jekyll-theme-zer0 1.17.0 → 1.17.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: addc113b917ada3a80a134299c5a37cf05109133f628a4195fac8fdbb402102d
-  data.tar.gz: b07960a50b9812125d083310ba4afbf8f4d670d2fe69e901b4e3fca33010260a
+  metadata.gz: 50907837fd27d28fa1bea1cf163d7e2d71a4a848266c861656b8d8ebdb2e3d78
+  data.tar.gz: e3853573f9cca38ec51ce145a8279aedf221035afac88cf9cfc77d220dee23e5
 SHA512:
-  metadata.gz: 0a37703e0433fc6bdceb50b35fdcfe37157d9b863bc62eff91190948881eb4c092476376d4c76b5807b0faec54334ebf3028249f004df7d4bbe3ce72019f2af3
-  data.tar.gz: 2a57166a4b747c174111c778822d65e0fcc4a955480add45118fb449f54ca37a113ca2995490d7e90e4bdb0028c227ea5377a6447b735cbe1d8784d936edcb54
+  metadata.gz: b1dcd28c12fd2c48e14463bf4e7db63ed3c024262ca3bc04ba98a9ce8b3b53affef695846681fee898584184a58790a86361e00940d89a0ecbe76e0dddb54496
+  data.tar.gz: e28d9a6a97edefc45d7b772e363a1826b3a96e00de15e58e90be84cae1c7fa2ad23a24198769ea4f13cdbeac138cbf4f02fd75356d8066e8cb5c69ae9b40558a

data/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.17.1] - 2026-06-13
+
+### Changed
+- Version bump: patch release
+
+### Commits in this release
+- f2657b68 fix(a11y): resolve all navbar & site WCAG 2.1 AA violations (T-007) (#149)
+- 30d836cb fix(admin): sync config-page copy with live _config.yml and redact the Raw tab (T-018) (#148)
+
+### Fixed
+- **Navbar & site accessibility (T-007)**: resolved all WCAG 2.1 AA violations that kept three axe-core audits frozen — dropped the redundant ARIA `menubar`/`menuitem` roles from the nav (the nav landmark already provides semantics; menubars require menuitem children the search/settings buttons weren't), added an `aria-label` to the site-subtitle home link, kept the admin/footer separator a list item, gave the theme-preview disabled tab a `role="tab"` and an icon-only button an `aria-label`, made code blocks a single keyboard-focusable scroll region, and underlined prose links so they're distinguishable without color. The three `test.fixme` blocks in `test/visual/accessibility.spec.js` are now live `test()` calls — verified 0 violations across the homepage, FAQ, and all 8 admin pages (23/23 a11y, 223/223 smoke tier)
+
 ## [1.17.0] - 2026-06-12
 
 ### Changed
@@ -13,6 +25,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Commits in this release
 - ac36e1a3 feat(tests): plugin unit specs and coverage baseline — T-011, T-005 (#145)
 
+### Fixed
+- **Admin config page sync (T-018)**: the page's config copy is now byte-synced with the live `_config.yml` (raw-wrapped so Liquid-looking comment text renders literally) and `validate` fails on drift; the **visible Raw-YAML tab** now applies the same sensitive-line redaction as the hidden copy element (it previously showed the raw file — the stale copy was the only thing keeping the live PostHog key off that tab); the raw-tab security test targets the real `code#cfg-raw-yaml` element and asserts presence instead of silently skipping
+
 ### Added
 - **Plugin unit specs (T-011)**: 19 Minitest specs for the previously-untested `preview_image_generator.rb`, `content_statistics_generator.rb`, and `admin_page_urls.rb` plugins (config merge, path normalization, index dedupe by relative path, hook output, edge cases); wired into the core suite as "Plugin Unit Specs"
 - **Coverage baseline (T-005)**: structural survey recorded at `docs/development/coverage-baseline.md` — 10/10 suites green; the two remaining zero-coverage subsystems filed as T-019 (migrate.sh + theme_version.rb) and T-020 (installer wizard/upgrade)

