2 Commits

Include renames

Author	SHA1	Message	Date
dependabot[bot]	5701a554d2	chore(deps): bump keycloak-js in /roles/web-app-dashboard/files ... Bumps [keycloak-js](https://github.com/keycloak/keycloak-js) from 24.0.5 to 26.2.4. - [Release notes](https://github.com/keycloak/keycloak-js/releases) - [Changelog](https://github.com/keycloak/keycloak-js/blob/main/RELEASE-CHECKLIST.md) - [Commits](https://github.com/keycloak/keycloak-js/commits/26.2.4) --- updated-dependencies: - dependency-name: keycloak-js dependency-version: 26.2.4 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-08-08 06:07:45 +00:00
kevinveenbirkenbachandClaude Opus 4.8	e99d8a8813	feat(cdn): serve role frontend dependencies from the internal CDN ... Add lookup('asset', app, pkg, path) and lookup('asset_host'): both resolve the asset origin through one shared resolve_host, returning the internal CDN domain when web-svc-cdn is deployed with flavor internal and cdn.jsdelivr.net otherwise, so template URLs and CSP origins can never diverge. Versions come from the role's committed files/package-lock.json. Roles declare frontend dependencies in files/package.json; web-svc-cdn aggregates every role lockfile, runs one npm ci per role in a node container and mirrors the packages under /npm/<pkg>@<version>/ following jsdelivr's path scheme, so internal and external URLs differ only by host. Convert web-app-dashboard (keycloak-js 24.0.5 UMD) and web-app-littlejs (bootstrap, fontawesome) to the asset lookup, drop the vendored keycloak blob, and add a repository lint forbidding hardcoded external CDN hosts in templates and CSP metas; pre-existing external CDN entries are checked out with nocheck markers and a migration TODO. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-23 20:01:31 +02:00