Skip to content

fix: harden sanitizer, CI, docs cleanup#79

Merged
4 commits merged intomainfrom
push/pending-fixes
Apr 15, 2026
Merged

fix: harden sanitizer, CI, docs cleanup#79
4 commits merged intomainfrom
push/pending-fixes

Conversation

@heznpc
Copy link
Copy Markdown
Owner

@heznpc heznpc commented Apr 12, 2026

Summary

  • Harden sanitizer, tighten exam patterns, repair check-bg-sync regex
  • Add Dependabot, unify Node 22, wire missing checks into CI
  • Sync privacy policy, dictionary versions, i18n README markers
  • Drop translated READMEs, delegate i18n to landing page

Test plan

  • CI status checks pass
  • Sanitizer edge cases verified

🤖 Generated with Claude Code

heznpc added 4 commits April 11, 2026 21:52
- gemini-block.js: parse <a href> with new URL against document.baseURI and
  only admit http/https or pure fragment anchors; the old raw-string guard
  could let exotic schemes slip through.
- constants.js: EXAM_URL_PATTERNS now require a /, ?, #, or end-of-string
  after the keyword so benign paths like /quiz-answers-blog no longer flip
  the extension into exam mode (the previous \b boundary matched on -).
- check-bg-sync.js: accept both const and let declarations, and read
  _BG_YT_CLIENT_VERSION_DEFAULT (the value renamed by #78) so the shared-
  constants guard actually runs again instead of silently failing.
- ci.yml: run scripts/check-bg-sync.js and scripts/check-dicts.js on every
  push so the regression guards are not limited to the weekly maintenance
  cron anymore.
- cd.yml / cd-firefox.yml: add concurrency groups (cws-deploy, amo-deploy)
  to stop back-to-back pushes from racing the "version already exists"
  failure, and cap artifact retention at 14 days.
- maintenance.yml: bump all three jobs to Node 22 to match ci.yml and cd.yml.
- dependabot.yml: weekly npm + github-actions updates, grouping dev
  dependencies into a single PR to cut review noise.
- generate-docs.js: also rewrite src/data/*.json _meta.version (lastUpdated
  left alone so check-dicts still reflects reality) and push the VERSION
  marker into docs/i18n/README_*.md when present, so manifest bumps flow
  through to every versioned surface in one command.
- PRIVACY_POLICY.md: drop activeTab (removed in #68), list alarms with its
  actual purpose (24h cache cleanup + 7d update check), and bump the
  "Last updated" date to reflect this edit.
- docs/i18n/README_*.md: add the VERSION_START/END marker to all six
  translated READMEs so generate-docs.js can keep them in sync with
  manifest.json from now on.
- src/data/*.json: bump _meta.version from the 3.3.0 residual to the
  current 3.5.4 across all ten premium dictionaries (lastUpdated stays
  2026-04-02 because the curated contents were not edited).
The GitHub Pages landing page at heznpc.github.io/skillBridge already
handles multilingual discovery; maintaining six parallel README_*.md files
just meant prose and feature lists drifted out of sync whenever the English
README changed. README.md's header still points at the landing page, so
non-English readers are not stranded.

Also revert the VERSION marker hook I added to generate-docs.js in the
previous commit — it has nothing left to scan.
@heznpc heznpc closed this pull request by merging all changes into main in d72c46a Apr 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant