5.4.1

commaai/openpilot5.4.1Jul 9, 2025by hand-dot

AI Summary

This release focuses on security, infrastructure improvements, and developer experience. It includes an XSS vulnerability fix, integration of Claude AI for automated code reviews, and enhanced documentation for the project.

Key Highlights

XSS vulnerability prevention in replacePlaceholders function
Added Claude GitHub Actions integration for automated code reviews
Added llm.txt for improved AI content understanding
Enhanced integration tests with iframe auto-focus and error handling

New Features

Claude GitHub Actions integration
llm.txt support
Enhanced CLAUDE.md documentation

Full Release Notes

## What's Changed

### 🔒 Security
* **XSS vulnerability prevention for replacePlaceholders function** (#1117) - Implemented comprehensive XSS protection with safe object property assignment and enhanced input sanitization to prevent prototype pollution attacks

### 📚 Documentation
* **Enhanced CLAUDE.md with comprehensive development guide** (#1113) - Added detailed project overview, architecture documentation, common commands, troubleshooting guide, and development workflow instructions for better developer experience

### 🧹 Code Quality & Testing
* **Organized generator tests** (#1098) - Refactored and improved test organization for better maintainability
* **Enhanced integration tests** - Added iframe auto-focus functionality, improved test reliability with better error handling and server readiness checks
* **Code formatting improvements** - Applied consistent prettier formatting across the codebase

### 🔧 Infrastructure & DevOps
* **Added Claude GitHub Actions integration** (#1101) - Integrated Claude Code AI assistant for automated code reviews and assistance
* **Added llm.txt for AI content understanding** (#1100) - Improved AI/LLM compatibility and SEO optimization
* **Removed obsolete documentation and files** - Cleaned up repository structure by removing outdated documentation and ignore files

### 📦 Dependencies
Updated numerous dependencies for security and performance improvements:
* antd: `5.26.2` → `5.26.3`
* prettier: `3.6.1` → `3.6.2`
* @types/node: `24.0.4` → `24.0.8`
* lucide-react: `0.523.0` → `0.525.0`
* @babel/core: `7.27.4` → `7.27.7`
* Multiple eslint package updates
* Various other dependency updates for security patches and bug fixes

### 🐛 Bug Fixes
* Fixed import/export module issues
* Improved error logging in server ready detection
* Enhanced type safety across multiple packages

### 🙏 Contributors
Thanks to all contributors who made this release possible\!

**Full Changelog**: https://github.com/pdfme/pdfme/compare/5.2.0...5.4.1