v0.3.0

v0.3.0

Highlights

• Migrated auth store to Zustand with AuthEffects; preserved useAuth API.
• Visibility-based session refresh on tab focus with 30s cooldown.
• Preserved full intendedPath during login redirects.
• Added dependency-audit workflow and bundle analysis script.
• Docs/RFC updates and console hygiene.

Added

• CI: Dependency Audit workflow (dependency-audit.yml) runs npm audit on runtime deps; fails on High/Critical, summarizes results in PR/job summary.
• Security docs: dependency audit policy and fallbacks (docs/security/dependency-audit.md).
• Bundle analysis script (npm run analyze) generating dist/bundle-stats.html.
• Dev-time env guard warnings for malformed VITE_API_BASE_URL, invalid VITE_HEALTH_REFRESH_MS (< 1000), non-URL VITE_FEEDBACK_URL.
• Auth: visibility-based session refresh with 30s cooldown via shouldRefreshOnVisibility + unit tests.
• Auth: preserve full intendedPath (pathname + search + hash) through login and redirect.

Changed

• Release script: guard to refuse running off main.
• Health endpoints aligned to /actuator/health (no /api prefix); Dev panel probes updated.
• Auth: context → Zustand store with AuthEffects for bootstrap + visibility; one-time bootstrap with 5s fail-safe (StrictMode-safe).
• Logging: standardized debug flags VITE_DEBUG_AUTH and VITE_DEBUG_AUTH_BOOTSTRAP to gate verbose logs.

Housekeeping

• .env.example tidied (duplicates removed; clearer comments).

Documentation

• PR template includes “Post‑merge actions” checklist.
• README + Architecture updated for dependency audit policy and release guard; performance budget and bundle analysis workflow.
• RFC: zustand-auth-store.md (goals, design, migration plan, acceptance).
• Week 4 plan updates; TTD.md notes a post‑MVP E2E test for visibility + cooldown.

Internal

• API client: credentials:'include'; streamlined debug logging; minor event emission tidy-ups.
• Tests: added intendedPath redirect test, logout race test, error mapping tests, console hygiene test; replaced a brittle visibility integration test with deterministic unit tests.

Links

• Diff: https://github.com/sameboat-platform/frontend/compare/v0.2.0...v0.3.0
• Unreleased (next): https://github.com/sameboat-platform/frontend/compare/v0.3.0...HEAD

0.2.0

[0.2.0] - 2025-10-04

Added

• SECURITY policy (SECURITY.md).
• MIT license file (LICENSE).
• Coverage badge workflow (coverage-badge.yml) that:
  • runs tests with coverage on pull requests targeting main (no pushes),
  • generates and commits a badge to .github/badges/coverage.svg only on pushes to main,
  • uploads coverage artifacts on PRs for review.
• .env.example template enumerating supported environment variables.
• Dependabot configuration skeleton (.github/dependabot.yml) grouping security vs tooling updates.
• Smoke test for HealthCheckCard component.
• Pause-on-error health polling with Resume CTA, plus tests covering pause/resume behavior.

What's Changed

• Replaced ad-hoc inline Home page health logic with reusable <HealthCheckCard /> component.
• Removed transient auth bootstrap "heartbeat" interval (was only for earlier debugging) to reduce console noise.
• Stabilized health polling implementation (single interval; eliminated status-driven re-subscribe loop).
• README coverage badge now references the generated SVG in-repo and links to the workflow.
• Vitest coverage provider switched to @vitest/coverage-v8 and scoped to src/** files.

Fixed

• Excessive /actuator/health polling spam caused by effect dependency loop and duplicate Home page implementation.
• HealthCheckCard now restarts auto-polling after clicking Resume (previously stayed paused with no interval until manual refresh).
• HealthCheckCard tests stabilized (no giant timers; deterministic pause/resume flow).

Documentation

• Added minimal security policy document.
• README badges (release, coverage, security, license); added performance budget notes and live app links.
• Developer docs updated to reflect coverage thresholds and PR coverage workflow.

Security

• Bump esbuild to 0.25.10 resolving moderate advisory.
• Upgrade Vitest to 3.2.4 and enable v8 coverage provider.

Internal

• Removed legacy .eslintignore by migrating ignore patterns to flat config.
• Silenced auth debug logs during Vitest via isVitest guard.
• Automated coverage badge generation with branch-protection-safe push step.
• Refactored health polling to use stable callback + ref tracking (statusRef) preventing rapid interval churn.
• Consolidated health checks (Home now delegates to HealthCheckCard).
• Ignore local coverage/ directory in git; upload artifacts in CI instead.

Commits:

• chore(templates): add issue forms (feature, bug, test, tooling) and c… by @ArchILLtect in #21
• Test/auth bootstrap 24 by @ArchILLtect in #36
• feat(health): pause polling after consecutive failures with Resume CTA by @ArchILLtect in #35
• fix(ci) improves code coverage reporting workflow and badge generation by @ArchILLtect in #39
• fix(health): restart auto-polling after Resume; stabilize test timing by @ArchILLtect in #41
• chore(ci,docs): release 0.2.0 wrap-up (coverage summary + post-release notes) by @ArchILLtect in #42

Notes

• Nothing yet.

Full Changelog: v0.1.1...0.2.0

0.1.1

0.1.1 – Stability & Automation Patch

• chore(release): 0.1.1 – consolidate health polling, add env template, dependabot config by @ArchILLtect in #13

Added

• SECURITY.md, LICENSE
• Coverage badge workflow (coverage.svg)
• .env.example (documented runtime vars)
• Dependabot configuration (grouped updates)
• HealthCheckCard smoke test

Changed

• Home page now uses reusable
• Removed transient auth bootstrap heartbeat logger
• Stabilized health polling (single interval; no dependency churn)

Fixed

• Excessive /actuator/health polling spam (duplicate effect + dependency loop)

Security

• Updated esbuild (moderate advisory addressed)
• Updated vitest (dev only)

Internal

• Migrated ignore patterns into flat ESLint config
• Silenced auth debug logs during tests
• Refactored health polling to stable callback + statusRef
• Consolidated health checks

Refer to CHANGELOG.md for diff links. Next minor (0.2.0) will target auth test coverage + resilience (pause-on-error, reduced-motion enhancements).

Full Changelog: v0.1.0...v0.1.1