Merge branch 'develop' into feature/improve-led-managers

Resolve merge conflicts keeping MonoLedDriver/RgbLedDriver renames while
adopting develop's improvements: atomic state flags, cooperative task
shutdown, SimpleMutex wrappers, EStopState::ActiveClearing, IP event
handler, CSR_PATTERN macro, and thread-safe gateway connection management.

Fix MonoLedDriver LEDC speed mode to be chip-agnostic (SOC_LEDC_SUPPORT_HS_MODE),
add missing ledc_update_duty call, and correct FnProxy usage (no address-of on
variable template).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hhvrc

.changeset/mighty-pets-report.md

@@ -0,0 +1,5 @@
+---
+'frontend': patch
+---
+
+Improve authtoken handling in 401 responses

.changeset/precious-eagle-cactus-fruit.md

@@ -0,0 +1,5 @@
+---
+'firmware': patch
+---
+
+fix: Serial now uses CRLF rather than just LF for better compatibility

.clang-format

@@ -67,7 +67,7 @@ AlignTrailingComments:
   Kind: Always
   OverEmptyLines: 1
 AllowAllArgumentsOnNextLine: true
-AllowAllParametersOfDeclarationOnNextLine: false
+AllowAllParametersOfDeclarationOnNextLine: true
 AllowShortBlocksOnASingleLine: Always
 AllowShortCaseLabelsOnASingleLine: false
 AllowShortEnumsOnASingleLine: false
@@ -87,7 +87,7 @@ BraceWrapping:
   AfterClass: false
   AfterControlStatement: MultiLine
   AfterEnum: false
-  AfterFunction: false
+  AfterFunction: true
   AfterNamespace: false
   AfterStruct: false
   AfterUnion: false
@@ -100,7 +100,7 @@ BraceWrapping:
   SplitEmptyFunction: true
   SplitEmptyRecord: true
   SplitEmptyNamespace: true
-BreakAfterAttributes: Never
+BreakAfterAttributes: Leave
 BreakBeforeBinaryOperators: All
 BreakBeforeConceptDeclarations: Allowed
 BreakBeforeInlineASMColon: Always
@@ -125,12 +125,9 @@ IndentWrappedFunctionNames: true
 InsertNewlineAtEOF: true
 InsertTrailingCommas: Wrapped
 IntegerLiteralSeparator:
-  Binary: 4
-  BinaryMinDigits: 9
-  Decimal: 3
-  DecimalMinDigits: 5
-  Hex: 2
-  HexMinDigits: 9
+  Binary: 0
+  Decimal: 0
+  Hex: 0
 KeepEmptyLinesAtEOF: false
 KeepEmptyLinesAtTheStartOfBlocks: false
 LambdaBodyIndentation: OuterScope

.clang-tidy

@@ -0,0 +1,4 @@
+---
+Checks: '*, -bugprone-easily-swappable-parameters, -modernize-use-trailing-return-type'
+
+ExcludePaths: '.pio/build/|include/serialization/_fbs/'

.claude/hooks/clang-format.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+FILE_PATH=$(jq -r '.tool_input.file_path // empty')
+
+if [[ "$FILE_PATH" =~ \.(cpp|c|h|hpp|cc|cxx)$ ]] && [[ "$FILE_PATH" != */_fbs/* ]]; then
+  npx clang-format -i "$FILE_PATH"
+fi
+
+exit 0

.claude/settings.json

@@ -0,0 +1,15 @@
+{
+  "hooks": {
+    "PostToolUse": [
+      {
+        "matcher": "Edit|Write",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/clang-format.sh"
+          }
+        ]
+      }
+    ]
+  }
+}

.github/actions/build-firmware/action.yml

@@ -21,6 +21,7 @@ runs:
     - uses: actions/cache@v4
       with:
         path: |
+          .pio/libdeps
           ~/.platformio/platforms
           ~/.platformio/packages
           ~/.platformio/.cache

.github/actions/build-frontend/action.yml

@@ -1,9 +1,6 @@
 name: build-frontend
 description: Builds the frontend and uploads it as an artifact
 inputs:
-  node-version:
-    description: 'NodeJS runtime version to use'
-    required: true
   skip-checkout:
     description: 'If true, skips checkout'
     default: false
@@ -18,21 +15,43 @@ runs:
           frontend
         path: ${{ github.repository }}
 
+    - uses: pnpm/action-setup@v4
+      name: Install pnpm
+      with:
+        package_json_file: ./frontend/package.json
+        run_install: false
+
     - uses: actions/setup-node@v4
       with:
-        node-version: ${{ inputs.node-version }}
-        cache: 'npm'
-        cache-dependency-path: ./frontend/package-lock.json
+        node-version-file: ./frontend/package.json
+        cache: 'pnpm'
+        cache-dependency-path: ./frontend/pnpm-lock.yaml
 
