Release: 2024.04.04 Subwallet Mobile Support

.github/workflows/ci.yml

@@ -6,6 +6,8 @@ on:
   pull_request:
     branches: [main, dev]
 
+permissions: read-all
+
 jobs:
   check-license-lines:
     runs-on: ubuntu-latest

.github/workflows/codeql.yml

@@ -12,12 +12,12 @@
 name: 'CodeQL'
 
 on:
-  push:
-    branches: ['dev']
   pull_request:
     # The branches below must be a subset of the branches above
     branches: ['dev']
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze
@@ -43,7 +43,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
       # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@v3
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -69,6 +69,6 @@ jobs:
       #     ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3
         with:
           category: '/language:${{matrix.language}}'

.github/workflows/docker.yml

@@ -6,12 +6,97 @@ on:
   pull_request:
     branches: [main, dev]
 
+permissions: read-all
+
 jobs:
   build:
+    permissions:
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
 
-      - name: Build docker image
+      - name: Preview build configuration - Use relative paths
+        # NOTE: doesn't affect app functionality compared to a production build!
+        if: ${{ github.event_name == 'pull_request' }}
+        run: |
+          # Use relative paths for the PR preview build
+          sed -i "s|vite build --base '/'|vite build --base './'|" package.json
+          echo "===== DEBUG ====="
+          git diff
+          echo "===== END ====="
+
+      - name: Preview build configuration - Use 'development' mode
+        # WARNING: may affect app functionality compared to a production build!
+        # keep it enabled only for PRs against `dev` branch for now!
+        if: ${{ github.event_name == 'pull_request' && github.base_ref == 'dev' }}
+        run: |
+          # Specify development mode which activates the CreditcoinLocal network in the menu,
+          # which in turn enables testing the PR preview build with a locally running creditcoin3-node
+          sed -i "s|yarn build|export NODE_ENV='development' \&\& yarn build|" Dockerfile
+          echo "===== DEBUG ====="
+          git diff
+          echo "===== END ====="
+
+      - name: Build test docker image
         run: |
-          docker build -t gluwa/creditcoin3-staking-dashboard .
+          docker build --build-arg="TARGET_NETWORK=test" -t gluwa/creditcoin3-staking-dashboard .
+
+      - name: Build prod docker image
+        run: |
+          docker build --build-arg="TARGET_NETWORK=prod" -t gluwa/creditcoin3-staking-dashboard .
+
+      - name: Extract application files from docker image
+        if: ${{ github.event_name == 'pull_request' }}
+        run: |
+          docker images
+
+          docker run -d --rm --name ephemeral-container gluwa/creditcoin3-staking-dashboard
+          sleep 10
+
+          mkdir ./build/
+          docker cp ephemeral-container:/usr/share/nginx/html ./build/
+          docker kill ephemeral-container
+
+      - name: Install Azure cli tools
+        if: ${{ github.event_name == 'pull_request' }}
+        run: |
+          # https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-linux?pivots=apt#option-1-install-with-one-command
+          curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
+
+      - name: Azure login
+        if: ${{ github.event_name == 'pull_request' && env.GITHUB_TOKEN }}
+        continue-on-error: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.CREDITCOIN_GITHUB_API_TOKEN }}
+        uses: azure/login@v1
+        with:
+          creds: ${{ secrets.AZURE_CREDENTIALS }}
+          allow-no-subscriptions: true
+
+      - name: Upload application files to Azure Storage
+        id: upload
+        if: ${{ github.event_name == 'pull_request' && env.GITHUB_TOKEN }}
+        continue-on-error: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.CREDITCOIN_GITHUB_API_TOKEN }}
+        run: |
+          AZURE_STORAGE_KEY=${{ secrets.LLVM_AZURE_STORAGE_KEY }}
+          export AZURE_STORAGE_KEY
+          PR_NUMBER=$(echo "$GITHUB_REF" | sed "s|refs/pull/||" | sed "s|/merge||")
+          DESTINATION_PATH="cc3-staking-dashboard/PR-$PR_NUMBER"
+          export DESTINATION_PATH
+
+          az storage blob upload-batch --account-name staticsitellvmhtml --auth-mode key -d "\$web" --destination-path "$DESTINATION_PATH" --overwrite -s ./build/
+
+          echo "message=**Test before merge -> [Staking Dashboad Preview](https://staticsitellvmhtml.z13.web.core.windows.net/$DESTINATION_PATH/html/)!**" >> "$GITHUB_OUTPUT"
+
+      - name: Post comment to PR
+        if: ${{ github.event_name == 'pull_request' && env.GITHUB_TOKEN }}
+        continue-on-error: true
+        uses: mshick/add-pr-comment@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.CREDITCOIN_GITHUB_API_TOKEN }}
+        with:
+          message: ${{ steps.upload.outputs.message }}
+          allow-repeats: false

