +00:00
Wes
595c90a464
Quoted Printable - consistent reference to 'email' ( #2186 )
2026-02-09 10:01:25 +00:00
Zack Zhou
042afe4157
Fix freeze when output text decoding fails ( #1573 )
2026-02-09 09:17:36 +00:00
GCHQ Developer 85297
cc2c6d20fd
Update Browserslist DB ( #2183 )
2026-02-06 17:54:58 +00:00
GCHQ Developer 85297
abbb8496cc
Add contents write permission to releases workflow ( #2182 )
v10.21.0
2026-02-06 12:15:06 +00:00
GCHQ Developer 85297
4ca5157508
Fix release workflow permissions ( #2181 )
2026-02-06 11:34:50 +00:00
GCHQ Developer 85297
eeb39a0b2b
Bump v10.21.0 ( #2179 )
2026-02-06 08:38:36 +00:00
d98762625
0cf7bcaddc
Fix import operations with special chars in them ( #1040 )
...
Co-authored-by: jg42526 <210032080+jg42526@users.noreply.github.com> (fixed test broken by a dependency updated elsewhere)
2026-02-04 16:46:30 +00:00
GCHQ Developer 85297
4e8f0c34f3
Remove custom CodeQL workflow ( #2176 )
2026-02-04 15:26:23 +00:00
GCHQDeveloper581
de3a5ff634
Fix code scanning warnings in workflows ( #2177 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-02-04 15:12:25 +00:00
GCHQ Developer 85297
693b7d86dd
Use NPM trusted publishing ( #2174 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (minor tweaks only)
2026-02-04 14:20:22 +00:00
Thomas
fa34e2fafc
Fix: Correctly parse xxd odd byte hexdumps ( #2058 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
2026-02-04 09:38:25 +00:00
Hügo
1542cadde8
Update Sitemap URLs to Use Valid Paths in sitemap.mjs ( #1861 )
...
Co-authored-by: C85297 <95289555+C85297@users.noreply.github.com>
2026-02-03 18:44:59 +00:00
Alex Gustafsson
64399ad60e
Use recommended GitHub Actions to build image ( #2055 )
...
Co-authored-by: C85297 <95289555+C85297@users.noreply.github.com>
2026-02-03 15:42:46 +00:00
GCHQ Developer C85297
96c93b95f2
Remove version 10 message from banner ( #2169 )
2026-02-03 15:12:41 +00:00
dependabot[bot]
9df82113c4
Bump form-data from 4.0.1 to 4.0.5 ( #2175 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 14:01:18 +00:00
dependabot[bot]
55ef47f645
Bump node-forge from 1.3.1 to 1.3.3 ( #2173 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 13:23:09 +00:00
GCHQ Developer C85297
5e53fe113d
Update crypto browserify ( #2172 )
2026-02-03 12:16:04 +00:00
GCHQDeveloper581
5c49f87727
Update kbpgp package ( resolves #2135 ) ( #2136 )
2026-02-02 10:17:46 +00:00
FS
e0c4957da4
Fix the processing of ALPNs for JA4 to align with new specification update ( #2165 )
2026-01-31 12:01:10 +00:00
Thomas M
9512444eee
Add Bech32 and Bech32m encoding/decoding operations ( #2159 )
2026-01-30 19:02:23 +00:00
みけCAT
dd26c09003
Exclude Delete character from hex dump output ( #2086 )
...
Co-authored-by: GCHQ Developer C85297 <95289555+C85297@users.noreply.github.com>
2026-01-29 15:00:17 +00:00
Paul Hudson
a30f5f1b50
Tiny typo fix in "To Base85" operation ( #2118 )
...
This adjusts spelling in the "To Base85" operation from "delimeter" to
"delimiter".
Co-authored-by: GCHQ Developer C85297 <95289555+C85297@users.noreply.github.com>
2026-01-29 14:32:38 +00:00
GCHQ Developer C85297
b885e8423d
Bump jsonpath-plus ( #2166 )
...
Closes #1928 #1926
2026-01-29 13:40:34 +00:00
C85297
2092e5b20c
10.20.0
v10.20.0
2026-01-28 16:11:57 +00:00
C85297
621331b03e
Update CHANGELOG for v10.20.0
2026-01-28 16:10:51 +00:00
Kili
f3466b97db
Merge pull request #17 from mkilijanek/codex/verify-npm-package-dependencies
...
Adjust Docker build defaults
2025-12-26 18:53:55 +01:00
Kili
a76d6453ac
Merge branch 'main' into codex/verify-npm-package-dependencies
2025-12-26 18:53:05 +01:00