h2oai/wave

📋 Changes

• Fixed
• Allow running starlette > 1.0

📋 Changes

• Security
• security: Bump net and crypto packages.
• security: Bump Go version.

📋 Changes

• Security
• security: Bump go version to get rid of CVEs.

📋 Changes

• Fixed
• Pin Starlette version to < 1 to avoid its breaking change. #2490

📋 Changes

• Security
• security: Bump Go version to clean up CVEs.

📋 Changes

• Security
• security: Bump go-jose

📋 Changes

• Security
• security: Validate next param.
• security: Increase enthropy, proper nonce handling, use secure cookies when tls is set
• security: Bump Go to 1.25 (#2487)

📋 Changes

• Security
• security: Bump Go to 1.25 (#2487)

📋 Changes

• Security
• security: Bump Go version to remove CVEs.

📋 Changes

• Added
• New: Add ARM64 build support for all platforms (#2485)

📋 Changes

• Security
• security: Bump Go version to get rid of CVEs.

📋 Changes

• Security
• security: Bump crypto package.

📋 Changes

• Security
• Bump go version to 1.24.11.

📋 Changes

• Security
• Bump go version to 1.24.9.

📋 Changes

• Security
• Bump Go to 1.23.12.

📋 Changes

• Security
• Bump Go oauth package to remove reported CVEs. https://github.com/h2oai/wave/commit/331f0d20aa80661ada507fdfa30b6108c1bbba07

📋 Changes

• Fixed
• Use proper parentheses in appendChild override logic.
• Security
• Bump Go version to address CVEs.

📋 Changes

• Security
• Allow setting stricter CSP. (#2460)
• Make session cookie httpOnly to not be accessible from client JS.

📋 Changes

• Security
• Bump golang.org/x/net

📋 Changes

• Fixed
• Allow dynamic change of table selection #2445 (#2452)
• Security
• Bump Go version

📋 Changes

• Changed
• Drop support for legacy browsers.
• Security
• Bump Babel to resolve critical vulnerabilities.

📋 Changes

• Security
• Upgrade go-oidc to v3.

📋 Changes

• Fixed
• Preserve chatbot feedback after data change #2442 (#2443)
• Security
• Upgrade golang.org/x/net to v0.34.0

📋 Changes

• Fixed
• Turn off TLS verification before every other http calls so that it covers everything. Closes #2323
• Security
• Bump golang.org/x/crypto (https://github.com/h2oai/wave/pull/2440)

📋 Changes

• Added
• New: Emit event on table group open/collapse #2133 (#2402)
• Docs: Proper link to py client auth class. (#2434)
• Fixed
• Add exclusion for disabled choices in checklist select and deselect all (#2428) #2427
• Progress_table_cell_type floating point rounding issues #2380 (#2415)
• Dropdown of filterable columns not always visible and missing hinting dots for long column names #2400 (#2414)
• Conform standalone button width to its container #2361 (#2390)