browser-cli

144 Commits 1 Branch 29 Tags

2 Commits

Include renames

Author	SHA1	Message	Date
daniel156161	34aaf78c66	chore(deps): update python and node dependencies Testing / test (push) Successful in 28s Details Testing / remote-protocol-compat (0.16.0) (push) Successful in 27s Details Testing / remote-protocol-compat (0.15.0) (push) Successful in 23s Details - Refresh uv.lock with uv sync --upgrade for all resolved Python deps. - Bump anyio 4.14.2 to 4.15.1 and coverage 7.15.4 to 7.16.0 in the lock. - Bump pydantic 2.13.4 to 2.13.5 and pydantic-core 2.46.4 to 2.46.5. - Bump sse-starlette 3.4.8 to 3.4.11 and wcwidth 0.8.2 to 0.8.3. - Leave direct Python dependency ranges in pyproject.toml untouched. - Update extension build tooling to esbuild 0.28.2 and typescript 7.0.2. - Update @types/chrome to 0.2.9 for current MV3 typings. - Bump n8n-nodes-browser-cli from 0.3.1 to 0.3.2 after the dep refresh. - Update the node to @noble/post-quantum 0.7.1 and @types/node 26.4.1. - Pin n8n-workflow dev dependency to 2.37.4 instead of the floating star range. - The star range resolved to the 2.38.1 beta while npm latest points at 2.16.0. - 2.37.4 is the current stable dist-tag and audits clean. - Keep peerDependencies.n8n-workflow as star so host installs stay flexible. - Switch the node tsconfig to module/moduleResolution Node16. - TypeScript 7 removed moduleResolution node10, which broke the old build. - Verified with uv run pytest -q: 639 passed, 98 skipped. - Verified with npm run check:extension: typecheck, build and 37 tests pass. - Verified the node with npm ci, npm run build and npm test: 42 tests pass. - npm audit --audit-level=moderate reports no vulnerabilities in both packages.	2026-09-07 11:05:17 +02:00
daniel156161	cea8a7e994	feat: add n8n serve node and harden remote access - Add the n8n community node package with credentials, command mapping, direct serve TCP client, and browser-cli protocol crypto helpers. - Cover Ed25519 signing, canonical JSON, PQ transport encryption, request mapping, and security behavior with unit tests. - Harden serve-http with per-address rate limiting, an 8 MB request body cap, and clear warnings when binding plain HTTP beyond loopback. - Stop one-shot --key overrides from being persisted automatically; document explicit remote trust and keep key-management behind the keys policy tier. - Make HTML-to-Markdown conversion safer by bounding tree depth and dropping unsafe link/image URL schemes. - Bump package and extension release metadata to 0.16.3.	2026-06-19 10:00:23 +02:00

Author

SHA1

Message

Date

daniel156161

34aaf78c66

chore(deps): update python and node dependencies

Testing / test (push) Successful in 28s

Details

Testing / remote-protocol-compat (0.16.0) (push) Successful in 27s

Details

Testing / remote-protocol-compat (0.15.0) (push) Successful in 23s

Details

- Refresh uv.lock with uv sync --upgrade for all resolved Python deps.
- Bump anyio 4.14.2 to 4.15.1 and coverage 7.15.4 to 7.16.0 in the lock.
- Bump pydantic 2.13.4 to 2.13.5 and pydantic-core 2.46.4 to 2.46.5.
- Bump sse-starlette 3.4.8 to 3.4.11 and wcwidth 0.8.2 to 0.8.3.
- Leave direct Python dependency ranges in pyproject.toml untouched.
- Update extension build tooling to esbuild 0.28.2 and typescript 7.0.2.
- Update @types/chrome to 0.2.9 for current MV3 typings.

- Bump n8n-nodes-browser-cli from 0.3.1 to 0.3.2 after the dep refresh.
- Update the node to @noble/post-quantum 0.7.1 and @types/node 26.4.1.
- Pin n8n-workflow dev dependency to 2.37.4 instead of the floating star range.
- The star range resolved to the 2.38.1 beta while npm latest points at 2.16.0.
- 2.37.4 is the current stable dist-tag and audits clean.
- Keep peerDependencies.n8n-workflow as star so host installs stay flexible.
- Switch the node tsconfig to module/moduleResolution Node16.
- TypeScript 7 removed moduleResolution node10, which broke the old build.

- Verified with uv run pytest -q: 639 passed, 98 skipped.
- Verified with npm run check:extension: typecheck, build and 37 tests pass.
- Verified the node with npm ci, npm run build and npm test: 42 tests pass.
- npm audit --audit-level=moderate reports no vulnerabilities in both packages.

2026-09-07 11:05:17 +02:00

daniel156161

cea8a7e994

feat: add n8n serve node and harden remote access

- Add the n8n community node package with credentials, command mapping, direct serve TCP client, and browser-cli protocol crypto helpers.

- Cover Ed25519 signing, canonical JSON, PQ transport encryption, request mapping, and security behavior with unit tests.

- Harden serve-http with per-address rate limiting, an 8 MB request body cap, and clear warnings when binding plain HTTP beyond loopback.

- Stop one-shot --key overrides from being persisted automatically; document explicit remote trust and keep key-management behind the keys policy tier.

- Make HTML-to-Markdown conversion safer by bounding tree depth and dropping unsafe link/image URL schemes.

- Bump package and extension release metadata to 0.16.3.

2026-06-19 10:00:23 +02:00