.github/workflows/mega-linter.yml

@@ -35,18 +35,18 @@ jobs:
       - name: MegaLinter
         id: ml
         # You can override MegaLinter flavor used to have faster performances
-        # More info at https://megalinter.io/flavors/
+        # More info at https://megalinter.io/latest/flavors/
         uses: oxsecurity/megalinter/flavors/javascript@v7
         env:
-          # All available variables are described at https://megalinter.io/configuration/
+          # All available variables are described at https://megalinter.io/latest/configuration/
           # and configured in .mega-linter.yml
           VALIDATE_ALL_CODEBASE: true
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       # Upload MegaLinter artifacts
       - name: Archive production artifacts
-        if: ${{ success() }} || ${{ failure() }}
-        uses: actions/upload-artifact@v3
+        if: success() || failure()
+        uses: actions/upload-artifact@v4
         with:
           name: MegaLinter reports
           path: |

.gitleaksignore

@@ -0,0 +1 @@
+134962d4e7773659a867901f75244101b6c05edc:src/pages/explore/Feedback.tsx:generic-api-key:10

.grype.yaml

@@ -0,0 +1,21 @@
+ignore:
+  # transitive dependencies
+  - package:
+      name: axios
+      version: 0.21.4
+      type: npm
+
+  - package:
+      name: postcss
+      version: 8.4.21
+      type: npm
+
+  - package:
+      name: postcss
+      version: 8.4.24
+      type: npm
+
+  - package:
+      name: sharp
+      version: 0.32.5
+      type: npm

.htmlhintrc

@@ -0,0 +1,25 @@
+{
+  "tagname-lowercase": true,
+  "attr-lowercase": true,
+  "attr-value-double-quotes": true,
+  "attr-value-not-empty": false,
+  "attr-no-duplication": true,
+  "doctype-first": true,
+  "tag-pair": true,
+  "tag-self-close": false,
+  "spec-char-escape": true,
+  "id-unique": true,
+  "src-not-empty": true,
+  "title-require": true,
+  "alt-require": true,
+  "doctype-html5": true,
+  "id-class-value": "dash",
+  "style-disabled": false,
+  "inline-style-disabled": false,
+  "inline-script-disabled": false,
+  "space-tab-mixed-disabled": "space",
+  "id-class-ad-disabled": false,
+  "href-abs-or-rel": false,
+  "attr-unsafe-chars": true,
+  "head-script-disabled": false
+}

.lycheeignore

@@ -0,0 +1 @@
+staticsitellvmhtml.z13.web.core.windows.net

.mega-linter.yml

@@ -0,0 +1,13 @@
+---
+DISABLE_LINTERS:
+  - COPYPASTE_JSCPD
+  - CSS_SCSS_LINT
+  - CSS_STYLELINT
+  - JAVASCRIPT_ES
+  - MARKDOWN_MARKDOWN_TABLE_FORMATTER
+  - SPELL_CSPELL
+  - SPELL_MISSPELL
+  - TSX_ESLINT
+  - TYPESCRIPT_ES
+  - TYPESCRIPT_STANDARD
+JSON_JSONLINT_ARGUMENTS: --comments

.shell/build-container.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
 podman build \
-    -t polkadot-staking-dashboard \
-    -t psd \
-    .
+	-t polkadot-staking-dashboard \
+	-t psd \
+	.

