Skip to content

CICD#6

Merged
JosunLP merged 23 commits intomainfrom
development
Jan 23, 2026
Merged

CICD#6
JosunLP merged 23 commits intomainfrom
development

Conversation

@JosunLP
Copy link
Copy Markdown
Collaborator

@JosunLP JosunLP commented Jan 23, 2026

No description provided.

JosunLP and others added 23 commits January 23, 2026 18:07
- Added optional `validator` function to prop definitions for value validation.
- Introduced lifecycle hooks: `beforeMount`, `beforeUpdate`, and `onError` for better component management.
- Updated documentation to reflect new prop validation and lifecycle features.

feat: extend reactive module with watch and readonly utilities

- Implemented `watch` function to observe signal changes with access to old values.
- Added `readonly` function to create read-only views of signals.
- Enhanced utility functions with type guards for signals and computed values.

fix: improve security measures in sanitize function

- Added checks to remove dangerous tags even if explicitly allowed.
- Implemented protections against DOM clobbering via reserved IDs and names.
- Enhanced URL normalization to prevent bypass attempts using Unicode characters.

feat: introduce new methods in BQueryElement for DOM manipulation

- Added `wrap`, `unwrap`, `replaceWith`, and `scrollTo` methods for easier element manipulation.
- Implemented `delegate` method for efficient event handling on child elements.

test: add comprehensive tests for new features and security enhancements

- Created tests for new methods in BQueryElement.
- Added tests for `watch` and `readonly` functionalities in the reactive module.
- Implemented tests for security improvements in the sanitize function and prototype pollution prevention in utils.
This workflow automatically marks stale issues and pull requests based on inactivity, helping to manage repository maintenance.
Add stale.yml workflow for managing inactive issues and PRs
Add GitHub Actions workflow to summarize new issues
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Add CodeQL analysis workflow configuration
- Updated `beforeUpdate` to accept props for better control during updates.
- Added support for `beforeMount` lifecycle hook.
- Implemented prop validation in component definition.
- Introduced delegated event handling in BQueryElement with `delegate` and `undelegate` methods.
- Expanded security measures by adding more dangerous tags and reserved IDs in sanitizer.
- Added tests for lifecycle hooks and prop validation to ensure correct behavior.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings January 23, 2026 19:59
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR fine-tunes the docs build and CI/CD pipeline to make static asset filenames safer for case-sensitive environments and ensure documentation is deployed consistently as part of the release flow.

Changes:

  • Configure VitePress’ underlying Vite/Rollup build to use hexadecimal (hex) hash characters for output filenames to avoid case-sensitivity issues on some servers.
  • Remove the event filter on the deploy-pages job so GitHub Pages deployment runs whenever the workflow runs (including release events), as long as build-docs completes successfully.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
docs/.vitepress/config.ts Adds a vite.build.rollupOptions.output.hashCharacters = 'hex' override so generated asset hashes are strictly lowercase hexadecimal, improving compatibility with case-sensitive hosting environments.
.github/workflows/npm-publish.yml Simplifies the deploy-pages job trigger by removing the if condition, allowing docs deployment to run on all configured workflow events once docs are built.

@JosunLP JosunLP merged commit 421c79f into main Jan 23, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants