Skip to content

v0.14.3 — installed-package closure + truthfulness fixes

Choose a tag to compare

View all tags
@zk-xyz zk-xyz released this 18 Jul 18:31
v0.14.3
91bdbe2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release-boundary closure: v0.14.2 was tagged before the final CodeQL fix merged, so npm consumers lacked it. This release ships everything to installed packages.

  • Fixed-point SVG comment removal reaches npm — interleaved comment fragments cannot reassemble into a live <!-- after sanitization (closes the last CodeQL alert for consumers, not just the repo)
  • Preflight message matches its verdict — a WARN from unresolved CSS variables no longer claims "All checks pass"; it says what to define before the content can be verified
  • Benchmark validators enforce instructions literally — blog exactly-3-sentences, CTA headline + button + style block (must_match arrays, min_sentences)

With this release: zero open CodeQL alerts, zero Dependabot alerts, zero npm advisories — true for the artifact users install, not merely for main.

Full changelog: https://github.com/Brandcode-Studio/brandsystem-mcp/blob/main/CHANGELOG.md

Assets 2
Loading