chore(release): set APP_VERSION and stamp assets to v1.6.11 [skip ci]

.github/codeql/codeql-config.yml

@@ -1,12 +0,0 @@
----
-name: "FileRise CodeQL config"
-paths:
-  - "public/js"
-  - "api"
-paths-ignore:
-  - "public/vendor/**"
-  - "public/css/vendor/**"
-  - "public/fonts/**"
-  - "public/**/*.min.js"
-  - "public/**/*.min.css"
-  - "public/**/*.map"

.github/workflows/release-on-version.yml

@@ -1,153 +1,159 @@
 ---
-  name: Release on version.js update
-  
-  on:
-    push:
-      branches:
-        - master
-      paths:
-        - public/js/version.js
-    workflow_run:
-      workflows: "Bump version and sync Changelog to Docker Repo"
-      types: completed
-  
-  permissions:
-    contents: write
-  
-  jobs:
-    release:
-      runs-on: ubuntu-latest
-      concurrency:
-        group: release-${{ github.ref }}-${{ github.sha }}
-        cancel-in-progress: false
-  
-      steps:
-        - name: Checkout
-          uses: actions/checkout@v4
-          with:
-            fetch-depth: 0
-  
-        - name: Read version from version.js
-          id: ver
-          shell: bash
-          run: |
-            set -euo pipefail
-            VER=$(grep -Eo "APP_VERSION\s*=\s*['\"]v[^'\"]+['\"]" public/js/version.js | sed -E "s/.*['\"](v[^'\"]+)['\"].*/\1/")
-            if [[ -z "$VER" ]]; then
-              echo "Could not parse APP_VERSION from version.js" >&2
-              exit 1
+name: Release on version.js update
+
+on:
+  push:
+    branches: ["master"]
+    paths:
+      - public/js/version.js
+  workflow_run:
+    workflows: ["Bump version and sync Changelog to Docker Repo"]
+    types: [completed]
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    concurrency:
+      group: release-${{ github.ref }}-${{ github.sha }}
+      cancel-in-progress: false
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Ensure tags available
+        run: |
+          git fetch --tags --force --prune --quiet
+
+      - name: Read version from version.js
+        id: ver
+        shell: bash
+        run: |
+          set -euo pipefail
+          VER=$(grep -Eo "APP_VERSION\s*=\s*['\"]v[^'\"]+['\"]" public/js/version.js | sed -E "s/.*['\"](v[^'\"]+)['\"].*/\1/")
+          if [[ -z "$VER" ]]; then
+            echo "Could not parse APP_VERSION from version.js" >&2
+            exit 1
+          fi
+          echo "version=$VER" >> "$GITHUB_OUTPUT"
+          echo "Parsed version: $VER"
+
+      - name: Skip if tag already exists
+        id: tagcheck
+        shell: bash
+        run: |
+          set -euo pipefail
+          if git rev-parse -q --verify "refs/tags/${{ steps.ver.outputs.version }}" >/dev/null; then
+            echo "exists=true" >> "$GITHUB_OUTPUT"
+            echo "Tag ${{ steps.ver.outputs.version }} already exists. Skipping release."
+          else
+            echo "exists=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Build zip artifact
+        if: steps.tagcheck.outputs.exists == 'false'
+        shell: bash
+        run: |
+          set -euo pipefail
+          ZIP="FileRise-${{ steps.ver.outputs.version }}.zip"
+          zip -r "$ZIP" . \
+            -x "./.git/*" "./.github/*" \
+               "./resources/*" "./resources/**" \
+               "./.dockerignore" "./.gitattributes" "./.gitignore" \
+               "$ZIP" "${ZIP}.sha256" >/dev/null
+
+      - name: Compute SHA-256 checksum
+        if: steps.tagcheck.outputs.exists == 'false'
+        id: sum
+        shell: bash
+        run: |
+          set -euo pipefail
+          ZIP="FileRise-${{ steps.ver.outputs.version }}.zip"
+          SHA=$(shasum -a 256 "$ZIP" | awk '{print $1}')
+          echo "$SHA  $ZIP" > "${ZIP}.sha256"
+          echo "sha=$SHA" >> "$GITHUB_OUTPUT"
+          echo "Computed SHA-256: $SHA"
+
+      - name: Extract notes from CHANGELOG (optional)
+        if: steps.tagcheck.outputs.exists == 'false'
+        id: notes
+        shell: bash
+        run: |
+          set -euo pipefail
+          NOTES_PATH=""
+          if [[ -f CHANGELOG.md ]]; then
+            awk '
+              BEGIN{found=0}
+              /^## / && !found {found=1}
+              found && /^---$/ {exit}
+              found {print}
+            ' CHANGELOG.md > CHANGELOG_SNIPPET.md || true
+            sed -i -e :a -e '/^\n*$/{$d;N;ba' -e '}' CHANGELOG_SNIPPET.md || true
+            if [[ -s CHANGELOG_SNIPPET.md ]]; then
+              NOTES_PATH="CHANGELOG_SNIPPET.md"
             fi
-            echo "version=$VER" >> "$GITHUB_OUTPUT"
-            echo "Parsed version: $VER"
-  
-        - name: Skip if tag already exists
-          id: tagcheck
-          shell: bash
-          run: |
-            set -euo pipefail
-            git fetch --tags --quiet
-            if git rev-parse -q --verify "refs/tags/${{ steps.ver.outputs.version }}" >/dev/null; then
-              echo "exists=true" >> "$GITHUB_OUTPUT"
-              echo "Tag ${{ steps.ver.outputs.version }} already exists. Skipping release."
-            else
-              echo "exists=false" >> "$GITHUB_OUTPUT"
-            fi
-  
-        # Build the artifact first so we can checksum it
-        - name: Build zip artifact
-          if: steps.tagcheck.outputs.exists == 'false'
-          shell: bash
-          run: |
-            set -euo pipefail
-            zip -r "FileRise-${{ steps.ver.outputs.version }}.zip" public/ README.md LICENSE >/dev/null || true
-  
-        - name: Compute SHA-256 checksum
-          if: steps.tagcheck.outputs.exists == 'false'
