Skip to content

feature: Platform hardening and infrastructure updates #415

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
plingdevelop wants to merge 462 commits into
base: master
Choose a base branch
from
Open

feature: Platform hardening and infrastructure updates #415

plingdevelop wants to merge 462 commits into from

Conversation

@plingdevelop
Copy link

@plingdevelop plingdevelop commented Dec 22, 2025

Overview

This PR focuses on platform hardening and infrastructure-level improvements.
It modernizes the runtime environment, strengthens Web UI access control,
and improves internationalization and operational stability.

Changes

  1. Updated the runtime to Node.js v24 and modernized core dependencies, including migration to AWS SDK v3.
  2. Improved internationalization support by introducing an i18n-style helper, adding translations, and enabling interpolation.
  3. Enhanced operational stability with improved TLS handling for Redis and MySQL, and reduced noise from ignorable connection errors.
  4. Added documentation for CodePush CLI login and access token issuance.
  5. Strengthened Web UI access control by introducing a centralized shouldHideWebUI guard and an explicit WEB_UI_ALLOW environment flag.
  6. Added IP-based access enforcement for Web UI–related routes.

Issues

  • N/A

rocwind and others added 30 commits February 8, 2022 10:45
@rocwind
chore: update README
ed6e08d
@rocwind
refactor: move test to tests/
749912e
@rocwind
chore: update install docs
7644969
@rocwind
feat: add typescript support
6b1a5d7
@rocwind
chore(release): 1.2.0
9f14a9d
@rocwind
chore: gitignore tsc generated bin/
e3ad514
@rocwind
refactor: turn top level app/www to ts
76d8898 
BREAKING CHANGE: drop CONFIG_FILE support, please use env variable config items
@renovate-bot
fix(deps): update dependency sequelize to v6.16.0
e3bb1e4
@rocwind
Merge pull request lisong#113 from shm-open/renovate/sequelize-6.x
987261b 
fix(deps): update dependency sequelize to v6.16.0
@rocwind
refactor: turn models/ to ts
7dfe67e
@rocwind
refactor: add some logs in release api
e20f2c6
@rocwind
feat!: drop upyun support
57bbdc5
@rocwind
refactor: turn app-error to ts
413f35b
@rocwind
refactor: turn account-manager to ts
f2b839a
@rocwind
refactor: turn client-manager to ts
78d42d0
@rocwind
fix: update deps redis to v4, reuse the same redis client without quit
98c2ca6
@rocwind
refactor!: drop codePushWeb redirect support
255ea15
@renovate-bot
fix(deps): update dependency sequelize to v6.16.1
568a5b0
@renovate-bot
fix(deps): update dependency aws-sdk to v2.1072.0
82f41e0
@rocwind
refactor: turn package-manager to ts
e067aed 
BREAKING CHANGE: drop is_use_diff_text support
@rocwind
refactor: turn core/const to ts
b721f2a
@rocwind
refactor: rename core/const.js to ts
be219b6
@rocwind
Merge pull request lisong#114 from shm-open/renovate/sequelize-6.x
145f5f0 
fix(deps): update dependency sequelize to v6.16.1
@rocwind
Merge pull request lisong#111 from shm-open/renovate/aws-sdk-2.x
592ca1a 
fix(deps): update dependency aws-sdk to v2.1072.0
@rocwind
chore(release): 2.0.0
2bd6221
@rocwind
fix(deps): update kv-logger to 0.5.1
6289835
@rocwind
fix(deps): update kv-logger to 0.5.2 and fix build issue
cae80fe
@renovate-bot @renovate
chore(deps): update dependency @shm-open/eslint-config-bundle to v1.8.2
2ab18d4
@renovate-bot @renovate
chore(deps): update dependency @types/node-fetch to v2.6.0
932faf2
@renovate-bot @renovate
chore(deps): update dependency @types/node-fetch to v2.6.1
886d740
renovate bot and others added 30 commits August 27, 2022 18:09
@renovate
chore(deps): update dependency @types/validator to v13.7.6
1e97820
@renovate
chore(deps): update dependency concurrently to v7.4.0
faa62d5
@renovate
chore(deps): update dependency @types/lodash to v4.14.185
553f122
@renovate
chore(deps): update dependency typescript to v4.8.3
d715711
@renovate
chore(deps): update dependency @types/validator to v13.7.8
fa4acea
@renovate
chore(deps): update dependency @types/lodash to v4.14.186
5f51e87
@renovate
chore(deps): update dependency typescript to v4.9.3
da46858
@renovate
chore(deps): update dependency @types/lodash to v4.14.189
3ee1387
@renovate
chore(deps): update dependency @types/validator to v13.7.10
4ff7770
@renovate
chore(deps): update dependency @types/lodash to v4.14.194
b247b1d
@renovate
chore(deps): update dependency typescript to v4.9.5
5207e30
@renovate
chore(deps): update dependency @types/lodash to v4.14.195
23fefba
@billxie1988
Add npm scripts
194acbb
@msun4100
chore: remove .env from repo
a2a7943
@plingdevelop
feat: update Node.js to 24.6.0 and apply Korean locale default configs
13db771
@plingdevelop
chore: add AWS_S3_KEY_PREFIX environment variable support.
e9bead8
@plingdevelop
chore: pin Node.js and npm versions in package.json
c618ac1
@plingdevelop
fix: add TLS Redis support by using REDIS_TLS_URL/REDIS_URL and fallb…
bc6187e 
…ack to legacy config
@plingdevelop
fix: add MySQL TLS support using dialectOptions.ssl and DB_SSL_REQUIR…
e15e85c 
…ED env
@plingdevelop
fix: add rejectUnauthorized:false to Redis TLS socket to handle self-…
9a9dcbc 
…signed certificate chain
@plingdevelop
chore: suppress ignorable Cloud Redis idle disconnect errors and avoi…
80f086d 
…d stack logging
@plingdevelop
chore: add localses/ko.json
ca29c2a
@plingdevelop
fix: clean prerelease suffixes before semver padding in parseVersion …
b8b5ed3 
…to match deployments (e.g. 2.10.2-dev-01 -> 2.10.2)
@plingdevelop
chore: add i18n translations for login handler error messages
a5146ec
@plingdevelop
refactor: add i18n-style function with interpolation and introduce Ap…
4d9ae3f 
…pErrorI18n class
@plingdevelop
refactor: replace legacy aws-sdk S3 upload with AWS SDK v3 (same buck…
6660845 
…et/key behavior)
@plingdevelop
feat: enforce web UI access control on index, auth, and users routes …
6425254 
…using ipWhitelistOnly and webUiGuard middleware
@plingdevelop
feat: control web UI access via shouldHideWebUI and WEB_UI_ALLOW
6763eaa
@plingdevelop
chore: add docs for login and access token issuance
7c306cd
@plingdevelop
Merge branch 'master' into release/platform-hardening-and-infra-updates
d6f48ce
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

9 participants

@plingdevelop @rocwind @renovate-bot @kbrownlees-csl @minomikula @byronigoe @ryanypm @billxie1988 @msun4100