feat(pass): upgrade search with field weighting and match quality

.browserslistrc

@@ -0,0 +1,26 @@
+# Default browserlist target for production, should not be overriden
+
+[production]
+> 0.5%
+not IE 11
+Firefox ESR
+Safari 14
+iOS 14
+Chrome 80
+
+[electron-applications]
+Chrome 142
+
+[development]
+last 1 chrome version
+last 1 firefox version
+last 1 safari version
+
+# Browserlist override for specific apps
+
+[verify]
+> 0.1%
+IE 11
+Firefox ESR
+Safari 10
+Chrome 50

.gitignore

@@ -43,6 +43,9 @@ build
 test-results
 tests/**/*.png
 !tests/**/*-linux.png
+# Google Drive perf auth state — generated at setup, holds live session tokens, never committed.
+tests/drive/performance/.auth/google-profile
+tests/drive/performance/.auth/google-drive-user.json
 !tests/mail/**/*.png
 tests/mail/old/binaries/credentials.json
 tests/mail/old/binaries/tokens.json

.grype.yaml

@@ -12,159 +12,18 @@ ignore:
     #  - patch/update the target dependency accordingly
     #  - the CI should be green and that's it
 
-    ## Criticals
-    ### Go
-    - vulnerability: GHSA-v778-237x-gjrc
-      package:
-          name: golang.org/x/crypto
-          type: go-module
-          version: v0.0.0-20210322153248-0c34fe9e7dc2
-    - vulnerability: GHSA-v778-237x-gjrc
-      package:
-          name: golang.org/x/crypto
-          type: go-module
-          version: v0.0.0-20220829220503-c86fa9a7ed90
-    - vulnerability: CVE-2025-68121
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2025-68121
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2025-68121
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.24.5
-    - vulnerability: CVE-2025-22871
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2025-22871
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2024-24790
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-29405
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-29404
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-29402
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-24540
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-24538
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2023-24531
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2022-23806
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2021-38297
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2020-29511
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2020-29509
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2024-24790
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-29405
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-29404
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-29402
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-24540
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-24538
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2023-24531
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2026-27143
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.15.5
-    - vulnerability: CVE-2026-27143
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.18.8
-    - vulnerability: CVE-2026-27143
-      package:
-          name: stdlib
-          type: go-module
-          version: go1.26.1
-    ### Npm
+    ## Go
+    # Safe to ignore: Go is not used in production. The only Go code in this repo is a
+    # change set generation script and is never shipped or executed in a production environment.
+    - package:
+        type: go-module
+
+    ## Npm
     - vulnerability: GHSA-phwq-j96m-2c2q
       package:
           name: ejs
           type: npm
           version: 2.7.4
-    - vulnerability: GHSA-vjh7-7g9h-fjfh
-      package:
-          name: elliptic
-          type: npm
-          version: 6.5.7
     - vulnerability: GHSA-593f-38f6-jp5m
       package:
           name: koa
@@ -175,8 +34,3 @@ ignore:
           name: loader-utils
           type: npm
           version: 0.2.17
-    - vulnerability: GHSA-cf4h-3jhx-xvhq
-      package:
-          name: underscore
-          type: npm
-          version: 1.7.0

.margebot.yml

@@ -17,6 +17,11 @@ fastTrack:
         - aharwara
         - pchiabre
         - vthanase
+        - mdupont
+        - emaguire
+        - nreijers
+        - lcerabone
+        - eatencio
 forbiddenTags:
     - state::Blocked
 ciFailFast: true

.yarn/patches/playwright-npm-1.61.1-55c1fb1408.patch

@@ -0,0 +1,13 @@
+diff --git a/lib/common/index.js b/lib/common/index.js
+index 93b0e2357878e2f5f6dc0d888d04970d3880cc92..beeeb8bf0fd89b06cd18d828772fe4f32314242c 100644
+--- a/lib/common/index.js
++++ b/lib/common/index.js
+@@ -1102,7 +1102,7 @@ function resolveHook(filename, specifier) {
+ function shouldTransform(filename) {
+   if (_externalMatcher(filename))
+     return false;
+-  return !belongsToNodeModules(filename);
++  return !belongsToNodeModules(filename) || filename.includes('@protontech');
+ }
+ var transformData;
+ function setTransformData(pluginName, value) {