-          id: sum
-          shell: bash
-          run: |
-            set -euo pipefail
-            ZIP="FileRise-${{ steps.ver.outputs.version }}.zip"
-            SHA=$(shasum -a 256 "$ZIP" | awk '{print $1}')
-            echo "$SHA  $ZIP" > "${ZIP}.sha256"
-            echo "sha=$SHA" >> "$GITHUB_OUTPUT"
-            echo "Computed SHA-256: $SHA"
-  
-        - name: Extract notes from CHANGELOG (optional)
-          if: steps.tagcheck.outputs.exists == 'false'
-          id: notes
-          shell: bash
-          run: |
-            set -euo pipefail
-            NOTES_PATH=""
-            if [[ -f CHANGELOG.md ]]; then
-              awk '
-                BEGIN{found=0}
-                /^## / && !found {found=1}
-                found && /^---$/ {exit}
-                found {print}
-              ' CHANGELOG.md > CHANGELOG_SNIPPET.md || true
-              sed -i -e :a -e '/^\n*$/{$d;N;ba' -e '}' CHANGELOG_SNIPPET.md || true
-              if [[ -s CHANGELOG_SNIPPET.md ]]; then
-                NOTES_PATH="CHANGELOG_SNIPPET.md"
-              fi
-            fi
-            echo "path=$NOTES_PATH" >> "$GITHUB_OUTPUT"
-  
-        - name: Compute previous tag (for Full Changelog link)
-          if: steps.tagcheck.outputs.exists == 'false'
-          id: prev
-          shell: bash
-          run: |
-            set -euo pipefail
-            git fetch --tags --quiet
-            PREV=$(git tag --list "v*" --sort=-v:refname | sed -n '2p' || true)
-            if [[ -z "$PREV" ]]; then
-              PREV=$(git rev-list --max-parents=0 HEAD | tail -n1)
-            fi
-            echo "prev=$PREV" >> "$GITHUB_OUTPUT"
-            echo "Previous tag or baseline: $PREV"
-  
-        - name: Build release body (snippet + full changelog + checksum)
-          if: steps.tagcheck.outputs.exists == 'false'
-          shell: bash
-          run: |
-            set -euo pipefail
-            VER="${{ steps.ver.outputs.version }}"
-            PREV="${{ steps.prev.outputs.prev }}"
-            REPO="${GITHUB_REPOSITORY}"
-            COMPARE_URL="https://github.com/${REPO}/compare/${PREV}...${VER}"
-            ZIP="FileRise-${VER}.zip"
-            SHA="${{ steps.sum.outputs.sha }}"
-  
-            {
-              echo "## ${VER}"
+          fi
+          echo "path=$NOTES_PATH" >> "$GITHUB_OUTPUT"
+
+      - name: Compute previous tag (for Full Changelog link)
+        if: steps.tagcheck.outputs.exists == 'false'
+        id: prev
+        shell: bash
+        run: |
+          set -euo pipefail
+          VER="${{ steps.ver.outputs.version }}"
+          PREV=$(git tag --list "v*" --sort=-v:refname | grep -v -F "$VER" | head -n1 || true)
+          if [[ -z "$PREV" ]]; then
+            PREV=$(git rev-list --max-parents=0 HEAD | tail -n1)
+          fi
+          echo "prev=$PREV" >> "$GITHUB_OUTPUT"
+          echo "Previous tag or baseline: $PREV"
+
+      - name: Build release body (snippet + full changelog + checksum)
+        if: steps.tagcheck.outputs.exists == 'false'
+        shell: bash
+        run: |
+          set -euo pipefail
+          VER="${{ steps.ver.outputs.version }}"
+          PREV="${{ steps.prev.outputs.prev }}"
+          REPO="${GITHUB_REPOSITORY}"
+          COMPARE_URL="https://github.com/${REPO}/compare/${PREV}...${VER}"
+          ZIP="FileRise-${VER}.zip"
+          SHA="${{ steps.sum.outputs.sha }}"
+
+          {
+            echo "## ${VER}"
+            echo
+            if [[ -s CHANGELOG_SNIPPET.md ]]; then
+              cat CHANGELOG_SNIPPET.md
               echo
-              if [[ -s CHANGELOG_SNIPPET.md ]]; then
-                cat CHANGELOG_SNIPPET.md
-                echo
-              fi
-              echo "### Full Changelog"
-              echo "[${PREV} → ${VER}](${COMPARE_URL})"
-              echo
-              echo "### SHA-256 (zip)"
-              echo '```'
-              echo "${SHA}  ${ZIP}"
-              echo '```'
-            } > RELEASE_BODY.md
-  
-            echo "Release body:"
-            sed -n '1,200p' RELEASE_BODY.md
-  
-        - name: Create GitHub Release
-          if: steps.tagcheck.outputs.exists == 'false'
-          uses: softprops/action-gh-release@v2
-          with:
-            tag_name: ${{ steps.ver.outputs.version }}
-            target_commitish: ${{ github.sha }}
-            name: ${{ steps.ver.outputs.version }}
-            body_path: RELEASE_BODY.md
-            generate_release_notes: false
-            files: |
-              FileRise-${{ steps.ver.outputs.version }}.zip
-              FileRise-${{ steps.ver.outputs.version }}.zip.sha256
+            fi
+            echo "### Full Changelog"
+            echo "[${PREV} → ${VER}](${COMPARE_URL})"
+            echo
+            echo "### SHA-256 (zip)"
+            echo '```'
+            echo "${SHA}  ${ZIP}"
+            echo '```'
+          } > RELEASE_BODY.md
+
+          echo "Release body:"
+          sed -n '1,200p' RELEASE_BODY.md
+
+      - name: Create GitHub Release
+        if: steps.tagcheck.outputs.exists == 'false'
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.ver.outputs.version }}
+          target_commitish: ${{ github.sha }}
+          name: ${{ steps.ver.outputs.version }}
+          body_path: RELEASE_BODY.md
+          generate_release_notes: false
+          files: |
+            FileRise-${{ steps.ver.outputs.version }}.zip
+            FileRise-${{ steps.ver.outputs.version }}.zip.sha256

CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## Changes 10/28/2025 (v1.6.11)
+
+release(v1.6.11) fix(ui/dragAndDrop) restore floating zones toggle click action
+
+Re-add the click handler to toggle `zonesCollapsed` so the header
+“sidebarToggleFloating” button actually expands/collapses the zones
+again. This regressed in v1.6.10 during auth-gating refactor.
+
+Refs: #regression #ux
+
+chore(codeql): move config to repo root for default setup
+
+- Relocate .github/codeql/codeql-config.yml to codeql-config.yml so GitHub default code scanning picks it up
+- Keep paths: public/js, api
+- Keep ignores: public/vendor/**, public/css/vendor/**, public/fonts/**, public/**/*.min.{js,css}, public/**/*.map
+
+---
+
 ## Changes 10/28/2025 (v1.6.10)
 
 release(v1.6.10): self-host ReDoc, gate sidebar toggle on auth, and enrich release workflow

codeql-config.yml

@@ -0,0 +1,12 @@
+---
+name: FileRise CodeQL config
+paths:
+  - public/js
+  - api
+paths-ignore:
+  - public/vendor/**
+  - public/css/vendor/**
+  - public/fonts/**
+  - public/**/*.min.js
+  - public/**/*.min.css
+  - public/**/*.map

public/api.php

@@ -21,10 +21,10 @@ if (isset($_GET['spec'])) {
   <title>FileRise API Docs</title>
 
