chore: sync ryan/dev security updates - #64

Merged

Ryson-32 merged 38 commits into

mainfrom

Jul 26, 2026

Commits on Jul 13, 2026

fix: preserve parser and rule configuration contracts
Ryson-32
committed
f7e4ef5
fix: strengthen local runtime safeguards
Ryson-32
committed
b485967
refactor: clarify public type contracts
Ryson-32
committed
58f14a0
test: split oversized public contract suites
Ryson-32
committed
e5e36e2
fix: keep internal legacy migrations private
Ryson-32
committed
ef47e39
test: detach self-host shell probes from terminals
Ryson-32
committed
7857ad9
docs: clarify subscription bearer responsibility
Ryson-32
committed
a615bdc
docs: surface subscription owner warning
Ryson-32
committed
d82e2b4
fix(copy): keep subscription warnings concise
Ryson-32
committed
73f9f72
feat(local): add high-risk source import toggle
Ryson-32
committed
a0f6c83
fix(local): keep imports root-typecheck compatible
Ryson-32
committed
12425da
fix(local): preserve setup lock with prisma adapter
Ryson-32
committed
295f96d

Commits on Jul 15, 2026

fix: stabilize subscription imports and validation
Ryson-32
committed
89c652c

Commits on Jul 16, 2026

fix: harden local runtime boundaries
Ryson-32
committed
a11e2c6
fix: make local updates recoverable
Ryson-32
committed
91afc93
docs: document safe setup and update recovery
Ryson-32
committed
0846a94
fix: isolate installer registry credentials
Ryson-32
committed
0b8333a
fix: protect self-hosted backups
Ryson-32
committed
6bb0597
test: preserve jsx runtime semantics
Ryson-32
committed
ed76554
docs: keep the project overview concise
Ryson-32
committed
46ca2d6
fix: label compact navigation controls
Ryson-32
committed
f39b8f3
test: assert expected component failure logs
Ryson-32
committed
d510212

Commits on Jul 17, 2026

build: retry transient dependency downloads
Ryson-32
committed
90fba5c
build: cache verified dependency downloads
Ryson-32
committed
427fb43
fix: keep shell validation portable
Ryson-32
committed
9f299cb

Commits on Jul 18, 2026

feat(ui): add accessible form control primitives
Ryson-32
committed
78c952a
refactor(ui): unify public and local interactions
Ryson-32
committed
6b983d1
fix(ui): align form field aria prop types
Ryson-32
committed
a9d6437
chore(ui): enforce icon button labels
Ryson-32
committed
dbc0eef
fix(ui): restore source and advanced mode styling
Ryson-32
committed
5c1ae39
fix(ui): restore full-row group disclosure
Ryson-32
committed
a08c7a3

Commits on Jul 26, 2026

fix(deps): resolve runtime security advisories
Ryson-32
committed
afc28f2
Merge pull request #63 from SubBoost/ryan/dependency-security
Ryson-32
authored
f50dd5f
feat(core): add persistent node regex filtering
Ryson-32
committed
889aa29
feat(ui): add automatic node processing
Ryson-32
committed
e4ea0a5
test(ui): cover filter import refresh paths
Ryson-32
committed
b842fb5
fix(security): keep regex validation linear
Ryson-32
committed
1dd7a73
Merge pull request #65 from SubBoost/ryan/dependency-security-codeql
Ryson-32
authored
b130229