From 4d43f4bc4f6d84607233ee1307c3e4edb9514bb1 Mon Sep 17 00:00:00 2001
From: Prem <premsathisha@users.noreply.github.com>
Date: Wed, 29 Jul 2026 00:44:56 +0530
Subject: [PATCH 1/2] Enable repository security workflows

---
 .github/workflows/codeql.yml            | 39 +++++++++++++++++++++++++
 .github/workflows/dependency-review.yml | 14 +++++++++
 docs/REPO MAP.md                        |  8 ++++-
 3 files changed, 60 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/codeql.yml
 create mode 100644 .github/workflows/dependency-review.yml

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 0000000..eafb0d6
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,39 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: '27 3 * * 1'
+
+permissions:
+  contents: read
+  security-events: write
+  actions: read
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    runs-on: macos-15
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [swift, javascript]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: /language:${{ matrix.language }}
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
new file mode 100644
index 0000000..491233a
--- /dev/null
+++ b/.github/workflows/dependency-review.yml
@@ -0,0 +1,14 @@
+name: Dependency Review
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Dependency review
+        uses: actions/dependency-review-action@v4
diff --git a/docs/REPO MAP.md b/docs/REPO MAP.md
index 8972e48..2815252 100644
--- a/docs/REPO MAP.md	
+++ b/docs/REPO MAP.md	
@@ -1,5 +1,5 @@
 # Repo Map
-Last Updated: 2026-06-09
+Last Updated: 2026-07-29
 
 ## Use This Map First
 This file is the canonical repository map for coding agents. Read it before broad scanning or indexing, then freely inspect any files needed to understand the task, verify the map, or investigate missing context.
@@ -28,6 +28,8 @@ This file is the canonical repository map for coding agents. Read it before broa
 | `README.md` | Documented source workflow: `npm install`, `npm run build`, `npm start`, `npm test`, `bash scripts/release-native.sh --set-version <x.y.z>`. |
 | `.github/workflows/ci.yml` | CI entry point on `macos-15` with `npm ci`, `npm run typecheck`, and `npm test`. |
 | `.github/workflows/pages.yml` | GitHub Pages publish entry point for the site and Sparkle feed. |
+| `.github/workflows/dependency-review.yml` | Pull-request dependency review using GitHub's dependency review action. |
+| `.github/workflows/codeql.yml` | Scheduled, push, and pull-request CodeQL analysis for Swift and JavaScript. |
 | `site/index.html` | Static homepage entry. |
 
 ## Key Commands
@@ -67,6 +69,8 @@ Edit here when:
 Important files:
 - `ci.yml`
 - `pages.yml`
+- `dependency-review.yml`
+- `codeql.yml`
 
 ### `assets`
 Purpose: source artwork for the app, site, and screenshots.
@@ -222,6 +226,8 @@ Important files:
 |---|---|
 | `ci.yml` | Defines the continuous-integration workflow that validates native build and test expectations on GitHub-hosted macOS runners. It is the remote enforcement layer for repo health. |
 | `pages.yml` | Defines the GitHub Pages publishing workflow that packages the site and selected release-facing assets for the public web presence. It is the automation boundary between source files and the published website/update surface. |
+| `dependency-review.yml` | Checks pull-request dependency changes for known vulnerabilities and license risks before merge. |
+| `codeql.yml` | Runs CodeQL analysis for the native Swift app and static-site JavaScript on pushes, pull requests, and a weekly schedule. |
 
 ### `assets`
 | File | Purpose |

From 8d92a4c406d25f4b8ff8f5448f07d36b98e3b6ab Mon Sep 17 00:00:00 2001
From: Prem <premsathisha@users.noreply.github.com>
Date: Wed, 29 Jul 2026 00:59:02 +0530
Subject: [PATCH 2/2] Fix toast compatibility on older SDKs

---
 .../Sources/TextShotSettings/ToastPresenter.swift | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/native/settings-app/Sources/TextShotSettings/ToastPresenter.swift b/native/settings-app/Sources/TextShotSettings/ToastPresenter.swift
index 5d55779..261c67f 100644
--- a/native/settings-app/Sources/TextShotSettings/ToastPresenter.swift
+++ b/native/settings-app/Sources/TextShotSettings/ToastPresenter.swift
@@ -148,15 +148,12 @@ final class ToastPresenter {
     }
 
     private static func makeSurface(frame: NSRect) -> (root: NSView, content: NSView) {
-        if #available(macOS 26.0, *) {
-            let content = NSView(frame: frame)
-            content.autoresizingMask = [.width, .height]
-
-            let glass = NSGlassEffectView(frame: frame)
-            glass.style = .regular
-            glass.cornerRadius = cornerRadius
-            glass.contentView = content
-            return (glass, content)
+        if let glassViewClass = NSClassFromString("NSGlassEffectView") as? NSView.Type {
+            let glass = glassViewClass.init(frame: frame)
+            glass.wantsLayer = true
+            glass.layer?.cornerRadius = cornerRadius
+            glass.layer?.masksToBounds = true
+            return (glass, glass)
         }
 
         if NSWorkspace.shared.accessibilityDisplayShouldReduceTransparency {