@fluid-theme/core 2.2.10 → 2.2.12

package/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.2.12] - 2026-11-04
+
+### Fixed
+- Fix 1 verified audit finding (Nov 2026 code audit)
+
+
+## [2.2.11] - 2026-11-04
+
+### Fixed
+- fix: hero background photo inside <picture> fills a tall hero
+
+
 ## [2.2.10] - 2026-11-03
 
 ### Fixed
@@ -803,3 +815,5 @@ Release-automation version bump; no source changes beyond v0.9.0.
 [2.2.8]: https://github.com/Agile-Media-Agency/the-fluid-theme/compare/v2.2.7...v2.2.8
 [2.2.9]: https://github.com/Agile-Media-Agency/the-fluid-theme/compare/v2.2.8...v2.2.9
 [2.2.10]: https://github.com/Agile-Media-Agency/the-fluid-theme/compare/v2.2.9...v2.2.10
+[2.2.11]: https://github.com/Agile-Media-Agency/the-fluid-theme/compare/v2.2.10...v2.2.11
+[2.2.12]: https://github.com/Agile-Media-Agency/the-fluid-theme/compare/v2.2.11...v2.2.12

package/CLAUDE.md

@@ -145,6 +145,18 @@ for a returning `checkpoint/*` branch.
   Cloudflare Pages without publishing a patch. Do not use `[skip ci]` for that: Cloudflare
   honours it too and the site would not deploy. A merge that also touches anything else
   outside the list (`_docs/`, `themes/`, `CLAUDE.md`, workflows) still releases.
+- **2026-11-03: a `<picture>` wrapper breaks any "img fills its box" rule.** The picture
+  is a block at the photo's ratio, so `img { block-size: 100% }` fills the picture, not
+  the box: hero photos stopped at 219px in a 900px hero (#137). `.hero__background
+  picture` is now `display: contents`; any new fill-the-box media rule needs the same,
+  and a case in `scripts/fixtures/hero-picture.html` (`npm run test:hero-fill`).
+- **2026-11-03: the browser gates run on the Mac Studio, not in Actions (no paid minutes).**
+  LaunchAgent `com.neilswhite.fluid-theme-checks` runs `scripts/mac-studio-checks.sh` every
+  15 minutes: hero, hero-fill, focus, axe and visual-scan on each new head of an open PR that
+  touches `src/**/*.css` or `themes/*.css`, posting status `mac-studio/contrast` and one sticky
+  comment (`ops/mac-studio-checks.md`). No status for an hour on such a PR means the job is not
+  running (nothing alerts). `ops/**` and that script are in Release's `paths-ignore`; the PR
+  that added them changed `release.yml` too, so it merged with `[skip ci]` in its title.
 
 ## Before Doing Anything
 
@@ -231,6 +243,7 @@ node scripts/focus-check.mjs                                            # 0 fail
 npm run test:zero                                                       # Fluid Zero fixture (3 gates)
 node scripts/toc-check.mjs                                              # TOC module: 0 failures
 npm run test:places                                                     # outline map pins drawn, numbered, in the frame (after sync.sh)
+npm run test:hero-fill                                                  # hero background photo (bare or <picture>) covers the hero (#137)
 ```
 
 The second command proves the detector still detects. A scanner that cannot fail