Erdogan AbacıandDraculabo
92dc2f6f21
* fix(security): add safeStorage fallback for production builds - Replace hard keytar dependency with multi-strategy key storage: 1. safeStorage (Electron built-in) - preferred 2. keytar (system keychain) - fallback 3. File-based encryption - last resort - Dynamically import keytar to avoid hard failure in production - Refactor cloudHandler to use const instead of let (Clean Code) - Fix 'Failed to load cloud accounts' error in packaged app The keytar native module fails to load from asar archives in production builds. This fix ensures the app works even when system keychain access is unavailable. * refactor(security): address code review feedback - Replace sync file ops with async (fs/promises) - Add atomic file writes to prevent data races - Implement concurrency lock for key generation - Add SecurityError class with specific error codes: - KEY_STORAGE_FAILED, ENCRYPTION_FAILED, DECRYPTION_FAILED - INVALID_FORMAT, AUTH_TAG_MISMATCH, CORRUPTED_DATA - Enhance error categorization in decrypt() for better diagnostics - Add security warnings for file-based fallback mode * fix: align error handling after merge * feat: migrate legacy encrypted account data * chore: enable beta prerelease workflow *skip release* --------- Co-authored-by: Draculabo <[email protected]>
38 lines
785 B
YAML
38 lines
785 B
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- beta
|
|
|
|
permissions:
|
|
contents: write
|
|
issues: write
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
release:
|
|
name: Semantic Release
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # Required for semantic-release to analyze commits
|
|
persist-credentials: false # We use a token in the next steps
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 22
|
|
cache: 'npm'
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Release
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GH_TOKEN }} # Use GH_TOKEN to trigger other workflows
|
|
run: npx semantic-release
|