Release v0.5.7

.github/workflows/security.yml

@@ -0,0 +1,57 @@
+name: Security Check
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+  push:
+    branches: [main, develop]
+
+jobs:
+  safe-chain:
+    runs-on: ubuntu-latest
+
+    defaults:
+      run:
+        working-directory: frontend
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install Safe-chain
+        run: npm install -g @aikidosec/safe-chain@1.4.2
+
+      - name: Setup Safe-chain for CI
+        run: safe-chain setup-ci
+
+      - name: Add Safe-chain to PATH
+        run: |
+          echo "$HOME/.safe-chain/bin" >> "$GITHUB_PATH"
+          echo "$HOME/.safe-chain/shims" >> "$GITHUB_PATH"
+
+      - name: Verify Safe-chain is active
+        run: |
+          set -euo pipefail
+          command -v safe-chain
+          safe-chain --version
+          NPM_BIN="$(command -v npm)"
+          echo "npm path: ${NPM_BIN}"
+          case "${NPM_BIN}" in
+            *".safe-chain/shims/"*) ;;
+            *)
+              echo "Safe-chain npm shim is not active"
+              exit 1
+              ;;
+          esac
+
+      - name: Install dependencies
+        run: npm ci --include=dev

CHANGELOG.md

@@ -457,3 +457,56 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 - Fixed inconsistent scroll behavior when navigating Q&A pages
 - Improved UX predictability across desktop and mobile devices
+
+## [0.5.7] - 2026-02-12
+
+### Added
+
+- Monitoring & observability:
+  - Production error and performance monitoring via Sentry
+  - Global error boundary and release tracking
+- Security & CI:
+  - Safe-chain dependency malware protection in GitHub Actions
+  - Automated dependency validation on push and pull requests
+- SEO & social metadata:
+  - Full Open Graph and Twitter Card support
+  - Localized OG metadata and alt text
+  - Canonical URL handling via metadataBase
+- Quiz platform improvements:
+  - Redis caching for quiz questions to reduce database load
+  - Guest warning with Login / Sign up / Continue as guest options
+  - Bot protection: single verification per question attempt
+- Shop enhancements:
+  - Monobank payment integration (UAH-only, feature-gated)
+  - Secure webhook processing with signature validation and idempotency
+  - Admin refund and cancel endpoints
+- Platform transparency:
+  - Added `/public/humans.txt` with team, mission, and technology stack
+
+### Changed
+
+- Navigation & UX:
+  - Added global page transition loading indicators
+  - Context-aware header behavior for Blog and Shop
+  - Improved mobile menu interactions and auto-close behavior
+- Leaderboard:
+  - User avatars with DiceBear fallback for missing images
+- Home & SEO:
+  - Home title standardized to "DevLovers"
+  - Subtitle used for OG/Twitter previews
+- Authentication & routing:
+  - Improved locale detection and dashboard redirect handling
+  - OAuth and database configuration stability improvements
+
+### Fixed
+
+- Fixed missing locale handling for `/dashboard` redirects
+- Restored authentication flow after environment configuration issues
+- Improved handling of missing or invalid avatar data
+- Fixed OG preview URL resolution issues
+- Improved reliability of environment configuration and credentials
+
+### Performance
+
+- Reduced database load for quiz pages via Redis caching
+- Improved frontend loading experience during navigation

frontend/.env.example

@@ -102,4 +102,4 @@ TRUST_FORWARDED_HEADERS=0
 # emergency switch
 RATE_LIMIT_DISABLED=0
 
-GROQ_API_KEY=
+GROQ_API_KEY=

frontend/.gitignore

@@ -48,3 +48,6 @@ next-env.d.ts
 CLAUDE.md
 _dev-notes/
 .claude
+
+# Sentry Config File
+.env.sentry-build-plugin

frontend/app/[locale]/dashboard/page.tsx

@@ -1,7 +1,6 @@
 import { getTranslations } from 'next-intl/server';
 
