chore(version): bump VERSION 0.1.16 → 0.1.17 (release prep)#127

Merged

mvalancy merged 1 commit into

devfrom

chore/version-0.1.17

Jul 19, 2026

mvalancy commented Jul 19, 2026

Owner

0.1.17 — web-ui XSS hardening consistency. Single reviewed item since 0.1.16:

harden(web-ui): apply escAttr() to the remaining attribute interpolations (consistency sweep) #123 (PR harden(web-ui): escAttr/data-* sweep across remaining attribute interpolations (#123) #126): escAttr/data-* sweep across the remaining server/catalog-constrained attribute + inline-JS interpolation sites — completes the harden(web-ui): notification inbox passes id via inline onclick — safe today only by server id-constraint, not esc(); use data-id + delegation #121 attribute-XSS hardening class. Adversarial tests revert-proven; also baked the 'hardening PRs must prove the failure they close + docs must be truthful' lesson into .agents/knowledge.

Independently reviewed 2/2 at Gate-1; release-level scope + secrets self-verified (single docs+web-ui item, no integration surface).

🤖 Generated with Claude Code


          chore(version): bump VERSION 0.1.16 → 0.1.17 (0.1.17 release prep)

a0f3498

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

mvalancy merged commit 37fb5c7 into dev

1 check passed

mvalancy deleted the chore/version-0.1.17 branch

July 19, 2026 08:24

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet