Worktree jwt ux

.eslintrc-auto-import.json

@@ -3,11 +3,21 @@
     "Component": true,
     "ComponentPublicInstance": true,
     "ComputedRef": true,
+    "DirectiveBinding": true,
     "EffectScope": true,
+    "ExtractDefaultPropTypes": true,
+    "ExtractPropTypes": true,
+    "ExtractPublicPropTypes": true,
     "InjectionKey": true,
+    "MaybeRef": true,
+    "MaybeRefOrGetter": true,
     "PropType": true,
     "Ref": true,
+    "ShallowRef": true,
+    "Slot": true,
+    "Slots": true,
     "VNode": true,
+    "WritableComputedRef": true,
     "asyncComputed": true,
     "autoResetRef": true,
     "computed": true,
@@ -18,10 +28,12 @@
     "controlledComputed": true,
     "controlledRef": true,
     "createApp": true,
+    "createDisposableDirective": true,
     "createEventHook": true,
     "createGlobalState": true,
     "createInjectionState": true,
     "createReactiveFn": true,
+    "createRef": true,
     "createReusableTemplate": true,
     "createSharedComposable": true,
     "createTemplatePromise": true,
@@ -36,14 +48,17 @@
     "extendRef": true,
     "getCurrentInstance": true,
     "getCurrentScope": true,
+    "getCurrentWatcher": true,
     "h": true,
     "ignorableWatch": true,
     "inject": true,
+    "injectLocal": true,
     "isDefined": true,
     "isProxy": true,
     "isReactive": true,
     "isReadonly": true,
     "isRef": true,
+    "isShallow": true,
     "makeDestructurable": true,
     "markRaw": true,
     "nextTick": true,
@@ -55,6 +70,7 @@
     "onBeforeUpdate": true,
     "onClickOutside": true,
     "onDeactivated": true,
+    "onElementRemoval": true,
     "onErrorCaptured": true,
     "onKeyStroke": true,
     "onLongPress": true,
@@ -66,8 +82,10 @@
     "onStartTyping": true,
     "onUnmounted": true,
     "onUpdated": true,
+    "onWatcherCleanup": true,
     "pausableWatch": true,
     "provide": true,
+    "provideLocal": true,
     "reactify": true,
     "reactifyObject": true,
     "reactive": true,
@@ -79,23 +97,22 @@
     "refAutoReset": true,
     "refDebounced": true,
     "refDefault": true,
+    "refManualReset": true,
     "refThrottled": true,
     "refWithControl": true,
     "resolveComponent": true,
-    "resolveRef": true,
-    "resolveUnref": true,
     "shallowReactive": true,
     "shallowReadonly": true,
     "shallowRef": true,
     "syncRef": true,
     "syncRefs": true,
-    "templateRef": true,
     "throttledRef": true,
     "throttledWatch": true,
     "toRaw": true,
     "toReactive": true,
     "toRef": true,
     "toRefs": true,
+    "toValue": true,
     "triggerRef": true,
     "tryOnBeforeMount": true,
     "tryOnBeforeUnmount": true,
@@ -130,11 +147,14 @@
     "useBrowserLocation": true,
     "useCached": true,
     "useClipboard": true,
+    "useClipboardItems": true,
     "useCloned": true,
     "useColorMode": true,
     "useConfirmDialog": true,
+    "useCountdown": true,
     "useCounter": true,
     "useCssModule": true,
+    "useCssSupports": true,
     "useCssVar": true,
     "useCssVars": true,
     "useCurrentElement": true,
@@ -156,6 +176,7 @@
     "useElementBounding": true,
     "useElementByPoint": true,
     "useElementHover": true,
+    "useElementOverflow": true,
     "useElementSize": true,
     "useElementVisibility": true,
     "useEventBus": true,
@@ -173,6 +194,7 @@
     "useGamepad": true,
     "useGeolocation": true,
     "useI18n": true,
+    "useId": true,
     "useIdle": true,
     "useImage": true,
     "useInfiniteScroll": true,
@@ -182,6 +204,7 @@
     "useKeyModifier": true,
     "useLastChanged": true,
     "useLink": true,
+    "useLiveAnnouncer": true,
     "useLoadingBar": true,
     "useLocalStorage": true,
     "useMagicKeys": true,
@@ -191,6 +214,7 @@
     "useMemoize": true,
     "useMemory": true,
     "useMessage": true,
+    "useModel": true,
     "useMounted": true,
     "useMouse": true,
     "useMouseInElement": true,
@@ -216,12 +240,14 @@
     "usePreferredDark": true,
     "usePreferredLanguages": true,
     "usePreferredReducedMotion": true,
+    "usePreferredReducedTransparency": true,
     "usePrevious": true,
     "useRafFn": true,
     "useRefHistory": true,
     "useResizeObserver": true,
     "useRoute": true,
     "useRouter": true,
+    "useSSRWidth": true,
     "useScreenOrientation": true,
     "useScreenSafeArea": true,
     "useScriptTag": true,
@@ -239,14 +265,17 @@
     "useStyleTag": true,
     "useSupported": true,
     "useSwipe": true,
+    "useTemplateRef": true,
     "useTemplateRefsList": true,
+    "useTemporalNow": true,
     "useTextDirection": true,
     "useTextSelection": true,
     "useTextareaAutosize": true,
     "useThrottle": true,
     "useThrottleFn": true,
     "useThrottledRefHistory": true,
     "useTimeAgo": true,
+    "useTimeAgoIntl": true,
     "useTimeout": true,
     "useTimeoutFn": true,
     "useTimeoutPoll": true,
@@ -263,6 +292,7 @@
     "useVibrate": true,
     "useVirtualList": true,
     "useWakeLock": true,
+    "useWebMCP": true,
     "useWebNotification": true,
     "useWebSocket": true,
     "useWebWorker": true,
@@ -285,7 +315,6 @@
     "watchThrottled": true,
     "watchTriggerable": true,
     "watchWithFilter": true,
-    "whenever": true,
-    "toValue": true
+    "whenever": true
   }
 }