 import { PostAuthQuizSync } from '@/components/auth/PostAuthQuizSync';
-import { QuizResultsSection } from '@/components/dashboard/QuizResultsSection';
 import { ExplainedTermsCard } from '@/components/dashboard/ExplainedTermsCard';
 import { ProfileCard } from '@/components/dashboard/ProfileCard';
 import { QuizSavedBanner } from '@/components/dashboard/QuizSavedBanner';
@@ -111,12 +110,9 @@ export default async function DashboardPage({
           <div className="grid gap-8 md:grid-cols-2">
             <ProfileCard user={userForDisplay} locale={locale} />
             <StatsCard stats={stats} />
-          </div>
-                    <div className="mt-8">
-            <ExplainedTermsCard />
           </div>
           <div className="mt-8">
-            <QuizResultsSection attempts={lastAttempts} locale={locale} />
+            <ExplainedTermsCard />
           </div>
         </main>
       </DynamicGridBackground>

frontend/app/[locale]/page.tsx

@@ -19,6 +19,8 @@ export async function generateMetadata({
   };
   const ogLocale = localeMap[locale] ?? 'en_US';
 
+  const ogTitle = t('subtitle');
+
   return {
     title: t('title'),
     description: t('description'),
@@ -31,7 +33,7 @@ export async function generateMetadata({
       },
     },
     openGraph: {
-      title: t('title'),
+      title: ogTitle,
       description: t('description'),
       url: canonicalUrl,
       siteName: 'DevLovers',
@@ -48,7 +50,7 @@ export async function generateMetadata({
     },
     twitter: {
       card: 'summary_large_image',
-      title: t('title'),
+      title: ogTitle,
       description: t('description'),
       images: ['/og.png'],
     },

frontend/app/[locale]/quiz/[slug]/page.tsx

@@ -1,12 +1,11 @@
 import type { Metadata } from 'next';
+import Image from 'next/image';
 import { notFound } from 'next/navigation';
 import { getTranslations } from 'next-intl/server';
-import Image from 'next/image';
 
+import { QuizContainer } from '@/components/quiz/QuizContainer';
 import { categoryTabStyles } from '@/data/categoryStyles';
 import { cn } from '@/lib/utils';
-
-import { QuizContainer } from '@/components/quiz/QuizContainer';
 import { stripCorrectAnswers } from '@/db/queries/quiz';
 import { getQuizBySlug, getQuizQuestionsRandomized } from '@/db/queries/quiz';
 import { getCurrentUser } from '@/lib/auth';
@@ -53,10 +52,9 @@ export default async function QuizPage({
     notFound();
   }
 
-  const categoryStyle =
-    quiz.categorySlug && quiz.categorySlug in categoryTabStyles
-      ? categoryTabStyles[quiz.categorySlug as keyof typeof categoryTabStyles]
-      : null;
+  const categoryStyle = quiz.categorySlug
+    ? categoryTabStyles[quiz.categorySlug as keyof typeof categoryTabStyles]
+    : null;
 
   const parsedSeed = seedParam ? Number.parseInt(seedParam, 10) : Number.NaN;
   const seed = Number.isFinite(parsedSeed)
@@ -84,9 +82,15 @@ export default async function QuizPage({
               <span className="relative h-8 w-8 shrink-0 sm:h-10 sm:w-10">
                 <Image
                   src={categoryStyle.icon}
-                  alt=""
+                  alt={quiz.categoryName ?? quiz.categorySlug ?? 'Category'}
                   fill
-                  className={cn('object-contain', 'iconClassName' in categoryStyle && categoryStyle.iconClassName)}
+                  sizes="(min-width: 640px) 40px, 32px"
+                  className={cn(
+                    'object-contain',
+                    'iconClassName' in categoryStyle
+                      ? categoryStyle.iconClassName
+                      : undefined
+                  )}
                 />
               </span>
             )}

frontend/app/[locale]/shop/orders/[id]/page.tsx

@@ -29,19 +29,16 @@ export const metadata: Metadata = {
 export const dynamic = 'force-dynamic';
 
 type OrderCurrency = (typeof orders.$inferSelect)['currency'];
+type OrderPaymentStatus = (typeof orders.$inferSelect)['paymentStatus'];
+type OrderPaymentProvider = (typeof orders.$inferSelect)['paymentProvider'];
 
 type OrderDetail = {
   id: string;
   userId: string | null;
   totalAmount: string;
   currency: OrderCurrency;
-  paymentStatus:
-    | 'pending'
-    | 'requires_payment'
-    | 'paid'
-    | 'failed'
-    | 'refunded';
-  paymentProvider: string;
+  paymentStatus: OrderPaymentStatus;
+  paymentProvider: OrderPaymentProvider;
   paymentIntentId: string | null;
   stockRestored: boolean;
   restockedAt: string | null;