Version dashboard

CHANGELOG.md

@@ -1,5 +1,26 @@
 # seamless-auth-admin-dashboard
 
+## 0.9.0
+
+### Minor Changes
+
+- 4453037: Surface the auth API's assessment and audit features.
+
+  - A new Coverage page at `/coverage` shows the authentication coverage report (fells-code/seamless-auth-api#178). It covers users holding a phishing-resistant credential overall and by organization, a trend by month or week, the authenticator mix, the sign-in mix, and the login policy the deployment enforces. "Download CSV" saves the API's own CSV for pasting into an assessment.
+  - The Security page gains an Audit Trail panel. "Verify integrity" runs the hash chain check on demand (fells-code/seamless-auth-api#174) and shows the chain head to record elsewhere, or where the trail breaks. "Export events" downloads a period as NDJSON after a fresh step-up (fells-code/seamless-auth-api#173).
+  - The System page gains a "Phishing-resistant only" setting (fells-code/seamless-auth-api#177). Turning it on asks for confirmation, because users without a passkey can no longer sign in. While it is on, the login method list and passkey fallback are shown as overridden. The save confirmation is now titled "Confirm sign-in changes".
+
+  Requires `@seamless-auth/types` 0.27.0, an auth API that serves these routes, and a `@seamless-auth/server` adapter that passes them through, including its raw mode for the downloads (fells-code/seamless-auth-server#191).
+
+- 2804f10: - Overview's headline tiles and Security's suspicious-activity feed now follow the range selector, which finishes #148 (fells-code/seamless-auth-api#132). Each tile names the window it shows. Against an API that predates ranges, the tiles keep their fixed 24-hour figures and their "fixed window" labels, so a tile never claims to follow the selector while showing something else. The Sessions tile's hint now says "Currently active sessions", which is what it always counted.
+  - Overview shows a warning while store review accounts are enabled. It lists the addresses, how often the fixed code was used to sign in in the last 30 days, and any wrong codes entered, and says to clear `REVIEW_ACCOUNT_EMAILS` once review is over (fells-code/seamless-auth-api#331). It shows nothing against an API or adapter without the route.
+
+  Requires `@seamless-auth/types` 0.28.0, an auth API with both changes, and a `@seamless-auth/server` that forwards the range and passes the review accounts route through (fells-code/seamless-auth-server#194).
+
+### Patch Changes
+
+- ba8bc94: Support Node 22 and newer. The `engines` field now requires `>=22` instead of `>=24 <25`, and CI runs the unit test job on Node 22, 24, and the latest release (fells-code/seamless-auth-api#339).
+
 ## 0.8.0
 
 ### Minor Changes

package.json

@@ -1,7 +1,7 @@
 {
   "name": "seamless-auth-admin-dashboard",
   "private": true,
-  "version": "0.8.0",
+  "version": "0.9.0",
   "type": "module",
   "engines": {
     "node": ">=22"