Skip to content

v1.3.4 — security hardening and documentation - #242

Merged
hoangsvit merged 14 commits into
mainfrom
dev
Oct 6, 2026
Merged

v1.3.4 — security hardening and documentation#242
hoangsvit merged 14 commits into
mainfrom
dev

Conversation

@hoangsvit

@hoangsvit hoangsvit commented Oct 6, 2026

Copy link
Copy Markdown
Member

Release v1.3.4

Promote the validated dev branch to main.

Security

  • undici 7.30.0 (contains upstream security fixes shipped in 7.29.1)
  • brace-expansion 1.1.21
  • CI and release workflows pin actions/checkout and actions/setup-node to immutable v7.0.0 SHAs

Dependency maintenance

  • retain validated patch updates: DOMPurify 3.4.16, intro.js 8.6.0, marked 18.0.14
  • Dependabot npm/GitHub Actions PRs now target dev so future dependency/security work follows dev → main

Version

  • bump extension 1.3.3 → 1.3.4
  • add v1.3.4 changelog entry

Documentation

  • add AGENTS.md
  • add ARCHITECTURE.md
  • add ROADMAP.md
  • link the new docs from README/CLAUDE guidance

Validation

The release preparation PR into dev passed both CI and React Doctor before merge.

hoangsvit and others added 13 commits October 2, 2026 06:56
@hoangsvit
docs: add extension roadmap
799c98a
@hoangsvit
docs: link roadmap from readme
ae7f05c
@hoangsvit
docs: add AI agent roadmap for Arcade Calculator
5fe5077
@hoangsvit
docs: mention AI agent direction in roadmap summary
b845d8f
@hoangsvit
docs: document current architecture and capabilities
cafd5a2
@hoangsvit
docs: link current architecture overview
d55bf8b
@hoangsvit
docs: point Claude guidance to canonical architecture
3c42cc5
@deepsource-autofix
style: format code with Prettier
751e950 
This commit fixes the style issues introduced in cafd5a2 according to the output
from Prettier.

Details: #236
@hoangsvit
docs: add repository agent guidance
5085e57
@hoangsvit
docs: link agent guidance from architecture
2697a73
@hoangsvit
Merge pull request #236 from ePlus-DEV/docs/roadmap-2026
ecf16b7 
docs: add architecture, agent guidance, and roadmap
@hoangsvit
Merge main security updates into dev
3a678cf 
chore: sync main security updates into dev
@hoangsvit
release: v1.3.4 security hardening
6026531 
* chore: bump version to 1.3.4

* chore: route dependency updates through dev

* security: pin CI actions to immutable SHAs

* security: pin release actions to immutable SHAs

* docs: add v1.3.4 release notes
@qodo-code-review

qodo-code-review Bot commented Oct 6, 2026

Copy link
Copy Markdown

ⓘ Qodo reviews are paused because the subscription is no longer active. Ask your workspace admin to reactivate the subscription to resume reviews. Manage billing

@coderabbitai

coderabbitai Bot commented Oct 6, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 34161593-1c41-4b28-9283-a5bbe57e6723
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@eplus-bot

eplus-bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

Thank you for creating this pull request and helping make the project better.

We will review or merge it after the required checks pass.

@eplus-bot eplus-bot added needs-review Pull request is ready for maintainer review build-ci Build, CI, release, or project configuration labels Oct 6, 2026
@eplus-bot eplus-bot added the documentation Improvements or additions to documentation label Oct 6, 2026
@eplus-bot
eplus-bot self-requested a review October 6, 2026 01:20
@deepsource-autofix
style: format code with Prettier
d41c700 
This commit fixes the style issues introduced in 6026531 according to the output
from Prettier.

Details: #242
@hoangsvit
hoangsvit merged commit 00e9582 into main Oct 6, 2026
10 of 11 checks passed
@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

Thanks for helping make Google Cloud Skills Boost - Helper better!

@deepsource-io

deepsource-io Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

DeepSource Code Review

We reviewed changes in 26cbc35...d41c700 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
JavaScript Oct 6, 2026 1:21a.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@eplus-bot eplus-bot Awaiting requested review from eplus-bot

Assignees

@hoangsvit hoangsvit

Labels

area: config area: docs area: release build-ci Build, CI, release, or project configuration documentation Improvements or additions to documentation needs-review Pull request is ready for maintainer review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@hoangsvit @eplus-bot