v0.3.18-nightly.20260406

Changelog

• c324cc3 Add ArgoCD ApplicationSet integration with security and error handling fixes (#4423)
• 4691de5 Add Claude Code GitHub Workflow (#4471)
• a20db04 Add missing ARIA labels to interactive elements (#4893)
• 9cf9296 Add query parameter validation to MCP endpoints (#4791)
• 2d6eae6 Add screenshot 1 for issue #4398
• 977cbda Add screenshot 1 for issue #4409
• e16cf08 Add screenshot 1 for issue #4543
• 9804aa6 Add screenshot 1 for issue #4565
• e1e713a Add screenshot 1 for issue #4954
• 6c5e2ea Add unmount guards to UpgradeStatus and PodHealthTrend (#5008)
• 3a18206 Extract 278 hardcoded strings to i18n translation keys (#4506)
• 9f685fd Extract hardcoded hex colors from chart components into named constants (#5064)
• c8de766 Fix 15 Go backend issues: mutex, scanner, type safety, SSE, cache, permissions (#4823)
• 900ffbc Fix 15 Go backend security audit findings (#5039)
• e68d6d9 Fix 6 persistent test failures blocking coverage (#4638)
• 734d308 Fix Checkers fullscreen taunt overlap and add behind-main warning (#4656)
• 1da707b Fix DOMPurify install, DeleteWorkload test, SlackID persistence, Antigravity CLI validation (#4642)
• 0a86c33 Fix Go backend issues: delete workload, error handling, race conditions (#4408)
• 2628b72 Fix SecurityIssues isRefreshing to use actual hook value (#4836)
• 06c27de Fix WS logout, MCP validation, refresh button, dynamic card fallback (#4917)
• e16f28d Fix Welcome page stats/SEO and MaintenanceWindows validation (#4424)
• f6b3424 Fix abort signal leaks, topology error suppression, test failures (#4779)
• a8b8119 Fix blank card empty state and persist collapse/expand state (#4900)
• d0ba2b4 Fix cache clearing, session state, key corruption, animation consistency (#4993)
• a431576 Fix compliance filters, hardcoded URLs, error handling, MCP bridge panic (#4754)
• 913af2a Fix configurator metrics: wrap instead of truncate on narrow cards (#4410)
• 54bb5bc Fix console errors, stale data, drill-down, group form, CRD stats, node repair (#4459)
• c57df31 Fix control plane health, CRD cache, permissions, CPU modal, webhook, storage keys (#4458)
• a67f955 Fix coverage workflow, toast visibility, role types, GPU dates, JSON naming (#4433)
• 40ac650 Fix dark mode support in flagged components (#4824)
• 23b0530 Fix dev startup scripts to handle stale port processes (#4905)
• 9b65877 Fix ensureConnection timeout race for orphaned WebSockets (#4938)
• a69a21b Fix error states, abort controllers, unmount safety (#4992)
• b8bfe7d Fix frontend issues: centralization, state management, consistency test, filter glow (#4407)
• f3d1edf Fix marketplace install button and add mission history pagination (#4784)
• 0d88e63 Fix nightly regressions and cascade false correlation (#4931)
• 2e0c7b3 Fix node confirm, etcd parse, DNS/control-plane scope, maintenance, quota, RBAC perf (#4867)
• b8003d6 Fix path traversal, CORS, WS logout, SSE recovery, lazy fallback, padding (#4950)
• 7d63c57 Fix pin icon overlap and search bar visibility (#4958)
• 72e5a4a Fix profile dropdown clipped on narrow viewports (#4397)
• 9dae436 Fix remaining TS errors in tsconfig.json and vite.config.ts (#4427)
• add6736 Fix resource limits detection, security recommendation, GPU sort mutation, oversized files (#4706)
• 8f9841c Fix runSavedMission: use shared preflight + prompt logic (#4771)
• f17931a Fix security, persistence, compliance modal, token cache, MCP errors (#4767)
• 06108cb Fix sidebar icon border bleed, configurator overflow, and vite TS errors (#4390)
• 35f6052 Fix stale workload requests overwriting current selection (#4406)
• 1bc0d4e Fix stat block navigation to use React Router instead of hard refresh (#4964)
• 21c5e1b Fix theme toggle visibility, light mode contrast, remove debug logs (#4883)
• 9e5748e Fix timer/listener leaks, dashboard race, memo perf, mission name display (#4675)
• 0ada139 Fix: Broad port-kill logic can terminate unrelated local processes (#4482)
• fd5958a Fix: Dependency audit can silently downgrade tool/runtime failures to zero vulnerabilities (#4479)
• 7366e4f Fix: Deployment Issues card (#4486)
• b101e0a Fix: Environment-variable injection pattern is unsafe/brittle in Playwright wrappers (#4481)
• 02aa9d8 Fix: Govuln timeout path is reported as clean scan textually (#4480)
• c7eec08 Fix: Header config validation is too shallow and can yield false confidence (#4485)
• 4ed8fb7 Fix: Issues in rbac_test.go (#4477)
• 3540a6c Fix: OAuth smoke test mutates .env without guaranteed restoration on abrupt exits (#4483)
• 941f3b5 Fix: Orchestrator script does not run with strict immediate-exit behavior (#4484)
• d806dd5 Fix: Secret scan can report PASS even when scanner execution fails (#4478)
• a39fedd Fix: title : ControlPlaneHealth card silently treats all managed clusters as "no data" (#4476)
• 12fff55 Lint cleanup: remove unused vars, fix exhaustive-deps, type any → unknown (#4538)
