Skip to content

Refresh compatible dependencies and reviewed browser sources - #35

Merged
slicedearth merged 1 commit into
mainfrom
maintenance/dependency-refresh-2026-10-10
Oct 10, 2026
Merged

slicedearth merged 1 commit into
mainfrom
maintenance/dependency-refresh-2026-10-10

Conversation

@slicedearth

Copy link
Copy Markdown
Owner

Refresh compatible application and development dependencies, the selected browser-source datasets and the separately locked package-manager runtime. Keep TypeScript 6.0 and Node 24 typings within their reviewed compatibility contracts. Update both security-analysis action pins to 4.38.3.

The source refresh preserves all selected feature records and control mappings, records browser release-status changes, and appends three release-added events. Update the corresponding source notes and browser provenance assertions.

Validation completed on the final staged tree:

  • Complete verification passed: 396 unit tests in 44 files, lint, formatting, types, framework checks, generated sources/schemas, static build, repository/public audits and language audit.
  • All 38 default browser/accessibility tests passed. The optional local workflow run passed 60 checks, 20 each in Chromium, Firefox and WebKit, with no skips or retries.
  • Fresh application and separate toolchain audits reported zero vulnerabilities. Registry signature checks passed for both graphs.
  • The initial browser run found two stale source-version assertions; these were corrected and the focused and complete suites passed afterwards.

The dated review and validation record includes exact versions, licence and install-script review, source semantics, compatibility holds and verification limits.

PR34 remains open for its separate runtime-setup action update. Superseded PRs 12, 13, 16, 20, 22 and 23 were closed after confirming their updates were already on main. No merge or deployment is included.

Update exact application and development package pins plus compatible nested
packages while retaining the supported compiler and runtime-type major lines.
Refresh the separately locked package-manager graph without changing its
original declarations, archive integrity or activation gates.

Advance the paired security-analysis actions to the reviewed patch revision.
Regenerate the bounded browser-source snapshot and append its release metadata
events while preserving previous history, feature mappings and support data.
Update source-version notes and browser provenance assertions consistently.

Record licence, lifecycle-script, runtime and source-semantic review alongside
local validation results, including the corrected stale browser assertions.
Keep the separate runtime-setup update in its existing pull request and retain
all publication, privacy and deployment approval boundaries.
@slicedearth
slicedearth merged commit bbbf53f into main Oct 10, 2026
4 checks passed
@slicedearth
slicedearth deleted the maintenance/dependency-refresh-2026-10-10 branch October 10, 2026 14:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant