Commit Graph

266 Commits

Author SHA1 Message Date
google-labs-jules[bot]
4dafedec12 test: improve removeDownloadItem tests
Expanded the test suite for `removeDownloadItem` in `src/__tests__/unit/downloadStatus.test.ts` to include:
- Removing multiple items with the same pkgname.
- Handling non-matching and non-existent pkgnames.
- Removing from an empty list.
- Ensuring exact string matching.
- Removing items from the start, middle, and end of the list.

Introduced a `createMockDownload` helper to reduce boilerplate in tests.

Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>
2026-03-10 16:09:31 +00:00
momen
7dc8b7f77f Merge pull request #1 from vmomenv/security-fix-command-injection-install-manager-3820575162219224633
🔒 [security fix] Fix Command Injection in install-manager.ts
2026-03-11 00:08:50 +08:00
google-labs-jules[bot]
1270405907 🔒 fix: Command Injection in install-manager.ts and CI failures
- Set `shell: false` in `spawn` calls in `install-manager.ts` to prevent command injection.
- Updated `AGENTS.md` to use the secure `shell: false` pattern in examples.
- Removed `package-lock.json` from `.gitignore` to support reproducible builds.
- Updated GitHub Actions workflows to use `npm install` instead of `npm ci` as a robust fallback.

Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>
2026-03-10 16:08:16 +00:00
google-labs-jules[bot]
828ffd86e8 🔒 fix: Command Injection vulnerability in install-manager.ts
- Changed `shell: true` to `shell: false` in `spawn` calls within `electron/main/backend/install-manager.ts`.
- Updated `AGENTS.md` documentation to reflect the security best practice.
- Verified that the fix prevents command injection using a reproduction script.

Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>
2026-03-10 15:53:44 +00:00
4fd280cf85 修复 check-is-installed 无法正确检查在主机是否安装的问题 2026-03-10 18:47:35 +08:00
bee046dcf2 修复编译不通过的问题 2026-03-10 18:46:56 +08:00
a98b3ec5b1 不再使用dpkg-query检测是否安装 2026-03-10 18:36:35 +08:00
3231a3ced7 update:更新下载量统计接口信息 2026-03-10 17:34:53 +08:00
3cea59f47b update:更新服务器接口信息 2026-03-10 17:34:35 +08:00
94392c0f72 update:加入项目运行工作流 2026-03-10 09:23:22 +08:00
762c2f550d update:更新readme 2026-03-10 09:13:58 +08:00
522af7c3a3 update:主页更换图标 2026-03-10 09:03:24 +08:00
105563fe1d update:忽略test-results.json 2026-03-10 00:53:44 +08:00
d206c79c24 fix:通过E2E测试 2026-03-10 00:52:59 +08:00
cef68a95d9 chore: add comprehensive documentation and testing infrastructure
## 文档(全部中文)
- AGENTS.md - 完整的 AI 编码指南(中文版)
- CONTRIBUTING.md - 贡献指南
- DEVELOPMENT.md - 开发文档
- DEPLOYMENT.md - 部署文档
- TESTING.md - 测试文档
- TROUBLESHOOTING.md - 问题排查指南
- FAQ.md - 常见问题
- WORKFLOW.md - 标准开发流程文档
## AI 工作流(9个详细工作流)
- feature-development.md - 新功能开发流程
- bug-fix.md - Bug 修复流程
- code-review.md - 代码审查流程
- testing.md - 测试编写流程
- release.md - 发布流程
- refactoring.md - 代码重构流程
- documentation.md - 文档更新流程
- performance-optimization.md - 性能优化流程
- security-audit.md - 安全审计流程
## 测试基础设施
- vitest.config.ts - Vitest 单元测试配置
- playwright.config.ts - Playwright E2E 测试配置
- src/__tests__/setup.ts - 测试环境设置
- src/__tests__/unit/downloadStatus.test.ts - 示例单元测试
- e2e/basic.spec.ts - 示例 E2E 测试
## CI/CD
- .github/workflows/test.yml - 新建测试 CI 工作流
- .github/workflows/build.yml - 更新构建工作流,添加测试步骤
## Issue 模板
- 更新 bug_report.md 为标准 Bug 报告模板
- 更新 help_wanted.md 为标准功能请求模板
## 配置更新
- package.json - 添加测试依赖和 7 个新的 npm 脚本
- .gitignore - 添加测试相关忽略项
## 新增 npm 脚本
- test - 运行单元测试
- test:watch - 监听模式
- test:coverage - 生成覆盖率报告
- test:e2e - 运行 E2E 测试
- test:e2e:ui - E2E UI 模式
- test:e2e:debug - E2E 调试模式
- test:all - 运行所有测试
## 新增测试依赖
- @playwright/test ^1.40.0
- @testing-library/jest-dom ^6.1.5
- @testing-library/vue ^8.0.1
- @vitest/coverage-v8 ^1.0.0
- @vue/test-utils ^2.4.3
- jsdom ^23.0.1
- vitest ^1.0.0
2026-03-10 00:42:56 +08:00
0035b3000d feat:修改1.md改为代码审查.md 2026-03-09 23:58:05 +08:00
2df695fca1 feat:添加代码审查工作流 2026-03-09 23:57:29 +08:00
21ea334e79 feat:修复基础格式问题 2026-03-09 23:56:44 +08:00
shenmo
1e2047e7f1 Merge pull request #6 from vmomenv/momen-dev
Momen dev
2026-03-09 11:32:40 +08:00
a9a6b6bdc6 fix:首页推荐软件安装失败问题 2026-02-28 02:28:50 +08:00
749cf3d3bf feat:引入懒加载,防止弱网情况下无法正常加载应用图标或详情页图片 2026-02-27 23:25:38 +08:00
88670be15e feat:针对弱网环境,侧边栏添加并行加载,重试机制,初始化优化 2026-02-27 23:18:06 +08:00
6ea628d869 feat: 修改应用信息界面,对于已安装应用,安装按钮变为打开按钮,并添加卸载按钮 2026-02-27 23:03:10 +08:00
3a9c9dda22 Merge remote-tracking branch 'refs/remotes/origin/main' 2026-02-25 20:47:13 +08:00
21b069d7ef 添加主页功能,支持加载和展示首页数据,包括链接和推荐应用列表 2026-02-25 20:46:28 +08:00
shenmo
95e22894a7 修复:安装状态判断错误的问题 2026-02-19 21:07:00 +08:00
shenmo
a37ee1cd31 sync: fda3f70d5d 2026-02-19 20:40:02 +08:00
b72f5f8da6 完成 -apm 的全部更改,实现 spk://search,移除 spk://store 2026-02-19 19:56:32 +08:00
3165304016 修改应用名称 2026-02-19 19:27:19 +08:00
6df612889b bump-version to 4.9.9 2026-02-19 19:23:38 +08:00
1cf729e7fd 优化启动速度 2026-02-19 19:22:18 +08:00
058b128eec 添加 policy 2026-02-19 19:10:47 +08:00
69d9c23cff 完成aptss对接 2026-02-19 18:35:41 +08:00
44a55249db 更换安装指令为 aptss 2026-02-19 18:01:16 +08:00
d16dec09a6 修改上游链接 2026-02-19 17:56:30 +08:00
Elysia
c27c1f1697 feat: add sidebar toggle functionality
Signed-off-by: Elysia <a.elysia@proton.me>
2026-02-17 23:23:20 +08:00
Elysia
7b3bd110a9 docs: update changelog for v1.1.1 release
Signed-off-by: Elysia <a.elysia@proton.me>
2026-02-17 22:23:59 +08:00
Elysia
4a0467536c build: bump version to 1.1.1
Signed-off-by: Elysia <a.elysia@proton.me>
2026-02-17 22:22:52 +08:00
Elysia
d45d5082f4 fix(main): use app.getVersion() for packaged app
Signed-off-by: Elysia <a.elysia@proton.me>
2026-02-17 22:08:51 +08:00
Yinan Qin
d2703a1c86 chore: update license badge to MulanPSL 2.0
[no ci]
2026-02-16 13:16:16 +08:00
Yinan Qin
c080bcfb27 docs: add DeepWiki badge to README
Added DeepWiki badge to README.
2026-02-15 00:55:16 +08:00
Elysia
00ea841241 docs(README): add a screenshot 2026-02-15 00:49:49 +08:00
Yinan Qin
bc673c0998 chore: update Dependabot schedule for npm and GitHub Actions
Changed npm update schedule from monthly to weekly and added GitHub Actions updates with a weekly schedule.
2026-02-15 00:36:07 +08:00
Elysia
6a39a7448b restore README.md :( 2026-02-15 00:30:47 +08:00
Elysia
a1cd7ab38f docs: update changelog for version 1.1.0 2026-02-15 00:29:05 +08:00
Elysia
f2c64c111b build: bump version to 1.1.0 2026-02-15 00:27:54 +08:00
Elysia
12b604dbad docs: update changelog generation command 2026-02-15 00:25:39 +08:00
Elysia
dccfa6029a build: add --skip-unstable flag to changelog command 2026-02-15 00:19:29 +08:00
Elysia
0aaaabe31b chore: add changelog generation script 2026-02-15 00:16:45 +08:00
Elysia
7aae00e272 ops(ci): add release job and update node version 2026-02-15 00:09:29 +08:00