E02.M1 - Continuously improve security

New issue

Open

No due date

•Last updated Nov 26, 2025

This is an ongoing milestone to continuously improve security of the Firefly solution and related procedures.

93% complete

[Task]: Add ability for forced/required in-app updates for security reasons
iotaledger/firefly#6215 · opened on Mar 20, 2023 · E02.M1 - Continuously improve security
[Task]: Add "phone home" message for Sentry reporting
iotaledger/firefly#6281 · opened on Mar 27, 2023 · E02.M1 - Continuously improve security
[Task]: Upgrade NodeJS LTS from v18 to v20
iotaledger/firefly#7653 · opened on Oct 24, 2023 · E02.M1 - Continuously improve security
[Task]: Improve NFT media download
iotaledger/firefly#8276 · opened on Mar 27, 2024 · E02.M1 - Continuously improve security
[Task]: cache NFTs assets by their URLs hashes and not NFT ids
iotaledger/firefly#7388 · opened on Sep 1, 2023 · E02.M1 - Continuously improve security
[Task]: Improve pin storage
iotaledger/firefly#8286 · opened on Mar 28, 2024 · E02.M1 - Continuously improve security
1
chore(deps-dev): bump webpack-cli from 5.1.4 to 6.0.1 in /packages/desktop
Unread
#8724 opened Jun 2, 2025 · Updated Nov 3, 2025
chore(deps-dev): bump electron-builder from 24.13.3 to 26.0.12 in /packages/desktop
Unread
#8728 opened Jun 2, 2025 · Updated Nov 3, 2025
chore(deps-dev): bump tslib from 2.6.0 to 2.8.1
Unread
#8730 opened Jun 2, 2025 · Updated Nov 3, 2025
chore(deps): bump svelte-i18n from 3.7.0 to 4.0.1 in /packages/shared
Unread
#8734 opened Jun 2, 2025 · Updated Nov 3, 2025
chore(deps): bump big.js from 6.2.2 to 7.0.1 in /packages/shared
Unread
#8735 opened Jun 2, 2025 · Updated Nov 3, 2025
chore(deps-dev): bump svelte-preprocess from 5.1.4 to 6.0.3 in /packages/shared
Unread
#8736 opened Jun 2, 2025 · Updated Nov 3, 2025
chore(deps): bump svelte-markdown from 0.2.3 to 0.4.1 in /packages/shared
Unread
#8738 opened Jun 2, 2025 · Updated Nov 3, 2025
chore(deps-dev): bump webpack-dev-server from 5.0.4 to 5.2.1
Unread
#8742 opened Jun 4, 2025 · Updated Nov 3, 2025
chore(deps-dev): bump webpack-dev-server from 5.0.4 to 5.2.2
Unread
#8745 opened Jun 9, 2025 · Updated Nov 3, 2025
chore(deps): bump brace-expansion from 1.1.11 to 1.1.12
Unread
#8748 opened Jun 11, 2025 · Updated Nov 3, 2025
chore(deps): bump form-data from 4.0.0 to 4.0.4
Unread
#8772 opened Jul 21, 2025 · Updated Nov 3, 2025
chore(deps-dev): bump copy-webpack-plugin from 12.0.2 to 13.0.1 in /packages/desktop
Unread
#8799 opened Aug 25, 2025 · Updated Nov 3, 2025
chore(deps-dev): bump @swc/core from 1.4.17 to 1.13.5
Unread
#8800 opened Aug 25, 2025 · Updated Nov 3, 2025
chore(deps-dev): bump electron from 27.0.2 to 35.7.5
Unread
#8808 opened Sep 4, 2025 · Updated Nov 3, 2025
chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.61.0 to 5.62.0
Unread
#8820 opened Sep 22, 2025 · Updated Nov 3, 2025
chore(deps): bump tar-fs from 2.1.1 to 2.1.4
Unread
#8821 opened Sep 24, 2025 · Updated Nov 3, 2025
chore(deps): bump @sentry/electron from 4.24.0 to 7.2.0 in /packages/desktop
Unread
#8835 opened Oct 20, 2025 · Updated Nov 24, 2025
chore(deps): bump svelte from 3.59.2 to 5.42.2 in /packages/shared
Unread
#8837 opened Oct 27, 2025 · Updated Oct 27, 2025
chore(deps-dev): bump @sentry/webpack-plugin from 2.23.1 to 4.5.0 in /packages/desktop
Unread
#8838 opened Oct 27, 2025 · Updated Oct 27, 2025

Navigation Menu

E02.M1 - Continuously improve security

[Task]: Add ability for forced/required in-app updates for security reasons

[Task]: Add "phone home" message for Sentry reporting

[Task]: Upgrade NodeJS LTS from `v18` to `v20`

[Task]: Improve NFT media download

[Task]: cache NFTs assets by their URLs hashes and not NFT ids

[Task]: Improve pin storage

chore(deps-dev): bump webpack-cli from 5.1.4 to 6.0.1 in /packages/desktop

chore(deps-dev): bump electron-builder from 24.13.3 to 26.0.12 in /packages/desktop

chore(deps-dev): bump tslib from 2.6.0 to 2.8.1

chore(deps): bump svelte-i18n from 3.7.0 to 4.0.1 in /packages/shared

chore(deps): bump big.js from 6.2.2 to 7.0.1 in /packages/shared

chore(deps-dev): bump svelte-preprocess from 5.1.4 to 6.0.3 in /packages/shared

chore(deps): bump svelte-markdown from 0.2.3 to 0.4.1 in /packages/shared

chore(deps-dev): bump webpack-dev-server from 5.0.4 to 5.2.1

chore(deps-dev): bump webpack-dev-server from 5.0.4 to 5.2.2

chore(deps): bump brace-expansion from 1.1.11 to 1.1.12

chore(deps): bump form-data from 4.0.0 to 4.0.4

chore(deps-dev): bump copy-webpack-plugin from 12.0.2 to 13.0.1 in /packages/desktop

chore(deps-dev): bump @swc/core from 1.4.17 to 1.13.5

chore(deps-dev): bump electron from 27.0.2 to 35.7.5

chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.61.0 to 5.62.0

chore(deps): bump tar-fs from 2.1.1 to 2.1.4

chore(deps): bump @sentry/electron from 4.24.0 to 7.2.0 in /packages/desktop

chore(deps): bump svelte from 3.59.2 to 5.42.2 in /packages/shared

chore(deps-dev): bump @sentry/webpack-plugin from 2.23.1 to 4.5.0 in /packages/desktop

Issues