feat(pass-desktop): add optional screen privacy setting

.grype.yaml

@@ -12,159 +12,18 @@ ignore:
     #  - patch/update the target dependency accordingly
     #  - the CI should be green and that's it
 
-    ## Criticals
-    ### Go
-    - vulnerability: GHSA-v778-237x-gjrc
-      package:
-          name: golang.org/x/crypto
-          type: go-module
-          version: v0.0.0-20210322153248-0c34fe9e7dc2
-    - vulnerability: GHSA-v778-237x-gjrc
-      package:
-          name: golang.org/x/crypto
-          type: go-module
-          version: v0.0.0-20220829220503-c86fa9a7ed90
-    - vulnerability: CVE-2025-68121
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2025-68121
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2025-68121
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.24.5
-    - vulnerability: CVE-2025-22871
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2025-22871
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2024-24790
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-29405
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-29404
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-29402
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-24540
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-24538
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-24531
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2022-23806
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2021-38297
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2020-29511
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2020-29509
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2024-24790
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-29405
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-29404
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-29402
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-24540
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-24538
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-24531
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2026-27143
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2026-27143
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2026-27143
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.26.1
-    ### Npm
+    ## Go
+    # Safe to ignore: Go is not used in production. The only Go code in this repo is a
+    # change set generation script and is never shipped or executed in a production environment.
+    - package:
+        type: go-module
+
+    ## Npm
     - vulnerability: GHSA-phwq-j96m-2c2q
       package:
           name: ejs
           type: npm
           version: 2.7.4
-    - vulnerability: GHSA-vjh7-7g9h-fjfh
-      package:
-          name: elliptic
-          type: npm
-          version: 6.5.7
     - vulnerability: GHSA-593f-38f6-jp5m
       package:
           name: koa
@@ -175,8 +34,3 @@ ignore:
           name: loader-utils
           type: npm
           version: 0.2.17
-    - vulnerability: GHSA-cf4h-3jhx-xvhq
-      package:
-          name: underscore
-          type: npm
-          version: 1.7.0

.yarn/patches/playwright-npm-1.58.2-0c12daad27.patch

@@ -0,0 +1,13 @@
+diff --git a/lib/transform/transform.js b/lib/transform/transform.js
+index 715bcce88b2bcc5647718f3c58bb1ebdd9585fa0..df097ca05160c58185b2b277f45a3f2aeb667ed7 100644
+--- a/lib/transform/transform.js
++++ b/lib/transform/transform.js
+@@ -179,7 +179,7 @@ function resolveHook(filename, specifier) {
+ function shouldTransform(filename) {
+   if (_externalMatcher(filename))
+     return false;
+-  return !(0, import_compilationCache.belongsToNodeModules)(filename);
++  return !(0, import_compilationCache.belongsToNodeModules)(filename) || filename.includes('@protontech');
+ }
+ let transformData;
+ function setTransformData(pluginName, value) {

.yarnrc.yml

@@ -1,35 +1,44 @@
+approvedGitRepositories:
+    - '**'
+
+compressionLevel: mixed
+
+enableConstraintsChecks: true
+
+enableScripts: true
+
 httpProxy: '${http_proxy:-}'
 
 httpsProxy: '${https_proxy:-}'
 
 nodeLinker: node-modules
 
-plugins:
-    - path: .yarn/plugin-postinstall.js
-
-yarnPath: .yarn/releases/yarn-4.13.0.cjs
-
-npmPublishRegistry: https://nexus.protontech.ch/repository/web-npm/
+npmAuditIgnoreAdvisories:
+    - 1108110
+    - 1108111
 
-npmScopes:
-    tpe:
-        npmRegistryServer: 'https://gitlab.protontech.ch/api/v4/projects/4357/packages/npm/'
-        npmAuthToken: '${CI_JOB_TOKEN:-}'
-    proton-meet:
-        npmRegistryServer: 'https://nexus.protontech.ch/repository/meet-npm/'
-    proton:
-        npmRegistryServer: 'https://nexus.protontech.ch/repository/foundation-npm/'
+npmMinimalAgeGate: 3d
 
 npmPreapprovedPackages:
     - '@proton/*'
+    - '@proton-meet/*'
     - '@protontech/*'
+    - '@openpgp/*'
+    - '@tpe/*'
+    - 'dompurify'
 
-npmAuditIgnoreAdvisories:
-    # Ignore advisories for xlsx package. This package is depended on by a third-party library rowsncolumns (docs)
-    # and hasn't gotten any priority to change.
-    - 1108110
-    - 1108111
+npmPublishRegistry: 'https://nexus.protontech.ch/repository/web-npm/'
 
-compressionLevel: mixed
+npmScopes:
+    proton:
+        npmRegistryServer: 'https://nexus.protontech.ch/repository/foundation-npm/'
+    proton-meet:
+        npmRegistryServer: 'https://nexus.protontech.ch/repository/meet-npm/'
+    tpe:
+        npmAuthToken: '${CI_JOB_TOKEN:-}'
+        npmRegistryServer: 'https://gitlab.protontech.ch/api/v4/projects/4357/packages/npm/'
 
-npmMinimalAgeGate: 3d
+plugins:
+    - path: .yarn/plugin-postinstall.js
+
+yarnPath: .yarn/releases/yarn-4.16.0.cjs

applications/account/jest.config.js

@@ -3,7 +3,7 @@ module.exports = {
     moduleDirectories: ['<rootDir>/node_modules', 'node_modules'],
     testEnvironment: '@proton/jest-env',
     transformIgnorePatterns: [
-        'node_modules/(?!(@proton/shared|@proton/components|@protontech/telemetry|@protontech/mutex-browser|pmcrypto|openpgp|@openpgp/web-stream-tools|@protontech/bip39|emoji-mart|@preact/signals-core|@scure/base)/)',
+        'node_modules/(?!(@proton/shared|@proton/components|@protontech/telemetry|@protontech/mutex-browser|@protontech/crypto|openpgp|@openpgp/web-stream-tools|@protontech/bip39|emoji-mart|@preact/signals-core|@scure/base)/)',
     ],
     transform: {
         '^.+\\.(ts|js|mjs)x?$': [

applications/account/jest.setup.js

@@ -1,6 +1,7 @@
 import '@testing-library/jest-dom';
 
 import '@proton/testing/lib/mockMatchMedia';
+import '@proton/testing/lib/mockTelemetry';
 import '@proton/testing/lib/mockUnleash';
 
 // Silence warnings on expect to throw https://github.com/testing-library/react-testing-library/issues/157
@@ -19,10 +20,6 @@ jest.mock('@proton/shared/lib/helpers/setupCryptoWorker', () => ({
     loadCryptoWorker: jest.fn(),
 }));
 
-jest.mock('@proton/shared/lib/i18n/dateFnLocales', () => ({
-    __esModule: true,
-}));
-
 jest.mock('./src/app/locales.ts', () => ({
     __esModule: true,
     getLocaleMapping: () => 'en',

applications/account/locales/.locale-state.metadata

@@ -1,4 +1,4 @@
 {
   "project": "fe-account",
-  "locale": "4bf2a73d6cbe2f452ce6d19bc4398139b930f14d"
+  "locale": "e0c812a250eaf189262cc4d649a96cb1d9079f49"
 }