   <!-- Local ReDoc bundle -->
-  <script defer src="/vendor/redoc/redoc.standalone.js?v=1.6.10"></script>
+  <script defer src="/vendor/redoc/redoc.standalone.js?v=1.6.11"></script>
 
   <!-- Your init (also local) -->
-  <script defer src="/js/redoc-init.js?v=1.6.10"></script>
+  <script defer src="/js/redoc-init.js?v=1.6.11"></script>
 </head>
 <body>
   <redoc spec-url="/api.php?spec=1"></redoc>

public/index.html

@@ -11,28 +11,28 @@
   <meta name="share-url" content="">
 
   <style>.main-wrapper{display:none}#loadingOverlay{position:fixed;inset:0;background:var(--bg-color,#fff);z-index:9999;display:flex;align-items:center;justify-content:center}</style>
-  <link rel="stylesheet" href="/css/vendor/roboto.css?v=1.6.10">
-  <link rel="stylesheet" href="/css/vendor/material-icons.css?v=1.6.10">
+  <link rel="stylesheet" href="/css/vendor/roboto.css?v=1.6.11">
+  <link rel="stylesheet" href="/css/vendor/material-icons.css?v=1.6.11">
 
   <!-- Bootstrap CSS (local) -->
-  <link rel="stylesheet" href="/vendor/bootstrap/4.5.2/bootstrap.min.css?v=1.6.10">
+  <link rel="stylesheet" href="/vendor/bootstrap/4.5.2/bootstrap.min.css?v=1.6.11">
 
   <!-- CodeMirror CSS (local) -->
-  <link rel="stylesheet" href="/vendor/codemirror/5.65.5/codemirror.min.css?v=1.6.10">
-  <link rel="stylesheet" href="/vendor/codemirror/5.65.5/theme/material-darker.min.css?v=1.6.10">
+  <link rel="stylesheet" href="/vendor/codemirror/5.65.5/codemirror.min.css?v=1.6.11">
+  <link rel="stylesheet" href="/vendor/codemirror/5.65.5/theme/material-darker.min.css?v=1.6.11">
 
   <!-- app CSS -->
-  <link rel="stylesheet" href="/css/styles.css?v=1.6.10">
+  <link rel="stylesheet" href="/css/styles.css?v=1.6.11">
 
   <!-- Libraries (JS) -->
-  <script src="/vendor/dompurify/2.4.0/purify.min.js?v=1.6.10"></script>
-  <script src="/vendor/fuse/6.6.2/fuse.min.js?v=1.6.10"></script>
-  <script src="/vendor/resumable/1.1.0/resumable.min.js?v=1.6.10"></script>
+  <script src="/vendor/dompurify/2.4.0/purify.min.js?v=1.6.11"></script>
+  <script src="/vendor/fuse/6.6.2/fuse.min.js?v=1.6.11"></script>
+  <script src="/vendor/resumable/1.1.0/resumable.min.js?v=1.6.11"></script>
 
   <!-- CodeMirror core FIRST, then modes -->
-  <script src="/vendor/codemirror/5.65.5/codemirror.min.js?v=1.6.10"></script>
+  <script src="/vendor/codemirror/5.65.5/codemirror.min.js?v=1.6.11"></script>
 
-  <script src="/js/version.js?v=1.6.10"></script>
+  <script src="/js/version.js?v=1.6.11"></script>
   <script type="module" src="/js/main.js"></script>
 
 </head>

public/js/dragAndDrop.js

@@ -551,6 +551,10 @@ function ensureZonesToggle() {
       btn.style.color = '#e0e0e0';
     }
 
+    btn.addEventListener('click', () => {
+      setZonesCollapsed(!isZonesCollapsed());
+    });
+
     // Insert right after the logo if present, else append to host
     const afterLogo = host.querySelector('.header-logo');
     if (afterLogo && afterLogo.parentNode) {

public/js/version.js

@@ -1,2 +1,2 @@
 // generated by CI
-window.APP_VERSION = 'v1.6.10';
+window.APP_VERSION = 'v1.6.11';