.yarnrc.yml

@@ -1,35 +1,44 @@
+approvedGitRepositories:
+    - '**'
+
+compressionLevel: mixed
+
+enableConstraintsChecks: true
+
+enableScripts: true
+
 httpProxy: '${http_proxy:-}'
 
 httpsProxy: '${https_proxy:-}'
 
 nodeLinker: node-modules
 
-plugins:
-    - path: .yarn/plugin-postinstall.js
-
-yarnPath: .yarn/releases/yarn-4.13.0.cjs
-
-npmPublishRegistry: https://nexus.protontech.ch/repository/web-npm/
+npmAuditIgnoreAdvisories:
+    - '1108110' # xlsx - https://github.com/advisories/GHSA-4r6h-8v6p-xvw6
+    - '1108111' # xlsx - https://github.com/advisories/GHSA-5pgg-2g8v-p4x9
+    - '1122144' # echarts - https://github.com/advisories/GHSA-fgmj-fm8m-jvvx
 
-npmScopes:
-    tpe:
-        npmRegistryServer: 'https://gitlab.protontech.ch/api/v4/projects/4357/packages/npm/'
-        npmAuthToken: '${CI_JOB_TOKEN:-}'
-    proton-meet:
-        npmRegistryServer: 'https://nexus.protontech.ch/repository/meet-npm/'
-    proton:
-        npmRegistryServer: 'https://nexus.protontech.ch/repository/foundation-npm/'
+npmMinimalAgeGate: 3d
 
 npmPreapprovedPackages:
     - '@proton/*'
+    - '@proton-meet/*'
     - '@protontech/*'
+    - '@openpgp/*'
+    - '@tpe/*'
 
-npmAuditIgnoreAdvisories:
-    # Ignore advisories for xlsx package. This package is depended on by a third-party library rowsncolumns (docs)
-    # and hasn't gotten any priority to change.
-    - 1108110
-    - 1108111
+npmPublishRegistry: 'https://nexus.protontech.ch/repository/web-npm/'
 
-compressionLevel: mixed
+npmScopes:
+    proton:
+        npmRegistryServer: 'https://nexus.protontech.ch/repository/foundation-npm/'
+    proton-meet:
+        npmRegistryServer: 'https://nexus.protontech.ch/repository/meet-npm/'
+    tpe:
+        npmAuthToken: '${CI_JOB_TOKEN:-}'
+        npmRegistryServer: 'https://gitlab.protontech.ch/api/v4/projects/4357/packages/npm/'
 
-npmMinimalAgeGate: 3d
+plugins:
+    - path: .yarn/plugin-postinstall.js
+
+yarnPath: .yarn/releases/yarn-4.16.0.cjs

applications/account/jest.config.js

@@ -3,7 +3,7 @@ module.exports = {
     moduleDirectories: ['<rootDir>/node_modules', 'node_modules'],
     testEnvironment: '@proton/jest-env',
     transformIgnorePatterns: [
-        'node_modules/(?!(@proton/shared|@proton/components|@protontech/telemetry|@protontech/mutex-browser|pmcrypto|openpgp|@openpgp/web-stream-tools|@protontech/bip39|emoji-mart|@preact/signals-core|@scure/base)/)',
+        'node_modules/(?!(@proton/shared|@proton/components|@protontech/telemetry|@protontech/mutex-browser|@protontech/crypto|openpgp|@openpgp/web-stream-tools|@protontech/bip39|emoji-mart|@preact/signals-core|@scure/base)/)',
     ],
     transform: {
         '^.+\\.(ts|js|mjs)x?$': [

applications/account/jest.setup.js

@@ -1,6 +1,7 @@
 import '@testing-library/jest-dom';
 
 import '@proton/testing/lib/mockMatchMedia';
+import '@proton/testing/lib/mockTelemetry';
 import '@proton/testing/lib/mockUnleash';
 
 // Silence warnings on expect to throw https://github.com/testing-library/react-testing-library/issues/157
@@ -19,10 +20,6 @@ jest.mock('@proton/shared/lib/helpers/setupCryptoWorker', () => ({
     loadCryptoWorker: jest.fn(),
 }));
 
-jest.mock('@proton/shared/lib/i18n/dateFnLocales', () => ({
-    __esModule: true,
-}));
-
 jest.mock('./src/app/locales.ts', () => ({
     __esModule: true,
     getLocaleMapping: () => 'en',

applications/account/locales/.locale-state.metadata

@@ -1,4 +1,4 @@
 {
   "project": "fe-account",
-  "locale": "4bf2a73d6cbe2f452ce6d19bc4398139b930f14d"
+  "locale": "9d609048f717ed7931454f19fa5e8726063684b5"
 }