data/README.md

@@ -2,7 +2,7 @@
 title: zer0-mistakes
 sub-title: AI-Native Jekyll Theme
 description: AI-native Jekyll theme for GitHub Pages — Docker-first development, AI-powered installation, multi-agent integration (Copilot, Codex, Cursor, Claude), AI preview-image generation, and AIEO content optimization with Bootstrap 5.3.
-version: 1.17.0
+version: 1.17.1
 layout: landing
 tags:
   - jekyll
@@ -20,7 +20,7 @@ categories:
   - bootstrap
   - ai-tooling
 created: 2024-02-10T23:51:11.480Z
-lastmod: 2026-06-12T20:08:02.000Z
+lastmod: 2026-06-13T04:17:52.000Z
 draft: false
 permalink: /
 slug: zer0
@@ -911,7 +911,7 @@ git push origin feature/awesome-feature
 
 | Metric | Value |
 |--------|-------|
-| **Current Version** | 1.17.0 ([RubyGems](https://rubygems.org/gems/jekyll-theme-zer0), [CHANGELOG](/CHANGELOG)) |
+| **Current Version** | 1.17.1 ([RubyGems](https://rubygems.org/gems/jekyll-theme-zer0), [CHANGELOG](/CHANGELOG)) |
 | **Documented Features** | 43 ([Feature Registry](https://github.com/bamr87/zer0-mistakes/blob/main/_data/features.yml)) |
 | **Setup Time** | 2-5 minutes ([install.sh benchmarks](https://github.com/bamr87/zer0-mistakes/blob/main/install.sh)) |
 | **Documentation Pages** | 70+ ([browse docs](https://zer0-mistakes.com/pages/)) |
@@ -966,6 +966,6 @@ And these AI partners that make zer0-mistakes truly AI-native:
 
 **Built with ❤️ — and a little help from our AI partners — for the Jekyll community**
 
-**v1.17.0** • [Changelog](CHANGELOG.md) • [License](LICENSE) • [Contributing](CONTRIBUTING.md) • [AI Agent Guide](AGENTS.md)
+**v1.17.1** • [Changelog](CHANGELOG.md) • [License](LICENSE) • [Contributing](CONTRIBUTING.md) • [AI Agent Guide](AGENTS.md)
 
 

data/_data/backlog.yml

@@ -182,7 +182,7 @@ tasks:
 
   - id: T-007
     title: "Fix global navbar WCAG 2.1 AA violations to enable axe-core full-audit tests"
-    status: open
+    status: done
     priority: P1
     area: a11y
     risk: standard
@@ -194,6 +194,14 @@ tasks:
       `aria-required-children` (menubar/button nesting), `link-name` (icon-only nav links),
       `list` (footer list structure), and `scrollable-region-focusable` (code blocks).
       Fix the HTML/ARIA in `_includes/` and `_layouts/` to make the full axe-core audit green.
+      Done 2026-06-13: all WCAG 2.1 AA violations resolved and verified with a
+      live axe-core run plus the unfrozen Playwright a11y spec (23/23 pass,
+      223/223 smoke tier). The actual violations differed from the stale TODO:
+      dropped redundant ARIA menubar/menuitem roles (navbar.html), aria-label
+      on the site-subtitle home link, listitem-preserving admin separator,
+      role="tab" on the disabled preview tab + aria-label on an icon-only
+      button, single focusable scroll region for code blocks (code-copy.js +
+      .scss), and underlined prose links across content wrappers.
     acceptance:
       - "All four violations listed in the `test.fixme` comment are resolved in `_includes/` / `_layouts/`."
       - "The three `test.fixme` blocks in `test/visual/accessibility.spec.js` are changed to live `test()` calls and pass in CI."
@@ -201,7 +209,7 @@ tasks:
       - "No visual regression in smoke snapshot tests."
     links: { issue: null, pr: null, roadmap: "1.9" }
     created: 2026-06-01
-    updated: 2026-06-01
+    updated: 2026-06-13
 
   - id: T-008
     title: "Fix theme-customizer YAML export to quote hex color values"
@@ -465,7 +473,7 @@ tasks:
 
