Skip to content

Release 0.2.5 - #103

Closed
overwrite00 wants to merge 2 commits into
mainfrom
develop
Closed

Release 0.2.5#103
overwrite00 wants to merge 2 commits into
mainfrom
develop

Conversation

@overwrite00

Copy link
Copy Markdown
Owner

Summary

  • Bump MetaLens to 0.2.5 for dependency maintenance and security updates.
  • Update Electron to 43.2.0 and frontend dependencies, including React/React DOM 19.2.8.
  • Update transitive Electron tooling dependency fast-uri to 3.1.4 for upstream security fixes.

Validation

  • Local: npm --prefix frontend run build
  • Local: python\.venv\Scripts\python.exe -m pytest python/tests/ -v (47 passed, 1 skipped)
  • Local: npm --prefix electron exec electron -- --version -> v43.2.0
  • GitHub Actions on develop: Build & Release passed, CodeQL passed
  • Beta release created: v0.2.5-beta.1

Notes

  • npm audit for frontend reports 0 vulnerabilities.
  • npm audit for electron still reports existing Electron Forge/tooling-chain advisories around tar/tmp/brace-expansion; npm reports no fix available for part of that chain, so this PR keeps the dependency update scoped.

@overwrite00 overwrite00 self-assigned this Jul 25, 2026
@overwrite00

Copy link
Copy Markdown
Owner Author

Closing this PR because develop now correctly keeps the 0.2.5-beta.1 changelog title. A separate release promotion PR will carry the stable 0.2.5 changelog title for main.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant