[pull] dev from KelvinTegelaar:dev

.github/workflows/Node_Project_Check.yml

@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v6.3.0
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install and Build Test

.github/workflows/cipp_dev_build.yml

@@ -26,7 +26,7 @@ jobs:
           echo "node_version=$node_sanitized_version" >> $GITHUB_OUTPUT
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6.3.0
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: ${{ steps.get_node_version.outputs.node_version }}
 

.github/workflows/cipp_frontend_build.yml

@@ -26,7 +26,7 @@ jobs:
           echo "node_version=$node_sanitized_version" >> $GITHUB_OUTPUT
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6.3.0
+        uses: actions/setup-node@v6.4.0
         with:
           node-version: ${{ steps.get_node_version.outputs.node_version }}
 

.github/workflows/pr_check.yml

@@ -22,7 +22,7 @@ jobs:
         # Only process fork PRs with specific branch conditions
         # Must be a fork AND (source is main/master OR target is main/master)
         if: |
-          github.event.pull_request.head.repo.fork == true && 
+          github.event.pull_request.head.repo.fork == true &&
           ((github.event.pull_request.head.ref == 'main' || github.event.pull_request.head.ref == 'master') ||
           (github.event.pull_request.base.ref == 'main' || github.event.pull_request.base.ref == 'master'))
         uses: actions/github-script@v9
@@ -31,7 +31,31 @@ jobs:
           script: |
             let message = '';
 
+            // Check if the fork has open PRs (indicates pull bot or similar is active)
+            const forkOwner = context.payload.pull_request.head.repo.owner.login;
+            const forkRepo = context.payload.pull_request.head.repo.name;
+            const forkPullsUrl = context.payload.pull_request.head.repo.html_url + '/pulls';
+
+            let openPRs = [];
+            try {
+              const { data: prs } = await github.rest.pulls.list({
+                owner: forkOwner,
+                repo: forkRepo,
+                state: 'open',
+                per_page: 5
+              });
+              openPRs = prs;
+            } catch (e) {
+              // Can't read fork PRs — skip
+            }
+
             message += '🔄 If you are attempting to update your CIPP repo please follow the instructions at: https://docs.cipp.app/setup/self-hosting-guide/updating. Are you a sponsor? Contact the helpdesk for direct assistance with updating to the latest version.';
+
+            if (openPRs.length > 0) {
+              message += ` It looks like you may already have a pending update PR on your fork — check your [open pull requests](${forkPullsUrl}) to accept it.`;
+            } else {
+              message += ` You can enable [Pull Bot](https://github.com/apps/pull) or [Repo Sync](https://github.com/apps/repo-sync) to automatically keep your fork up to date.`;
+            }
             message += '\n\n';
 
             // Check if PR is targeting main/master
@@ -40,7 +64,7 @@ jobs:
             }
 
             // Check if PR is from a fork's main/master branch
-            if (context.payload.pull_request.head.repo.fork && 
+            if (context.payload.pull_request.head.repo.fork &&
                 (context.payload.pull_request.head.ref === 'main' || context.payload.pull_request.head.ref === 'master')) {
               message += '⚠️ This PR cannot be merged because it originates from your fork\'s main/master branch. If you are attempting to contribute code please PR from your dev branch or another non-main/master branch.\n\n';
             }

next.config.js

@@ -1,6 +1,27 @@
+const disableOptimizePackageImports = process.env.NEXT_DISABLE_OPTIMIZE_PACKAGE_IMPORTS === '1'
+
 /** @type {import('next').NextConfig} */
 const config = {
   reactStrictMode: false,
+  experimental: {
+    optimizePackageImports: disableOptimizePackageImports
+      ? []
+      : [
+          '@mui/material',
+          '@mui/icons-material',
+          '@mui/lab',
+          '@mui/system',
+          '@mui/x-date-pickers',
+          'material-react-table',
+          'mui-tiptap',
+          'recharts',
+          '@react-pdf/renderer',
+        ],
+    webpackMemoryOptimizations: true,
+    preloadEntriesOnStart: false,
+    turbopackFileSystemCacheForDev: false,
+    turbopackMemoryLimit: 4096,
+  },
   images: {
     unoptimized: true,
   },
@@ -12,12 +33,6 @@ const config = {
       },
     },
   },
-  experimental: {
-    webpackMemoryOptimizations: true,
-    preloadEntriesOnStart: false,
-    turbopackFileSystemCacheForDev: false,
-    turbopackMemoryLimit: 4096,
-  },
   async redirects() {
     return []
   },