     - name: Install dependencies
       working-directory: ./frontend
       shell: bash
-      run: npm ci
+      run: pnpm install --frozen-lockfile --strict-peer-dependencies
+
+    - name: Check
+      working-directory: ./frontend
+      shell: bash
+      run: pnpm run check
+
+    # FIXME: Playwirght is not working: Error: browserType.launch: Executable doesn't exist at /home/runner/.cache/ms-playwright/chromium_headless_shell-1161/chrome-linux/headless_shell
+    #    - name: Install playwright
+    #      working-directory: ./frontend
+    #      shell: bash
+    #      run: pnpx playwright install --with-deps
+
+    - name: Test
+      working-directory: ./frontend
+      shell: bash
+      run: pnpm test:unit # TODO: Change back to pnpm test when playwright is working
 
     - name: Build
       working-directory: ./frontend
       shell: bash
-      run: npm run build
+      run: pnpm run build
 
     - name: Upload artifacts
       uses: actions/upload-artifact@v4

.github/actions/cdn-bump-version/action.yml

@@ -1,8 +1,20 @@
 name: cdn-bump-version
 description: Uploads version file to CDN
 inputs:
-  cf-bucket:
-    description: Name of the S3 bucket
+  bunny-stor-hostname:
+    description: Bunny SFTP Hostname
+    required: true
+  bunny-stor-username:
+    description: Bunny SFTP Username
+    required: true
+  bunny-stor-password:
+    description: Bunny SFTP Password
+    required: true
+  bunny-api-key:
+    description: Bunny API key
+    required: true
+  bunny-cdn-url:
+    description: Bunny pull zone base url e.g. https://firmware.openshock.org (no trailing slash)
     required: true
   version:
     description: 'Version of the release'
@@ -14,9 +26,26 @@ inputs:
 runs:
   using: composite
   steps:
-    - name: Upload version file
+    - name: Prepare Upload Folder
       shell: bash
       run: |
         mkdir -p upload
         echo "${{ inputs.version }}" >> upload/version-${{ inputs.release-channel }}.txt
-        rclone copy upload cdn:${{ inputs.cf-bucket }}/
+
+    - name: Upload version file
+      uses: milanmk/actions-file-deployer@master
+      with:
+        remote-protocol: "sftp"
+        remote-host: "${{ inputs.bunny-stor-hostname }}"
+        remote-user: "${{ inputs.bunny-stor-username }}"
+        remote-password: "${{ inputs.bunny-stor-password }}"
+        remote-path: "/"
+        local-path: "upload"
+        sync: "full"
+
+    - name: Purge CDN cache
+      shell: bash
+      run: |
+        curl -X POST "https://api.bunny.net/purge?url=${{ inputs.bunny-cdn-url }}/version-${{ inputs.release-channel }}.txt" \
+          -H "Content-Type: application/json" \
+          -H "AccessKey: ${{ inputs.bunny-api-key }}"

.github/actions/cdn-prepare/action.yml

@@ -1,33 +1,20 @@
 name: cdn-prepare
-description: Prepares the CDN for firmware uploads
+description: Bunny sshpass and knowhosts setup
 inputs:
-  cf-account-id:
-    description: Cloudflare Account ID
-    required: true
-  cf-access-key-id:
-    description: Cloudflare Access Key ID
-    required: true
-  cf-secret-access-key:
-    description: Cloudflare Secret Access Key
+  bunny-ssh-knownhosts:
+    description: Bunny SFTP Hostname
     required: true
 
 runs:
   using: composite
   steps:
-    - name: Install rclone
+    - name: Install sshpass
       shell: bash
-      run: sudo apt-get install -y rclone
+      run: sudo apt-get install -y sshpass
 
-    - name: Configure rclone
+    - name: Configure known hosts
       shell: bash
       run: |
-        mkdir -p ~/.config/rclone/
-        conf=~/.config/rclone/rclone.conf
-        echo "[cdn]" >> $conf
-        echo "type = s3" >> $conf
-        echo "provider = Cloudflare" >> $conf
-        echo "access_key_id = ${{ inputs.cf-access-key-id }}" >> $conf
-        echo "secret_access_key = ${{ inputs.cf-secret-access-key }}" >> $conf
-        echo "endpoint = https://${{ inputs.cf-account-id }}.r2.cloudflarestorage.com" >> $conf
-        echo "acl = public-read" >> $conf
+        mkdir -p ~/.ssh
+        echo "${{ inputs.bunny-ssh-knownhosts }}" >> ~/.ssh/known_hosts