feat(security,ci,ui): harden CI/CD, LuCI ACL, low-space updates and mobile layout

- ci: make frontend CI read-only with strict diff check and deterministic calls.json
- ci: pin external GitHub Actions in workflows to immutable commit SHAs
- ci: add openwrt-e2e blocking gate job running docker_e2e_test.sh
- fix(diagnostic): fix contstants.ts typo and update all 13 import sites
- fix(acl): remove unused /bin/busybox exec from rpcd ACL and add regression test
- feat(updates): add low-space update fallback when creating sing-box.old is impossible
- fix(routes): preserve dedicated Discord gateway subnets (162.159.128.0/21)
- feat(ui): implement responsive auto-fit grid and mobile modal viewport bounds
- test: add viewport regression test suite in vitest
This commit is contained in:
Dushnilin
2026-09-14 23:00:18 +03:00
parent 7375e26b44
commit 603c0df91b
41 changed files with 5420 additions and 5198 deletions
@@ -1511,8 +1511,12 @@ function load_community_subnet_cidrs(community, filter_mode) {
}
}
if (service == "discord" && filter_mode == "only_cloudflare" && length(cidrs) == 0)
return core_ip.DEFAULT_DISCORD_VOICE_SUBNETS || [ "162.158.0.0/15", "172.64.0.0/13", "2606:4700::/32" ];
if (service == "discord") {
if (filter_mode == "only_cloudflare" && length(cidrs) == 0)
return core_ip.DEFAULT_DISCORD_VOICE_SUBNETS || [ "162.158.0.0/15", "172.64.0.0/13", "2606:4700::/32" ];
if ((filter_mode == "exclude_cloudflare" || filter_mode == null) && length(cidrs) == 0)
return core_ip.DISCORD_DEDICATED_SUBNETS || [ "162.159.128.0/21" ];
}
return [];
}