Repository navigation
feat: release v0.0.6 - #40
Merged
Merged
Conversation
This was referenced Oct 23, 2026
KEYS.asc held a bare public-key line ("keytype key comment"), which
Git rejects as an allowed-signers file ("invalid key"), so even v0.0.5
signed with SHA256:f6FG... could not be verified against it. Rewrite
it in allowed-signers form with a fingerprint and host comment above
each key, and document the verify command in KEYS.md.
Also trust SHA256:kIOPAavp1TCEauTr1tTIN3cv+tSs6F9m/4lZjuM9tqk from
rousseau-mbp-m1, already a GitHub signing key on the account, in both
KEYS.asc and .github/allowed_signers (which the release workflow
verifies tags against), since release tags signed on rousseau-mbp-m1
could not verify. This commit is signed by the key it adds; f6FG is
not available on this machine.
Assisted-by: Claude Code:claude-opus-5-5
Signed-off-by: Sebastien Rousseau <sebastienrousseau@users.noreply.github.com>
npm 10, shipped with Node 20 and 22, crashes in arborist's
loadPeerSet ("Cannot read properties of null (reading 'edgesOut')")
while resolving html-validate's optional jest/vitest peers, so the
HTML validation step failed before validating anything. npm 11 on
Node 24 resolves them. Node 20 is also past end of life.
Assisted-by: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Sebastien Rousseau <sebastienrousseau@users.noreply.github.com>
…updates Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.39.0` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.39.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.4` | `2.5.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.38.2` | `4.39.0` | Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `github/codeql-action/init` from 4.38.2 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...6f2ac81) Updates `github/codeql-action/analyze` from 4.38.2 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...6f2ac81) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `ossf/scorecard-action` from 2.4.4 to 2.5.0 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@2d11466...fa7117d) Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...6f2ac81) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit 9cd302d)
Bumps the python-test group in /requirements with 1 update: [hypothesis](https://github.com/HypothesisWorks/hypothesis). Updates `hypothesis` from 6.168.3 to 6.168.5 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@v6.168.3...v6.168.5) --- updated-dependencies: - dependency-name: hypothesis dependency-version: 6.168.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-test ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit dd7a9d9)
sebastienrousseau
force-pushed
the
feat/v0.0.6
branch
from
October 23, 2026 17:08
a5ec4b8 to
b8ac147
Compare
Bumps the python-test group in /requirements with 1 update: [hypothesis](https://github.com/HypothesisWorks/hypothesis). Updates `hypothesis` from 6.168.3 to 6.170.8 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@v6.168.3...v6.170.8) --- updated-dependencies: - dependency-name: hypothesis dependency-version: 6.170.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-test ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit c5c5770) # Conflicts: # requirements/test.in # requirements/test.txt
Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `7.0.0` | `7.1.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.39.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.39.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.4` | `2.5.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.38.2` | `4.39.1` | Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@5fda3b9...6d4fd22) Updates `github/codeql-action/init` from 4.38.2 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...9b32540) Updates `github/codeql-action/analyze` from 4.38.2 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...9b32540) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `ossf/scorecard-action` from 2.4.4 to 2.5.0 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@2d11466...fa7117d) Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...9b32540) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> (cherry picked from commit 0d6bb2a) # Conflicts: # .github/workflows/codeql.yml # .github/workflows/scorecard.yml
