Prepare Nightly 1.4.5

[bermanto]

Prepare signed Nightly 1.4.5 from the change merged on main since 1.4.4.

• Set package.json version to 1.4.5. The minimum supported version stays 1.0.0.
• Add the 1.4.5 changelog for Route static file directories through the Worker first #144.

Contents of 1.4.5:

• Route static file directories through the Worker first #144: /assets/*, /fonts/*, /icons/*, and /sounds/* run the Worker first. A missing file
  returns 404 with Cache-Control: no-store, not the app page. Hashed /assets/ files keep the
  one-year immutable cache. New installations and every update add these routes.

The 1.4.4 changelog says that a missing script or style returns 404. That was not true in
production, because Cloudflare served the app page before the Worker. The 1.4.4 section stays as
published in the signed 1.4.4 release, and the 1.4.5 entry states the correction.

No database migration and no database compatibility change. The canonical specification is already
updated (HQBase/hqbase-site#62). #139 is still not included; #137 has no reply.

Effect on the next update: the routes take effect when the 1.4.5 Worker is deployed. A page that
still runs 1.4.4 or earlier then gets 404 for its removed files instead of HTML. A 1.4.4 page
reloads once after that load failure and then gets the current files.

Test plan after publication: update the installed desktop app from 1.4.4 to 1.4.5 with DevTools
open (Console and Network with Preserve log), then open Settings and the message editor. Also
check GET /assets/<missing>.js returns 404.

Risk: low to moderate. Every request to these four directories now goes through the Worker. Staging
E2E for #144 checked both the 404 and the immutable cache of the real entry script on Cloudflare.
Stable stays 1.4.0.

Validation:

• pnpm check: pass. 988 unit tests pass and 2 are skipped. 226 Worker integration tests pass.
  Coverage, architecture, generated API, and production build pass.
• pnpm deploy:dry-run: pass.
• pnpm test:pwa: pass.
• pnpm audit --prod: no known vulnerabilities.
• extractReleaseNotes(CHANGELOG.md, "1.4.5") returns the expected item.
• Staging E2E passed for the Route static file directories through the Worker first #144 commit 32b8484:
  run 38262991505. This PR changes
  only the version and the changelog. The signed release workflow runs its own staging gate on the
  final archive before publication.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Bug Fixes
  • Missing files requested from asset, font, icon, and sound paths now return a 404 instead of the app page.
• Documentation
  • Added a changelog entry documenting the fix and noting that requests to these paths count as Worker requests.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: eff2eac0-cf3d-4198-a08c-2a9a116fc62d

---

📥 Commits

Reviewing files that changed from the base of the PR and between af32069 and 5794137.

---

📒 Files selected for processing (2)

• CHANGELOG.md
• package.json

---

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 0 remain after this review.

---

---

📝 Walkthrough

Walkthrough

The changelog adds a 1.4.5 entry describing how missing files in four asset directories are handled. The package version changes from 1.4.4 to 1.4.5.

Changes

Release Metadata

Layer / File(s)	Summary
Document the 1.4.5 release CHANGELOG.md, package.json	The changelog describes the missing-file response for /assets/, /fonts/, /icons/, and /sounds/. The package version changes to 1.4.5.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other · Severity of issue fixed: Low

Suggested reviewers: awizemann, commandduck

---

Merge Risk: ⚪ Minimal · up to 57941

This update changes release metadata and notes only; no actionable user-facing or operational risk is identified.

Pre-merge checks | 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check		The title clearly identifies the release-preparation change for version 1.4.5 and matches the pull request objectives.
Description check		The description explains the version change, changelog content, scope, risks, compatibility impact, and validation results. It does not use the template headings exactly, but it covers the required Su…
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

---

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}