You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Publish the original PeckShield audit PDF with English, Japanese, and Korean contract/security pages, localized resources and disclaimers, and synchronized changelogs. Upgrade stable compatible dependencies and fix locale validation, missing-file errors, search indexing, and update timestamps.
Why
The user approved production publication and thorough dependency modernization after the previous release gate found 5 high and 2 moderate dependency advisories.
Test plan
Clean npm ci on Node 24.20.0; production build and Pagefind indexing of all 36 documents.
Formatting, ESLint with zero warnings, TypeScript, locale manifest, and two timestamp unit tests pass.
All 51 HTTP regression tests pass, including malicious locale cookies, 404 responses, timestamps, search assets and exact audit PDF bytes/headers.
Full npm audit: zero advisories, including dev dependencies.
In-app browser: English/Japanese/Korean searches, result navigation, language switching, keyboard search selection, Japanese 390px layout, and a PDF download event verified.
Staged private-key/common credential pattern scan: no matches. Pre-landing review found no blocking issues.
Risk and rollback
Public read-only docs; no contract, wallet, allocation or whitepaper source changes. TypeScript 7 and Zod 4.5 were tested and rejected for upstream incompatibility; compatible TypeScript 6.0.3 and existing Zod 4.3.6 are used. An XML parser patch override removes an upstream critical-issue deprecation. No forced installs or audit suppression.
Existing GitHub-to-Netlify main deployment only. Verify live routes, search and audit PDF after merge. If a regression occurs, retain/restore the previous successful deploy or revert with owner approval. Detailed evidence and compatibility decisions are in docs/maintenance/2026-08-security-update.md.
Production verification completed on 2026-08-31. Merge commit ec656ed has the same tree as verified candidate 3bda415. Main CI passed: https://github.com/xagentAI/xagent-docs/actions/runs/33361269134 . The unchanged 51-test smoke suite now passes against both the Netlify preview and https://docs.xagt.ai, including all36 document routes, invalid locale cookies, missing files, search index, timestamps, and audit download headers/checksum. In-app browser on production verified Korean audit content/date, an actual PDF download event, Japanese language switching and localized search results. The first preview exposed a missing CDN attachment header; netlify.toml fixed it before the production merge. No remaining known failing release checks.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Publish the original PeckShield audit PDF with English, Japanese, and Korean contract/security pages, localized resources and disclaimers, and synchronized changelogs. Upgrade stable compatible dependencies and fix locale validation, missing-file errors, search indexing, and update timestamps.
Why
The user approved production publication and thorough dependency modernization after the previous release gate found 5 high and 2 moderate dependency advisories.
Test plan
Risk and rollback
Public read-only docs; no contract, wallet, allocation or whitepaper source changes. TypeScript 7 and Zod 4.5 were tested and rejected for upstream incompatibility; compatible TypeScript 6.0.3 and existing Zod 4.3.6 are used. An XML parser patch override removes an upstream critical-issue deprecation. No forced installs or audit suppression.
Existing GitHub-to-Netlify main deployment only. Verify live routes, search and audit PDF after merge. If a regression occurs, retain/restore the previous successful deploy or revert with owner approval. Detailed evidence and compatibility decisions are in docs/maintenance/2026-08-security-update.md.