This was referenced Oct 30, 2026
Closed
Refactor scripts/post-build.py into modular functions within complexity ceilings, add SOURCE_DATE_EPOCH support for reproducible sitemap dates, and emit llms-full.txt for single-request LLM ingestion. Remove 40 unused legacy template files, strip unsafe-inline from Content-Security-Policy meta headers, synchronize main.js with theme and search controllers, and bump release metadata to v0.0.6 on ssg 0.0.69. Signed-off-by: Sebastien Rousseau <sebastienrousseau@users.noreply.github.com> Assisted-by: Antigravity:gemini-3.1-pro [pytest,radon,ssg]
sebastienrousseau
changed the title
Add an above-the-fold pip install copy pill in the spatial hero, inject one-click copy buttons across terminal and code blocks, and wire a live search modal triggered by / or Cmd+K. Enforce 44x44px minimum touch targets across navbar links and FAQ controls, highlight active navigation items via aria-current, and upgrade contact form ergonomics and glassmorphic card radii. Signed-off-by: Sebastien Rousseau <sebastienrousseau@users.noreply.github.com> Assisted-by: Antigravity:gemini-3.1-pro [html-validate,pytest,ssg]
Restore the canonical Visage theme layout, stylesheet, and client controller from ssg-themes.github.io/themes/visage while retaining the v0.0.28+ documentation updates and WCAG 2.2 AAA terminal contrast. Assisted-by: Antigravity:gemini-2.5-pro [ssg-audit, ruff, pytest] Signed-off-by: Sebastien Rousseau <sebastienrousseau@users.noreply.github.com>
Consolidate top navigation to four primary links plus one CTA, restore the SSG header search slot and modal trigger, adopt canonical base/header/footer template inheritance across all layouts, and add GNUmakefile, devcontainer, MIGRATION.md, pkg/VERIFY.md, supply-chain/README.md, sw.js, and humans.txt. Assisted-by: Antigravity:Gemini-3.1-Pro [ssg, node, python3] Signed-off-by: Sebastien Rousseau <sebastienrousseau@users.noreply.github.com>
sebastienrousseau
force-pushed
the
feat/v0.0.6
branch
from
October 30, 2026 21:43
9e512b8 to
846cc0e
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR prepares the v0.0.6 release by aligning the site with the canonical Visage theme, formatting
KEYS.ascinto valid OpenSSH allowed-signers syntax, hardening the post-build pipeline with reproducible timestamps andllms-full.txtgeneration, and integrating all pending dependency updates.Maintainers can now verify release tags directly against
KEYS.ascon both trusted signing keys, and AI coding agents can ingest the complete documentation corpus in a single deterministic request.Highlights ⭐️
_layouts/base.html,_layouts/header.html,_layouts/footer.html,_layouts/styles.css, and_layouts/main.jswith the canonicalVisagetheme fromssg-themes.github.io, maintaining 100% WCAG 2.2 AAA contrast compliance (7.09:1min) across light and dark modes.KEYS.ascinto valid OpenSSH allowed-signers syntax (<principals> <key-type> <base64-key> <comment>) and trusted the second maintainer signing key (rousseau-mbp-m1) acrossKEYS.ascand.github/allowed_signers.scripts/post-build.pyinto modular single-pass stages that honourSOURCE_DATE_EPOCHfor deterministicsitemap.xmltimestamps, emitllms-full.txtalongsidellms.txt, and populatesw.jsandhumans.txt.ssg0.0.69, addedGNUmakefile,.devcontainer,MIGRATION.md,pkg/VERIFY.md, andsupply-chain/README.md, integrated all pending GitHub Actions and Python test dependency bumps (chore(deps): bump hypothesis from 6.168.3 to 6.168.5 in /requirements in the python-test group #38, chore(deps): bump the github-actions group across 1 directory with 6 updates #39, chore(deps): bump hypothesis from 6.168.3 to 6.170.8 in /requirements in the python-test group #41, chore(deps): bump the github-actions group with 7 updates #42), and achieved 10/10 pillars (0 issues) across bothssgand portfolio quality audits.What's Changed
Validation
npx --yes html-validate@10 "docs/**/*.html": 0 errors, 0 warnings across 20 compiled HTML pages.node --test tests/property.test.js: 2 passed, 0 failed.make -f GNUmakefile DESTDIR=/tmp/bsp-stage install: Staged complete HTML documentation tree cleanly.make verify: 10/10 quality gate pillars passed, 15/15ssg auditgates passed, 40/40 SPDX headers verified, and 100% WCAG 2.2 AAA contrast pairs passed.Checksums
Full Changelog: v0.0.5...v0.0.6