Skip to content

Knot Core 2.13.8

Choose a tag to compare

View all tags
@seb972 seb972 released this 26 May 06:19
· 28 commits to main since this release
v2.13.8
725ea40
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Knot Core 2.13.8 — Marketplace UX refoundation v2 + WCAG fixes

GPL-3.0 Dolibarr workflow module — public mirror of the private development repo.

Downloads

  • Signed ZIP (recommended): knot.tools/downloads/knot-core/latest — SHA256 7b6c7329a3b09f313ebcec33769d72507220fe1887eefff86327fda8e19f0290, Ed25519 signature kid rel-2026-04.
  • GitHub Release asset: knot-2.13.8.zip attached below (same bytes, same SHA256).
  • Verification: see releases.json for the signature payload + docs/RELEASE.md for the verification procedure.

Highlights

  • Marketplace v2 shell with spotlight, curated rows, faceted search, product detail layouts (Pro Pack, Migration, templates), 25+ block types renderable from editorial JSON, lazy mount + prefetch.
  • EditorialMerger + EditorialValidator strict allowlist for v2 schema, i18n parity across the six locales.
  • WCAG 2.2 AA contrast fixes for tier badges: new --knot-color-{info,success,warning}-strong tokens + dynamic tier→tone mapping on SignalBadge. See docs/design-system.md.
  • API additions: marketplace stats + tracking, CatalogCache mtime busting, sidebar badge surface.
  • Frontend: composables for filters / route / prefetch / lazy mount, vue-i18n CSP-safe compiler.

Security

  • CodeQL high-severity alert fixed: VideoBlock.vue URL hostname check switched from includes() to strict allow-list to block attacker-controlled hostnames.

Quality

  • PHPUnit: 1231 tests / 4307 assertions
  • Vitest: 243 tests / 59 files
  • Golden introspection (Dolibarr 21.0.4): 1403 assertions
  • PHPStan level 6: 0 errors / PHPCS PSR-12: 0 errors
  • Coverage: Engine 93.44 %, Cron 97.59 %, Updates 86.62 %

See CHANGELOG.md for the full list.

Assets 3
Loading