chore: sync accessibility-tools fix from team template, correct project type#28
Merged
Merged
Conversation
…ct type Fixes a high-severity Dependabot alert: adm-zip was resolving to an unpinned vulnerable version via the accessibility-tools test tooling. The team master template already pins adm-zip to 0.6.0; this pulls that fix in. Also corrects .claude/project-type from "documentation" to "code" -- this project has CI, Lint, Security, CodeQL, and Deploy workflows and a package.json, so it was being skipped by workflow and accessibility-tools syncs. Adds an inert playwright.yml scaffold that ships with code-type projects. Adds .claude/workflows-protect for ci.yml, codeql.yml, deploy.yml, lint.yml, release.yml, and accessibility.yml: the team master's pinned action SHAs in these files are currently older than what this project has (deploy.yml also carries this project's own CNAME and soa/ custom deploy paths), so an unprotected sync would have reverted recent Dependabot work and broken the live deploy. Manually carries forward one genuine improvement from the master's accessibility.yml (--load-delay 1000, reduces flaky false-positive contrast failures). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GHD9HpRHJpmVy4yMHfP5zs
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
.github/accessibility-tools..claude/project-typefromdocumentationtocode, which had been silently blocking workflow and accessibility-tools syncs (this project has CI, Lint, Security, CodeQL, and Deploy workflows and a package.json).playwright.ymlscaffold that ships with code-type projects (does nothing until real Playwright tests exist).accessibility.yml:--load-delay 1000on the axe-core CLI step, reducing flaky false-positive contrast failures from render-timing races..claude/workflows-protectforaccessibility.yml,ci.yml,codeql.yml,deploy.yml,lint.yml, andrelease.yml. A full sync would have reverted the GitHub Actions version bumps from PRs chore(deps-dev): bump the javascript group with 7 updates #24 and chore(deps): bump the github-actions group with 5 updates #25, and would have dropped this project's customdeploy.ymlincludes for the CNAME (custom domain) andsoa/(privacy/terms pages) paths, breaking the live deploy. This file is documented as a temporary, project-local safeguard until the team master's action pins catch up.Test plan