   - id: T-018
     title: "Admin config page displays a stale copy of _config.yml — keep it in sync safely"
-    status: open
+    status: done
     priority: P2
     area: feat
     risk: standard
@@ -479,13 +487,20 @@ tasks:
       refresh would inject the live `phc_` api_key into the *visible* Raw-YAML
       tab — any sync mechanism must sanitize the visible tab the same way
       T-009 sanitizes the hidden copy element, or redact at sync time.
+      Done 2026-06-12: copy synced (wrapped in Liquid raw markers so config
+      comments mentioning Liquid render literally); scripts/bin/validate
+      gains a drift check that fails when the copy diverges; the visible
+      Raw-YAML tab now renders the same sanitized capture as the hidden
+      element (live phc_ key verified redacted in both); the raw-tab
+      Playwright test targets code#cfg-raw-yaml and asserts presence
+      instead of silently skipping.
     acceptance:
       - "The config shown at /about/config/ matches the live `_config.yml` (automated sync step or build-time check that fails on drift)."
       - "The visible Raw-YAML tab applies the same sensitive-line redaction as the hidden `cfg-full-yaml` element."
       - "`test/visual/security.spec.js` raw-tab test passes without its silent skip path (locator matches the actual `code#cfg-raw-yaml` element)."
     links: { issue: null, pr: null, roadmap: "1.13" }
     created: 2026-06-11
-    updated: 2026-06-11
+    updated: 2026-06-12
 
   - id: T-019
     title: "Unit tests for migrate.sh and theme_version.rb (coverage rank #1)"

data/_includes/components/theme-preview-gallery.html

@@ -146,7 +146,7 @@
         <button class="nav-link" type="button" role="tab" aria-selected="false">Hover me</button>
       </li>
       <li class="nav-item" role="presentation">
-        <button class="nav-link disabled" type="button" disabled>Disabled</button>
+        <button class="nav-link disabled" type="button" role="tab" aria-selected="false" disabled>Disabled</button>
       </li>
     </ul>
   </section>
@@ -528,7 +528,7 @@ docker-compose up
         <div class="d-flex flex-wrap gap-3 mt-3">
           <span class="badge bg-primary p-2"><i class="bi bi-lightning-charge me-1"></i>Badge icon</span>
           <button class="btn btn-outline-primary btn-sm"><i class="bi bi-download me-1"></i>Icon button</button>
-          <button class="btn btn-primary btn-sm"><i class="bi bi-arrow-right"></i></button>
+          <button class="btn btn-primary btn-sm" aria-label="Continue"><i class="bi bi-arrow-right" aria-hidden="true"></i></button>
         </div>
       </div>
     </div>

data/_includes/core/branding.html

@@ -44,11 +44,12 @@
 </div>
 
 <!-- If a subtitle exists -->
-{%- if site.subtitle -%}
+{%- assign _subtitle = site.subtitle | strip -%}
+{%- if _subtitle != "" -%}
 <div class="navbar-brand site-subtitle d-none d-lg-inline">
-    <a class="nav-link" href="{{ '/' | relative_url }}">
+    <a class="nav-link" href="{{ '/' | relative_url }}" aria-label="{{ _subtitle }} — {{ site.title }} home">
         <span class="site-subtitle-text">
-            {{ site.subtitle }}
+            {{ _subtitle }}
         </span>
     </a>
 </div>

data/_includes/navigation/admin-nav.html

@@ -26,7 +26,7 @@
 
     {% if item.external and rendered_separator == false %}
       {% assign rendered_separator = true %}
-      <li role="separator"><hr class="my-2"></li>
+      <li class="nav-item" aria-hidden="true"><hr class="my-2"></li>
     {% endif %}
 
     {% comment %} Active detection: exact URL match or admin_section match {% endcomment %}

data/_includes/navigation/navbar.html

@@ -19,9 +19,9 @@
     <div class="offcanvas-body">
         <!-- Desktop: width is the grid middle track; labels ellipsis or icon-only via container query -->
         <div class="bd-navbar-nav-viewport">
-        <ul class="navbar-nav justify-content-lg-center text-start flex-grow-1" role="menubar">
-            <li class="nav-item d-lg-none" role="none">
-                <a class="nav-link" href="{{ '/' | relative_url }}" role="menuitem" {% if page.url == '/' %}aria-current="page"{% endif %}>
+        <ul class="navbar-nav justify-content-lg-center text-start flex-grow-1">
+            <li class="nav-item d-lg-none">
+                <a class="nav-link" href="{{ '/' | relative_url }}" {% if page.url == '/' %}aria-current="page"{% endif %}>
                     <i class="{{site.default_icon}} bi-house" aria-hidden="true"></i>
                     Home
                 </a>
@@ -41,12 +41,12 @@
                 {%- assign items_remaining = nav_main.size | minus: forloop.index -%}
 
                 {%- if has_children -%}
-                    <li class="nav-item dropdown d-flex align-items-center nav-hover-dropdown" role="none">
+                    <li class="nav-item dropdown d-flex align-items-center nav-hover-dropdown">
                         <!-- Parent link navigates directly -->
                         <a
                             class="nav-link"
                             href="{{ link.url | relative_url }}"
-                            role="menuitem"
+                            aria-label="{{ link.title }}"
                             {%- if link.url == page.url -%} aria-current="page"{%- endif -%}
                             title="{{ link.title }}"
                         >
@@ -70,13 +70,13 @@
                             <span class="visually-hidden">Toggle {{ link.title }} submenu</span>
                         </button>
 
-                        <ul class="dropdown-menu {% if items_remaining < 2 %}dropdown-menu-end{% else %}dropdown-menu-start{% endif %}" aria-labelledby="dropdown-{{ link.title | slugify }}" role="menu">
+                        <ul class="dropdown-menu {% if items_remaining < 2 %}dropdown-menu-end{% else %}dropdown-menu-start{% endif %}" aria-labelledby="dropdown-{{ link.title | slugify }}">
                             {%- for child in link.children -%}
-                                <li role="none">
+                                <li>
                                     <a
                                         class="dropdown-item"
                                         href="{{ child.url | relative_url }}"
-                                        role="menuitem"
+
                                         {%- if child.url == page.url -%} aria-current="page"{%- endif -%}
                                     >
                                         {%- if child.icon -%}
@@ -89,11 +89,11 @@
                         </ul>
                     </li>
                 {%- else -%}
-                    <li class="nav-item" role="none">
+                    <li class="nav-item">
                         <a
                             class="nav-link"
                             href="{{ link.url | relative_url }}"
-                            role="menuitem"
+                            aria-label="{{ link.title }}"
                             {%- if link.url == page.url -%} aria-current="page"{%- endif -%}
                             title="{{ link.title }}"
                         >
@@ -117,11 +117,11 @@
                   {%- if collection.docs.size > 0 -%}
                     {%- assign col_title = collection.label | replace: "-", " " | replace: "_", " " | capitalize -%}
                     {%- assign col_url = "/" | append: collection.label | append: "/" -%}
-                    <li class="nav-item" role="none">
+                    <li class="nav-item">
                         <a
                             class="nav-link"
                             href="{{ col_url | relative_url }}"
-                            role="menuitem"
+                            aria-label="{{ col_title }}"
                             title="{{ col_title }}"
                             {%- if page.collection == collection.label -%} aria-current="page"{%- endif -%}
                         >
@@ -133,7 +133,7 @@
               {%- endfor -%}
 
             {%- endif -%}
-            <li class="nav-item d-lg-none" role="none">
+            <li class="nav-item d-lg-none">
                 <button
                     class="nav-link btn btn-link text-start w-100"
                     type="button"
@@ -145,7 +145,7 @@
                     Search
                 </button>
             </li>
-            <li class="nav-item d-lg-none" role="none">
+            <li class="nav-item d-lg-none">
                 <button
                     class="nav-link btn btn-link text-start w-100"
                     type="button"