.github/ISSUE_TEMPLATE/bug-report.yml

@@ -2,7 +2,7 @@ name: 🐞 Bug Report
 description: File a bug report.
 labels: ['bug', 'triage']
 assignees:
-  - CorentinTh
+  - destan
 body:
   - type: markdown
     attributes:
@@ -41,7 +41,7 @@ body:
     attributes:
       label: Where did you encounter the bug?
       options:
-        - Public app (it-tools.tech)
+        - Public app (toolbox.destan.workers.dev)
         - A self hosted
         - Other (installations, docker, etc.)
     validations:

.github/ISSUE_TEMPLATE/feature-request.yml

@@ -1,5 +1,5 @@
 name: 🚀 New feature proposal
-description: Propose a new feature/enhancement or tool idea for IT-Tools
+description: Propose a new feature/enhancement or tool idea for Toolbox
 labels: ['enhancement', 'triage']
 
 body:
@@ -52,5 +52,5 @@ body:
           required: true
         - label: Check that there isn't already an issue that request the same feature to avoid creating a duplicate.
           required: true
-        - label: Check that the feature can be implemented in a client side only app (IT-Tools is client side only, no server).
+        - label: Check that the feature can be implemented in a client side only app (Toolbox is client side only, no server).
           required: true

.github/workflows/ci.yml

@@ -11,11 +11,11 @@
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
-      - run: corepack enable
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: pnpm/action-setup@v6.1.1
+      - uses: actions/setup-node@v7.1.0
         with:
-          node-version: 20
+          node-version: 26
           cache: 'pnpm'
 
       - name: Install dependencies

.github/workflows/dependency-check.yml

@@ -0,0 +1,51 @@
+name: Dependency check
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+  schedule:
+    # Weekly: new CVEs appear without code changes.
+    - cron: '17 4 * * 1'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-check:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      # The SARIF upload writes to code scanning.
+      security-events: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      # The scan reads pnpm-lock.yaml, so it needs no `pnpm install`.
+      # The action image ships the vulnerability database and runs with --noupdate.
+      - name: Run OWASP Dependency-Check
+        uses: dependency-check/Dependency-Check_Action@1e54355a8b4c8abaa8cc7d0b70aa655a3bb15a6c # main
+        with:
+          project: toolbox
+          path: '.'
+          format: 'ALL'
+          out: reports
+          args: >
+            --failOnCVSS 7
+
+      - name: Upload the reports
+        if: always()
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: dependency-check-reports
+          path: reports
+
+      # Pull requests from forks get a read-only token, so they skip the upload.
+      - name: Upload SARIF to code scanning
+        if: always() && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
+        uses: github/codeql-action/upload-sarif@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
+        with:
+          sarif_file: reports/dependency-check-report.sarif
+          category: dependency-check