Skip to content

fix: 2027.0.1, security updates, appearance setting, store checklist and docs - #98

Merged
ajithakdev merged 5 commits into
mainfrom
fix/audit-2027.0.1
Oct 26, 2026
Merged

ajithakdev merged 5 commits into
mainfrom
fix/audit-2027.0.1

Conversation

@ajithakdev

Copy link
Copy Markdown
Owner

Dependency updates from npm audit fix (all within semver ranges) before the 2027.0.0 store uploads, plus a store checklist.

  • Extension bundle: DOMPurify 3.3.3 to 3.4.17 and fflate 0.8.2 to 0.8.3 (both pulled in by jsPDF for the PDF export). Opera rejects third-party libraries with known vulnerabilities.
  • Self-host server: body-parser 2.4.0, plus path-to-regexp, proxy-addr and qs.
  • docs/STORE-CHECKLIST.md: per-store checklist built from the AMO, Edge, Opera and Chrome policies, with a reproducible-build check for Mozilla's source review and reviewer notes to paste.
  • Version 2027.0.1 with its CHANGELOG section; private-window history gap filed as Results from private windows are saved to history #97.

@ajithakdev

Copy link
Copy Markdown
Owner Author

Pre-merge checklist

Addressed

Tested

  • npm test: 106 tests pass
  • npm run lint: 0 errors, 6 warnings
  • npm run build and npm run package: 2027.0.1 chromium, firefox and source zips
  • web-ext lint on the Firefox zip: 0 errors, 18 expected warnings
  • Rebuild from the source zip gives an identical Firefox zip
  • Manual run in Firefox (owner testing now)

CI and release

  • check passes
  • Tag v2027.0.1 on the squash commit and create the GitHub release with the zips

Docs

  • CHANGELOG [2027.0.1] - 2026-10-27

After merge

  1. Tag, GitHub release, wrangler deploy (server dependencies only; the worker is unchanged, so this is optional)
  2. Site redeploy so /app/ carries the 2027.0.1 build
  3. Store uploads of 2027.0.1 using docs/STORE-CHECKLIST.md

@ajithakdev

Copy link
Copy Markdown
Owner Author

Pre-merge checklist (update)

Addressed

  • Appearance setting (Match system, Light, Dark) in src/lib/theme.ts, wired into the popup, side panel and settings; the side panel redraws its chart on a change

Tested

  • npm test: 110 tests pass (4 new in theme.test.ts)
  • Headless Chromium on the site's /app/ demo, system dark and light, at 1280 and 390 px: the forced theme applies, card positions identical before and after picking, no page errors
  • CI check passes
  • Owner run of meterx-2027.0.1-firefox.zip in Firefox

@ajithakdev ajithakdev changed the title fix: 2027.0.1, dependency security updates and store checklist fix: 2027.0.1, security updates, appearance setting, store checklist and docs Oct 26, 2026
@ajithakdev

Copy link
Copy Markdown
Owner Author

Pre-merge checklist (docs update)

Addressed

  • README follows the repo docs template: install, features, privacy and data, how it works, FAQ, contributing, credits, license (101 lines)
  • CONTRIBUTING rewritten (Firefox loading, commands, pull request rules); SECURITY.md added; private vulnerability reporting turned on
  • YAML issue forms for bugs and features, config.yml pointing questions to Discussions
  • US spelling and sentence-case headings across the docs; troubleshooting rows in RESOURCES-AND-GUIDE

Tested

  • npm run check:docs: 19 checks pass (sections, links and anchors, spelling, headings, manifest description length), now part of npm test
  • npm test: 110 tests pass; npm run lint: 0 errors
  • Community profile: 100%
  • CI check passes

@ajithakdev
ajithakdev merged commit dfcc821 into main Oct 26, 2026
1 check passed
@ajithakdev
ajithakdev deleted the fix/audit-2027.0.1 branch October 26, 2026 19:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant