From 7d61dc121424eaf327aa3ca4e9cb3df30e03ebc6 Mon Sep 17 00:00:00 2001 From: Bhoomi Pipalia Date: Thu, 23 Jul 2026 12:38:30 -0400 Subject: [PATCH 1/3] fix: delpoy file with secrets for the google api key --- .github/workflows/deploy.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 398c2bfcd..769418a46 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -31,7 +31,7 @@ jobs: run: npm run build:storybook env: NODE_OPTIONS: --max_old_space_size=4096 - VITE_APP_GOOGLE_MAPS_API_KEY: ${{ vars.GOOGLE_MAPS_API_KEY }} + VITE_APP_GOOGLE_MAPS_API_KEY: ${{ secrets.GOOGLE_MAPS_API_KEY }} - name: Deploy to GitHub Pages uses: JamesIves/github-pages-deploy-action@v4 From ca1e6f74bf68f5ec4d1c3867c247cb502dc8ae70 Mon Sep 17 00:00:00 2001 From: Bhoomi Pipalia Date: Thu, 23 Jul 2026 12:49:53 -0400 Subject: [PATCH 2/3] fix: google map key in location picket --- lib/components/LocationPicker/LocationPicker.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/components/LocationPicker/LocationPicker.tsx b/lib/components/LocationPicker/LocationPicker.tsx index 63e934847..de71f3dff 100644 --- a/lib/components/LocationPicker/LocationPicker.tsx +++ b/lib/components/LocationPicker/LocationPicker.tsx @@ -20,7 +20,7 @@ export function LocationPicker({ address, markerCallback }: ILocationPickerProps const inputRef = useRef(null) const { isLoaded } = useJsApiLoader({ - googleMapsApiKey: import.meta.env.VITE_GOOGLE_MAPS_API_KEY, + googleMapsApiKey: import.meta.env.VITE_APP_GOOGLE_MAPS_API_KEY, libraries, }) From 2912deae49feb327855a8dc1a087be9e49991fb9 Mon Sep 17 00:00:00 2001 From: Bhoomi Pipalia Date: Thu, 23 Jul 2026 12:55:41 -0400 Subject: [PATCH 3/3] add: changelog --- CHANGELOG.mdx | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/CHANGELOG.mdx b/CHANGELOG.mdx index e1785c412..2616986fa 100644 --- a/CHANGELOG.mdx +++ b/CHANGELOG.mdx @@ -17,6 +17,11 @@ Prefix the change with one of these keywords: ## [Unreleased] +### Security + +- Rotated leaked Google Maps API key and moved to GitHub Secrets +- Fixed incorrect env var name `VITE_GOOGLE_MAPS_API_KEY` → `VITE_APP_GOOGLE_MAPS_API_KEY` in `LocationPicker` component + ## [0.27.4] ### Added