• 521cf64 Migrate modal state to useModalState and fix card loading violations (#4384)
• 8bf5ff5 Set Claude GitHub Action to use Opus 4.6 model (#4473)
• 93c1648 Sort active mission list by last activity (most recent first) (#4504)
• 8ff033e Split large vendor chunks for better lazy loading (#4651)
• 07a9de4 Update UI/UX scanner baseline: 272→273 raw hex (#4952)
• 4b6e743 Use safe localStorage wrappers in settings + remove emoji PR convention (#4383)
• e84683f Wire Predictive Health card to global cluster filter (#4683)
• 9c0e81c Wire Stats Overview to global cluster filter (#4678)
• 568c2d2 Wire isRefreshing in HelmReleaseStatus card (#4828)
• e3ad0ca Wire missing isRefreshing/isFailed in 14 cards + fix memory leak (#4584)
• f8afc8f chore(deps): Bump @netlify/functions from 5.1.3 to 5.1.5 in /web (#5003)
• e41e7aa chore(deps): Bump @playwright/test from 1.58.2 to 1.59.1 in /web (#4997)
• 8c2df99 chore(deps): Bump eslint-plugin-react-refresh in /web (#5002)
• 3edd99b chore(deps): Bump i18next from 26.0.2 to 26.0.3 in /web (#4995)
• 02000e2 chore(deps): Bump modernc.org/sqlite from 1.48.0 to 1.48.1 (#4994)
• 4c72143 chore(deps): Bump react-i18next from 16.6.2 to 17.0.2 in /web (#5000)
• ff04ea7 chore(deps): Bump recharts from 3.8.0 to 3.8.1 in /web (#4996)
• 9df903f chore(deps): Bump vite from 8.0.3 to 8.0.5 in /web (#4999)
• f8d34a6 feat: add GA4 tracking to mission landing page (#4589)
• 3da2c69 feat: add rotating tips to all 28 dashboards (#4646)
• 63f76fd feat: dynamically fetch YouTube tutorial videos from playlist (#4469)
• b841cc8 feat: split auto-qa adoption psychology into individual issues (#4783)
• 60898e2 fix: WebSocket race condition in kubectlProxy causing Safari errors (#4528)
• 196c3bd fix: add Netlify redirect for YouTube playlist API (#4472)
• 9d7ca7e fix: cache hooks test timeout in clearAllStorage tests (#5040)
• cfa64e9 fix: discard mission responses after cancellation (#4503)
• a4a9576 fix: dynamic card config crash and GitHubActivity magic number (#4568)
• 0405672 fix: exclude localhost traffic from GA4 error monitor (#4643)
• af285c4 fix: improve Learn dropdown video tutorial layout (#4488)
• 7552a13 fix: mission deep links broken on production (demo mode) (#4587)
• b0bfa1f fix: passthrough YouTube playlist API in demo mode MSW (#4474)
• 24d7aa8 fix: passthrough YouTube thumbnail images in MSW demo mode (#4493)
• d17784d fix: prevent castling while in check or through attacked squares (#4659)
• 80170de fix: proxy YouTube thumbnails through backend to bypass MSW (#4496)
• 907e36d fix: resolve 11 Mission Control and Dashboard UX bugs (#4585)
• 4cf11f4 fix: retry button re-executes last failed message instead of first (#4497)
• 9baff04 fix: search interference, update errors, MCP install, health indicators, single-cluster (#4582)
• 80de03d fix: use higher quality YouTube thumbnails in Learn dropdown
• d207dcf refactor: comprehensive code review fixes — slog, tests, file decomposition, error handling (#4490)
• 0384bec refactor: convert 609 fmt.Sprintf+slog calls to structured fields (#4505)
• bd8f6f3 ⚡ Enable React Compiler for automatic memoization (#5049)
• 67041e2 ⚡ Optimize AlertsContext: batch O(rules×alerts) evaluation into O(1) state update (#4788)
• c4cbeb7 ✨ Add UI/UX standards scanner, Storybook, and Playwright visual regression (#4374)
• 7513232 ⬆️ Upgrade React 18 → 19, R3F v8 → v9, drei v9 → v10 (#5042)
• e31c928 🌱 Add eeshaanSA as maintainer and security contact (#4334)
• e721568 🌱 Sync workflows from kubestellar/infra (#4645)
• 70f82c6 🐛 Add error boundary tests and harden DynamicCard TSX execution (#4919)
• 03b2490 🐛 Fix 116 test failures across 13 test files (#4619)
• 33d9f91 🐛 Fix 12 Go backend security, resource leak, and race condition bugs (#4755)
• 517dab4 🐛 Fix 4 Go test failures blocking nightly/weekly releases (#5059)
• 7a05a96 🐛 Fix 5 remaining Go test failures after handleK8sError refactor (#5066)
• e98cb65 🐛 Fix Compliance test: update mocks for per-cluster hook shapes (#4769)
• b780108 🐛 Fix XSS vulnerability and WS panic recovery cleanup (#4620)
• e188cf1 🐛 Fix duplicate notifications, alerts memo deps, filter analytics, loading indicator (#4876)
• e8125ca 🐛 Fix hook lifecycle, heartbeat cleanup, state reset bugs (#4705)
• 03b99f8 🐛 Fix missing loading/error states and inconsistent spacing (#4627)
• b5d206b 🐛 Fix navbar overlap, startup deps, and health monitor error handling (#4414)
• c3247b5 🐛 Fix remaining MCP test failures blocking releases (#5067)
• 8daced2 🐛 Fix skeleton timeout, error badge display, and 73 test failures (#4890)
• 9ddc924 🐛 Fix start-dev.sh port mismatch with frontend proxy (#4710)
• 3449eb1 🐛 Wire missing isRefreshing in 7 cards (#4866)
• 3b9de43 🔄 Migrate useContext to use() pattern (React 19) (#5050)
• 3437608 🚨 Auto-create issue when nightly/weekly release fails (#5057)