Martin Vogel 3eb294fa11 fix(ui): serve the upstream issues URL from the backend ...

The UI security audit (security-ui.sh, layer A1) forbids hardcoded
external URLs in graph-ui source — the callout's GitHub issues link
tripped it on all pr-smoke legs. Follow the established pattern for
external targets (/api/repo-info deep-links): /api/ui-config now
carries upstream_issues_url and the callout consumes it, rendering the
issue button only when the backend provides an https URL. The protocol
check uses a regex literal on purpose: a bare protocol string in source
also aborts the audit's URL extraction.

Verified: security-ui.sh passes locally; /api/ui-config serves the URL;
the callout opens with the prefilled link in the browser; frontend
build + tests green.

Refs #963

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-07-09 03:38:34 +02:00

..

@/components/ui

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

src

fix(ui): serve the upstream issues URL from the backend

2026-07-09 03:38:34 +02:00

components.json

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

index.html

fix(ui): render graph labels without remote font fetches (#496)

2026-06-22 22:04:54 +02:00

package-lock.json

chore(security): resolve flagged Scorecard + Dependabot alerts

2026-06-24 00:34:05 +02:00

package.json

chore(security): resolve flagged Scorecard + Dependabot alerts

2026-06-24 00:34:05 +02:00

tsconfig.json

Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision

2026-03-17 22:05:57 +01:00

tsconfig.tsbuildinfo

feat(ui): add i18n and index picker UX

2026-06-28 21:21:32 +02:00

vite.config.ts

fix(graph-ui): surface indexing-job failures instead of silently completing

2026-07-03 20:28:27 +02:00