Starstruk Logo MarkStarstruk

5.4.1

BloopAI/vibe-kanban5.4.1Jul 9, 2025by hand-dot

AI Summary

This release focuses on security hardening and developer experience by implementing XSS protection, adding comprehensive documentation, and integrating AI tools like Claude for automated code reviews and content understanding.

Key Highlights

  • XSS vulnerability prevention in the replacePlaceholders function
  • Enhanced development guide in CLAUDE.md with troubleshooting instructions
  • Integration of Claude GitHub Actions for automated code reviews
  • Added llm.txt for AI content understanding and SEO optimization
  • Updated numerous dependencies including antd and prettier for security

New Features

  • Claude GitHub Actions integration
  • AI content understanding via llm.txt
  • Enhanced integration tests with iframe auto-focus functionality

Full Release Notes

## What's Changed

### 🔒 Security
* **XSS vulnerability prevention for replacePlaceholders function** (#1117) - Implemented comprehensive XSS protection with safe object property assignment and enhanced input sanitization to prevent prototype pollution attacks

### 📚 Documentation
* **Enhanced CLAUDE.md with comprehensive development guide** (#1113) - Added detailed project overview, architecture documentation, common commands, troubleshooting guide, and development workflow instructions for better developer experience

### 🧹 Code Quality & Testing
* **Organized generator tests** (#1098) - Refactored and improved test organization for better maintainability
* **Enhanced integration tests** - Added iframe auto-focus functionality, improved test reliability with better error handling and server readiness checks
* **Code formatting improvements** - Applied consistent prettier formatting across the codebase

### 🔧 Infrastructure & DevOps
* **Added Claude GitHub Actions integration** (#1101) - Integrated Claude Code AI assistant for automated code reviews and assistance
* **Added llm.txt for AI content understanding** (#1100) - Improved AI/LLM compatibility and SEO optimization
* **Removed obsolete documentation and files** - Cleaned up repository structure by removing outdated documentation and ignore files

### 📦 Dependencies
Updated numerous dependencies for security and performance improvements:
* antd: `5.26.2` → `5.26.3`
* prettier: `3.6.1` → `3.6.2`
* @types/node: `24.0.4` → `24.0.8`
* lucide-react: `0.523.0` → `0.525.0`
* @babel/core: `7.27.4` → `7.27.7`
* Multiple eslint package updates
* Various other dependency updates for security patches and bug fixes

### 🐛 Bug Fixes
* Fixed import/export module issues
* Improved error logging in server ready detection
* Enhanced type safety across multiple packages

### 🙏 Contributors
Thanks to all contributors who made this release possible\!

**Full Changelog**: https://github.com/pdfme/pdfme/compare/5.2.0...5.4.1