Starstruk Logo MarkStarstruk

5.4.1

TabbyML/tabby5.4.1Jul 9, 2025by hand-dot

AI Summary

This release focuses on security hardening with XSS protection, enhances developer experience through improved documentation and AI integration (Claude), and includes various code quality improvements and dependency updates.

Key Highlights

  • Implemented comprehensive XSS vulnerability prevention for the replacePlaceholders function
  • Added Claude GitHub Actions integration for automated code reviews
  • Enhanced documentation with a comprehensive development guide in CLAUDE.md
  • Introduced llm.txt for improved AI content understanding and SEO optimization
  • Improved integration test reliability with iframe auto-focus and error handling

New Features

  • XSS vulnerability prevention
  • Claude GitHub Actions integration
  • llm.txt generation
  • Enhanced integration tests
  • Code formatting improvements

Full Release Notes

## What's Changed

### 🔒 Security
* **XSS vulnerability prevention for replacePlaceholders function** (#1117) - Implemented comprehensive XSS protection with safe object property assignment and enhanced input sanitization to prevent prototype pollution attacks

### 📚 Documentation
* **Enhanced CLAUDE.md with comprehensive development guide** (#1113) - Added detailed project overview, architecture documentation, common commands, troubleshooting guide, and development workflow instructions for better developer experience

### 🧹 Code Quality & Testing
* **Organized generator tests** (#1098) - Refactored and improved test organization for better maintainability
* **Enhanced integration tests** - Added iframe auto-focus functionality, improved test reliability with better error handling and server readiness checks
* **Code formatting improvements** - Applied consistent prettier formatting across the codebase

### 🔧 Infrastructure & DevOps
* **Added Claude GitHub Actions integration** (#1101) - Integrated Claude Code AI assistant for automated code reviews and assistance
* **Added llm.txt for AI content understanding** (#1100) - Improved AI/LLM compatibility and SEO optimization
* **Removed obsolete documentation and files** - Cleaned up repository structure by removing outdated documentation and ignore files

### 📦 Dependencies
Updated numerous dependencies for security and performance improvements:
* antd: `5.26.2` → `5.26.3`
* prettier: `3.6.1` → `3.6.2`
* @types/node: `24.0.4` → `24.0.8`
* lucide-react: `0.523.0` → `0.525.0`
* @babel/core: `7.27.4` → `7.27.7`
* Multiple eslint package updates
* Various other dependency updates for security patches and bug fixes

### 🐛 Bug Fixes
* Fixed import/export module issues
* Improved error logging in server ready detection
* Enhanced type safety across multiple packages

### 🙏 Contributors
Thanks to all contributors who made this release possible\!

**Full Changelog**: https://github.com/pdfme/pdfme/compare/5.2.0...5.4.1