.stylelintrc.json

@@ -0,0 +1,4 @@
+{
+  "extends": "stylelint-config-standard",
+  "customSyntax": "scss"
+}

.trivyignore

@@ -0,0 +1,12 @@
+# axios is a transitive dependency
+CVE-2023-45857
+
+# postcss is a transitive dependency
+CVE-2023-44270
+
+# sharp is a transitive dependency
+GHSA-54xq-cgqr-rpm3
+
+# nginx process will drop priviledges to the nginx user
+# however the container is launched as root initially
+AVD-DS-0002

CHANGELOG.md

@@ -1,36 +1,6 @@
 # Changelog
 
-## [1.1.0](https://github.com/paritytech/polkadot-staking-dashboard/compare/v1.0.9...v1.1.0) (2023-10-30)
+## [20231208-devnet](https://github.com/gluwa/creditcoin3-staking-dashboard/releases/tag/20231208-devnet) (2023-12-08)
 
-### Features
-
-- Add newly supported proxy calls ([#1554](https://github.com/paritytech/polkadot-staking-dashboard/issues/1554)) ([4ff9717](https://github.com/paritytech/polkadot-staking-dashboard/commit/4ff9717c3dce4068f31ec0dcc34c128df7eb4f06))
-- add sync state for eraRewardPoints fetch ([aae111c](https://github.com/paritytech/polkadot-staking-dashboard/commit/aae111c538f2091a1694a13e21b14d1bcef47e8f))
-- add validator performance ranks & quartiles, quartiles in generation methods ([#1546](https://github.com/paritytech/polkadot-staking-dashboard/issues/1546)) ([2955e70](https://github.com/paritytech/polkadot-staking-dashboard/commit/2955e706927eaf4da8952790ac7a3d2ed63d79f4))
-- Add validator pulse graph to list items ([#1530](https://github.com/paritytech/polkadot-staking-dashboard/issues/1530)) ([e41168b](https://github.com/paritytech/polkadot-staking-dashboard/commit/e41168b93378f03a13c760af19a51af4d5a583e3))
-- allow selection of RPC providers ([#1557](https://github.com/paritytech/polkadot-staking-dashboard/issues/1557)) ([c0553c2](https://github.com/paritytech/polkadot-staking-dashboard/commit/c0553c2c9b466a37b9d55811dbce1b8fbb6dafd3))
-- **ci:** Add Release Please CI, update `CONTRIBUTING` ([#1470](https://github.com/paritytech/polkadot-staking-dashboard/issues/1470)) ([6b7dc60](https://github.com/paritytech/polkadot-staking-dashboard/commit/6b7dc60cece70cfeb4190ac4dacc205112578288))
-- **cleanup:** remove deprecated `Nominate` and `NominatePools` modals ([#1540](https://github.com/paritytech/polkadot-staking-dashboard/issues/1540)) ([56ed4c0](https://github.com/paritytech/polkadot-staking-dashboard/commit/56ed4c0056278f706010a0eabee7978c2bebd03c))
-- **context:** `ExtensionAccounts` provider ([#1494](https://github.com/paritytech/polkadot-staking-dashboard/issues/1494)) ([e8f11e9](https://github.com/paritytech/polkadot-staking-dashboard/commit/e8f11e92730dbb4b624b2ad6fa9fb5cf37732a1f))
-- **help:** remove controller help items ([#1527](https://github.com/paritytech/polkadot-staking-dashboard/issues/1527)) ([743510f](https://github.com/paritytech/polkadot-staking-dashboard/commit/743510f30d87dc7d60d01bc5f530e856d416c6e2))
-- Order nominations by nomination status. ([#1543](https://github.com/paritytech/polkadot-staking-dashboard/issues/1543)) ([0ab87f4](https://github.com/paritytech/polkadot-staking-dashboard/commit/0ab87f46db16576cd9ee9a795dfb28f82b6391c9))
-- Refactor for reusable `ExtensionAccountsProvider` context ([#1466](https://github.com/paritytech/polkadot-staking-dashboard/issues/1466)) ([13380bb](https://github.com/paritytech/polkadot-staking-dashboard/commit/13380bb5049fe8b55695d58e24a3928432b730d3))