package.json

@@ -1,6 +1,6 @@
 {
   "name": "cipp",
-  "version": "10.4.1",
+  "version": "10.4.5",
   "author": "CIPP Contributors",
   "homepage": "https://cipp.app/",
   "bugs": {
@@ -16,7 +16,7 @@
   },
   "scripts": {
     "dev": "next -H 127.0.0.1",
-    "build": "next build && rm -rf package.json yarn.lock",
+    "build": "next build --webpack && rm -rf package.json yarn.lock",
     "start": "next start",
     "export": "next export",
     "lint": "npx eslint .",
@@ -43,8 +43,8 @@
     "@reduxjs/toolkit": "^2.11.2",
     "@tanstack/query-sync-storage-persister": "^5.90.25",
     "@tanstack/react-query": "^5.96.2",
-    "@tanstack/react-query-devtools": "^5.51.11",
-    "@tanstack/react-query-persist-client": "^5.76.0",
+    "@tanstack/react-query-devtools": "^5.96.2",
+    "@tanstack/react-query-persist-client": "^5.96.2",
     "@tanstack/react-table": "^8.19.2",
     "@tiptap/core": "^3.4.1",
     "@tiptap/extension-heading": "^3.4.1",
@@ -53,7 +53,7 @@
     "@tiptap/pm": "^3.22.3",
     "@tiptap/react": "^3.20.5",
     "@tiptap/starter-kit": "^3.20.5",
-    "@uiw/react-json-view": "^2.0.0-alpha.41",
+    "@uiw/react-json-view": "^2.0.0-alpha.42",
     "@vvo/tzdb": "^6.198.0",
     "apexcharts": "5.10.4",
     "axios": "1.15.0",
@@ -73,7 +73,7 @@
     "lodash.isequal": "4.5.0",
     "material-react-table": "^3.0.1",
     "monaco-editor": "^0.55.1",
-    "mui-tiptap": "^1.29.1",
+    "mui-tiptap": "^1.30.0",
     "next": "^16.2.2",
     "nprogress": "0.2.0",
     "numeral": "2.0.6",
@@ -102,7 +102,7 @@
     "react-time-ago": "^7.3.3",
     "react-virtuoso": "^4.18.5",
     "react-window": "^2.2.7",
-    "recharts": "^3.7.0",
+    "recharts": "^3.8.1",
     "redux": "5.0.1",
     "redux-devtools-extension": "2.13.9",
     "redux-persist": "^6.0.0",

public/languageList.json

@@ -160,6 +160,13 @@
     "languageTag": "Danish (da-DK)",
     "LCID": "1030"
   },
+  {
+    "language": "Dutch",
+    "Geographic area": "Belgium",
+    "tag": "nl-BE",
+    "languageTag": "Dutch (nl-BE)",
+    "LCID": "2067"
+  },
   {
     "language": "Dutch",
     "Geographic area": "Netherlands",

public/manifest.json

@@ -1,15 +1,26 @@
 {
-  "short_name": "Carpatin",
-  "name": "Carpatin",
+  "short_name": "CIPP",
+  "name": "CIPP - CyberDrian Improved Partner Portal",
   "icons": [
     {
       "src": "favicon.ico",
       "sizes": "64x64 32x32 24x24 16x16",
       "type": "image/x-icon"
+    },
+    {
+      "src": "android-chrome-192x192.png",
+      "sizes": "192x192",
+      "type": "image/png"
+    },
+    {
+      "src": "android-chrome-512x512.png",
+      "sizes": "512x512",
+      "type": "image/png"
     }
   ],
-  "start_url": ".",
+  "start_url": "/",
+  "scope": "/",
   "display": "standalone",
-  "theme_color": "#000000",
+  "theme_color": "#ffffff",
   "background_color": "#ffffff"
-}
+}

public/sw.js

@@ -0,0 +1,8 @@
+// Minimal service worker to satisfy Chrome's installability criteria.
+// This does NOT cache anything or provide offline support — it simply
+// passes all requests through to the network so Chrome treats the site
+// as an installable web app.
+
+self.addEventListener('install', () => self.skipWaiting())
+self.addEventListener('activate', (event) => event.waitUntil(self.clients.claim()))
+self.addEventListener('fetch', () => {})

public/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "10.4.1"
+  "version": "10.4.5"
 }

src/components/CippCards/CippDomainCards.jsx

@@ -470,6 +470,13 @@ export const CippDomainCards = ({ domain: propDomain = "", fullwidth = false })
     waiting: !!domain,
   });
 
+  const { data: autoDiscoverData, isFetching: autoDiscoverLoading } = ApiGetCall({
+    url: "/api/ListDomainHealth",
+    queryKey: `autodiscover-${domain}`,
+    data: { Domain: domain, Action: "ReadAutoDiscover" },
+    waiting: !!domain,
+  });
+
   const { data: httpsData, isFetching: httpsLoading } = ApiGetCall({
     url: "/api/ListDomainHealth",
     queryKey: `https-${domain}-${subdomains}`,
@@ -684,6 +691,26 @@ export const CippDomainCards = ({ domain: propDomain = "", fullwidth = false })
                 }
               />
             </Grid>
+            <Grid size={{ md: gridItemSize, xs: 12 }}>
+              <DomainResultCard
+                title="AutoDiscover"
+                data={autoDiscoverData}
+                isFetching={autoDiscoverLoading}
+                info={
+                  <div>
+                    <p>
+                      AutoDiscover ({autoDiscoverData?.RecordType || "None"}):
+                    </p>
+                    <CippCodeBlock code={autoDiscoverData?.Record || "No record found"} />
+                    <ResultList
+                      passes={autoDiscoverData?.ValidationPasses}
+                      warns={autoDiscoverData?.ValidationWarns}
+                      fails={autoDiscoverData?.ValidationFails}
+                    />
+                  </div>
+                }
+              />
+            </Grid>
             {enableHttps && (
               <Grid size={{ md: gridItemSize, xs: 12 }}>
                 <DomainResultCard

src/components/CippCards/CippRemediationCard.jsx

@@ -1,13 +1,13 @@
-import { Button, Typography, List, ListItem, SvgIcon } from "@mui/material";
-import CippButtonCard from "./CippButtonCard"; // Adjust the import path as needed
-import { CippApiDialog } from "../CippComponents/CippApiDialog";
-import { useDialog } from "../../hooks/use-dialog";
-import { Sync } from "@mui/icons-material";
-import { ShieldCheckIcon } from "@heroicons/react/24/outline";
+import { Button, Typography, List, ListItem, SvgIcon } from '@mui/material'
+import CippButtonCard from './CippButtonCard' // Adjust the import path as needed
+import { CippApiDialog } from '../CippComponents/CippApiDialog'
+import { useDialog } from '../../hooks/use-dialog'
+import { Sync } from '@mui/icons-material'
+import { ShieldCheckIcon } from '@heroicons/react/24/outline'
 
 export default function CippRemediationCard(props) {
-  const { userPrincipalName, isFetching, userId, tenantFilter, restartProcess } = props;
-  const createDialog = useDialog();
+  const { userPrincipalName, isFetching, userId, tenantFilter, restartProcess } = props
+  const createDialog = useDialog()
   return (
     <CippButtonCard
       title={
@@ -60,20 +60,21 @@ export default function CippRemediationCard(props) {
         <ListItem>Disconnect all current sessions</ListItem>
         <ListItem>Remove all MFA methods for the user</ListItem>
         <ListItem>Disable all inbox rules for the user</ListItem>
+        <ListItem>Disable OneDrive sharing</ListItem>
       </List>
       <CippApiDialog
         title="Remediate User"
         createDialog={createDialog}
         api={{
-          url: "/api/execBecRemediate",
+          url: '/api/execBecRemediate',
           confirmText:
-            "This will remediate this user, blocking their signin, resetting their password, disconnecting their sessions, and disabling all their inbox rules. Are you sure you want to continue?",
-          type: "POST",
-          data: { tenantFilter: tenantFilter, userId: "userId", username: "userPrincipalName" },
-          replacementBehaviour: "removeNulls",
+            'This will remediate this user, blocking their signin, resetting their password, disconnecting their sessions, and disabling all their inbox rules. Are you sure you want to continue?',
+          type: 'POST',
+          data: { tenantFilter: tenantFilter, userId: 'userId', username: 'userPrincipalName' },
+          replacementBehaviour: 'removeNulls',
         }}
         row={props}
       />
     </CippButtonCard>
-  );
+  )
 }

src/components/CippComponents/CippApiResults.jsx

@@ -188,21 +188,23 @@ export const CippApiResults = (props) => {
     } else {
       setFetchingVisible(false);
     }
-    if (!errorsOnly) {
-      if (allResults.length > 0) {
-        setFinalResults(
-          allResults.map((res, index) => ({
-            id: index,
-            text: res.text,
-            copyField: res.copyField,
-            severity: res.severity,
-            visible: true,
-            ...res,
-          })),
-        );
-      } else {
-        setFinalResults([]);
-      }
+    const resultsToShow = errorsOnly
+      ? allResults.filter((r) => r.severity === "error")
+      : allResults;
+
+    if (resultsToShow.length > 0) {
+      setFinalResults(
+        resultsToShow.map((res, index) => ({
+          id: index,
+          text: res.text,
+          copyField: res.copyField,
+          severity: res.severity,
+          visible: true,
+          ...res,
+        })),
+      );
+    } else {
+      setFinalResults([]);
     }
   }, [
     apiObject.isError,

src/components/CippComponents/CippAppTemplateDrawer.jsx

@@ -892,6 +892,21 @@ export const CippAppTemplateDrawer = ({
               />
             </Grid>
           </CippFormCondition>
+          <CippFormCondition
+            formControl={formControl}
+            field="AssignTo"
+            compareType="isNot"
+            compareValue="On"
+          >
+            <Grid size={{ xs: 12 }}>
+              <CippFormComponent
+                type="textField"
+                label="Exclude Group Names separated by comma. Wildcards (*) are allowed"
+                name="excludeGroup"
+                formControl={formControl}
+              />
+            </Grid>
+          </CippFormCondition>
 
           {/* Add App Button */}
           {applicationType?.value && (