Repository navigation
docs: style-guide follow-ups, SDK typecheck fix, and refreshed OG image - #179
Merged
Merged
Conversation
- fix(sdk): ceremonies.test.ts imported types from the nonexistent '../dist/src'; import them from '../src/types' so `npm run typecheck` (and therefore `prepublishOnly`) passes. - site: replace decorative <em>/<b>/<strong>/<i> with classed spans; drop italic heading accents and italic glosses; remove dead CSS. - og-image: plain tagline (no italic accent), drop hardcoded version, regenerate og-image.png from the SVG. - ADR titles: noun phrases within the heading rules (0001, 0004, 0006, 0008, 0010, 0011, 0016, 0018); index updated, file names unchanged. - ADR 0015: correct the deviceId consequence (JwtClaims has no ttl or device field; PkAuthJwtIssuer passes Optional.empty()). - SECURITY.md: supported line is 2.x; 1.x is no longer supported. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Resolves Dependabot alert GHSA-68fv-2mgg-jv7q (high): event-loop denial of service through indexed source-map section offsets in source-map-js >= 1.0.0, < 1.2.2. The package is a transitive dev dependency (via tsup/postcss, jsdom/css-tree, and @vitest/coverage-v8/magicast); lockfile-only change. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Clears the remaining moderate npm audit findings, all transitive dev dependencies of @stryker-mutator/core: - fast-uri 3.1.7 -> 3.1.8 (GHSA-hrr3-gc8f-f4qj, via ajv) - qs 6.15.3 -> 6.16.0 (GHSA-x5fp-wj9c-mxmx, GHSA-4mjr-xmp4-gh2g, via typed-rest-client) Lockfile-only change; npm audit reports 0 vulnerabilities. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
wolpert
enabled auto-merge (rebase)
October 8, 2026 13:50
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
test/ceremonies.test.tsimported four types from../dist/src, which never exists. Vitest erases type imports so tests passed, buttsc --noEmitfailed, which also blockedprepublishOnly. The types now come from../src/typeswith the file's other type imports.<em>,<b>,<strong>, and<i>replaced with classed<span>s. Italich2accents and italic glosses are gone; list labels, step numbers, group-id prefixes, marker diamonds, and the wordmark keep their layout. Dead CSS for removed<strong>uses deleted.v2.1.0), andog-image.pngregenerated from the SVG with headless Chrome.ttlfield onJwtClaimsis corrected.JwtClaimshas no device field, andPkAuthJwtIssuerpassesOptional.empty()fordeviceId.2.xline.1.xis listed as unsupported (upgrade to2.x), following the previous latest-major-only pattern. This is a policy change worth confirming.Test plan
npm run typecheckandnpm test(103 tests) pass inclients/passkeys-browser./gradlew check(JDK 21) passes🤖 Generated with Claude Code