data/_sass/core/_docs-layout.scss

@@ -641,6 +641,17 @@ a.bd-intro-badge--tag:focus {
     min-width: 1px
 }
 
+/* a11y (WCAG 1.4.1 link-in-text-block): prose links must be distinguishable
+   without relying on color. Underline inline content links; exclude links
+   that already carry their own non-color affordance (buttons, badges, nav
+   pills/tabs, card and icon links). */
+.bd-content :is(p, li, blockquote, td, dd) a:not(.btn):not(.badge):not(.nav-link):not(.dropdown-item):not(.page-link):not(.card-link):not([class*="text-decoration"]),
+.post-content :is(p, li, blockquote, td, dd) a:not(.btn):not(.badge):not(.nav-link):not(.dropdown-item):not(.page-link):not(.card-link):not([class*="text-decoration"]),
+.landing-content-body :is(p, li, blockquote, td, dd) a:not(.btn):not(.badge):not(.nav-link):not(.dropdown-item):not(.page-link):not(.card-link):not([class*="text-decoration"]),
+#admin-content :is(p, li, blockquote, td, dd, .alert) a:not(.btn):not(.badge):not(.nav-link):not(.dropdown-item):not(.page-link):not(.card-link):not(.alert-link):not([class*="text-decoration"]) {
+    text-decoration: underline;
+}
+
 @media (min-width: 992px) {
     .bd-toc {
         position:-webkit-sticky;

data/_sass/core/code-copy.scss

@@ -89,7 +89,7 @@
       display: block;
       padding: 0;
       border: 0;
-      overflow-x: auto;
+      // overflow on the parent <pre> only (single focusable scroll region, WCAG 2.1.1)
       white-space: pre;
       font-family: var(--zer0-font-mono);
       font-size: 0.8125rem;
@@ -254,7 +254,7 @@ pre.highlight,
     border: 0;
     padding: 0;
     padding-right: calc(var(--zer0-space-3) + var(--zer0-code-copy-width));
-    overflow-x: auto;
+      // overflow on the parent <pre> only (single focusable scroll region, WCAG 2.1.1)
     white-space: pre;
     background-color: transparent;
     font-family: var(--zer0-font-mono);

data/assets/js/code-copy.js

@@ -108,6 +108,17 @@ document.addEventListener('DOMContentLoaded', function () {
 
     ensureLineNumbers(preElement, codeElement);
 
+    // a11y (WCAG 2.1.1 scrollable-region-focusable): a code block that can
+    // scroll horizontally must be reachable by keyboard. Make every <pre> a
+    // focusable region with a discernible name.
+    if (!preElement.hasAttribute('tabindex')) {
+      preElement.setAttribute('tabindex', '0');
+      if (!preElement.hasAttribute('role')) preElement.setAttribute('role', 'region');
+      if (!preElement.hasAttribute('aria-label')) {
+        preElement.setAttribute('aria-label', (getLanguageLabel(preElement) || 'Code') + ' code block');
+      }
+    }
+
     if (preElement.querySelector('.copy')) return;
 
     var rougeWrapper = preElement.closest('.highlighter-rouge > .highlight');

data/scripts/bin/validate

@@ -404,6 +404,23 @@ classified_files = %w[
     pages/_about/settings/_config.yml
     .github/ISSUE_TEMPLATE/config.yml
 ]
+
+# T-018: the admin config page renders pages/_about/settings/_config.yml via
+# include_relative (Liquid cannot reach the repo root). Fail on drift so the
+# page never shows a stale copy; refresh with:
+#   cp _config.yml pages/_about/settings/_config.yml
+settings_copy = 'pages/_about/settings/_config.yml'
+if File.file?(settings_copy)
+  live = File.read('_config.yml', encoding: 'UTF-8')
+  copy_lines = File.read(settings_copy, encoding: 'UTF-8').lines
+  # The copy is wrapped in {% raw %}/{% endraw %} so include_relative renders
+  # the config text literally (the live file mentions Liquid tags in comments).
+  refresh = "{ echo '{% raw %}'; cat _config.yml; echo '{% endraw %}'; } > #{settings_copy}"
+  assert(copy_lines.first.to_s.strip == '{% raw %}' && copy_lines.last.to_s.strip == '{% endraw %}',
+         "#{settings_copy} must be wrapped in raw/endraw; refresh it: #{refresh}")
+  assert(copy_lines[1..-2].join == live,
+         "#{settings_copy} has drifted from _config.yml; refresh it: #{refresh}")
+end
 classified_files.concat(Dir.glob('_data/**/*config*.{yml,yaml}'))
 
 unclassified_files = config_like_files.sort - classified_files.select { |file| File.file?(file) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jekyll-theme-zer0
 version: !ruby/object:Gem::Version
-  version: 1.17.0
+  version: 1.17.1
 platform: ruby
 authors:
 - Amr Abdel
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-06-12 00:00:00.000000000 Z
+date: 2026-06-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jekyll