-- **refactor:** remove `NominateFromFavorites` modal ([#1528](https://github.com/paritytech/polkadot-staking-dashboard/issues/1528)) ([4bc62a3](https://github.com/paritytech/polkadot-staking-dashboard/commit/4bc62a373e3c4129adb5b717b56333356efc6b26))
-- **refactor:** Separate titles from lists, reformat filters, fixes ([#1539](https://github.com/paritytech/polkadot-staking-dashboard/issues/1539)) ([ae5f95e](https://github.com/paritytech/polkadot-staking-dashboard/commit/ae5f95ed1036e7383ae59e2e6ff89833e5d6a179))
-- **refactor:** use simple cloud react imports ([#1493](https://github.com/paritytech/polkadot-staking-dashboard/issues/1493)) ([839cc06](https://github.com/paritytech/polkadot-staking-dashboard/commit/839cc06c0dc4655f5ce383ed4c72d95cb0a32f39))
-- Replace icons to cloud, remove dead wallet connect option ([#1506](https://github.com/paritytech/polkadot-staking-dashboard/issues/1506)) ([7e3efd2](https://github.com/paritytech/polkadot-staking-dashboard/commit/7e3efd2c8ec9864ca40ccc165c7ab5f76b581f94))
-- store `eraRewardPoints` from recent eras ([#1529](https://github.com/paritytech/polkadot-staking-dashboard/issues/1529)) ([690ba51](https://github.com/paritytech/polkadot-staking-dashboard/commit/690ba51e7b8cfc7285fbdb90748362d85e848460))
-- **ux:** min non-zero bar segment width ([#1555](https://github.com/paritytech/polkadot-staking-dashboard/issues/1555)) ([9377776](https://github.com/paritytech/polkadot-staking-dashboard/commit/9377776369fb6c63629c8622fd3ab9087ab70502))
-- **ux:** Polkadot JS to developer tools category ([#1576](https://github.com/paritytech/polkadot-staking-dashboard/issues/1576)) ([5684c0a](https://github.com/paritytech/polkadot-staking-dashboard/commit/5684c0aaf45426ca9839abbb9b845bb5fee175ec))
-- **ux:** Pool rewards worker & pool performance graphs ([#1547](https://github.com/paritytech/polkadot-staking-dashboard/issues/1547)) ([be4a556](https://github.com/paritytech/polkadot-staking-dashboard/commit/be4a5568fa7e46b33295f48ded3b7a2c81eec14c))
-
-### Bug Fixes
-
-- avoid negative free balance ([8fd61dd](https://github.com/paritytech/polkadot-staking-dashboard/commit/8fd61dd4bc68c8a4fa5982839761066accba20aa))
-- **ci:** fix earliest release commit ([d873517](https://github.com/paritytech/polkadot-staking-dashboard/commit/d8735175cdb2a3ff2baf45df388634973eb6ee33))
-- **ci:** last-release-sha ([7c9cea5](https://github.com/paritytech/polkadot-staking-dashboard/commit/7c9cea5dc4d04f05b59e46a6b2e5544e8a6b3ab3))
-- fix bug on favorite pools visit ([#1526](https://github.com/paritytech/polkadot-staking-dashboard/issues/1526)) ([2f8ea85](https://github.com/paritytech/polkadot-staking-dashboard/commit/2f8ea85f6c639cf18d8154e6b908ef483122781a))
-- fix new era reward points processing ([214da8d](https://github.com/paritytech/polkadot-staking-dashboard/commit/214da8d5c05f723c42c739f700d2180318bcf60f))
-- fixed lag in timeleft refreh in last hour ([7b703cf](https://github.com/paritytech/polkadot-staking-dashboard/commit/7b703cfff83acd89a20b5075d0de6827cdfc22d8))
-- miscellaneous fixes. ([#1538](https://github.com/paritytech/polkadot-staking-dashboard/issues/1538)) ([24d0ca6](https://github.com/paritytech/polkadot-staking-dashboard/commit/24d0ca6ed4b5c0d081db941c3cae898468fecdcc))
-- payee toggle fix on setup ([3fe3031](https://github.com/paritytech/polkadot-staking-dashboard/commit/3fe30315d18691be6e7be846b945eb84cf89b8cf))
+- Pre-release
+- For internal use only!