@networkpro/web 1.25.7 → 1.25.9

package/.github/workflows/prevent-audit-merge.yml

@@ -0,0 +1,27 @@
+# .github/workflows/prevent-audit-merge.yml
+#
+# Copyright © 2025 Network Pro Strategies (Network Pro™)
+# SPDX-License-Identifier: CC-BY-4.0 OR GPL-3.0-or-later
+# This file is part of Network Pro
+
+name: Prevent audit merges into master
+
+on:
+  pull_request:
+    branches: [master]
+
+permissions:
+  contents: read
+
+jobs:
+  check-branch:
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Fail if source is audit-netlify
+        run: |
+          SOURCE_BRANCH="${{ github.event.pull_request.head.ref }}"
+          echo "🔍 Checking source branch: $SOURCE_BRANCH"
+          if [[ "$SOURCE_BRANCH" == "audit-netlify" ]]; then
+            echo "❌ Merge from 'audit-netlify' to 'master' is prohibited."
+            exit 1
+          fi

package/.github/workflows/probely-scan.yml

@@ -45,7 +45,7 @@ jobs:
           echo "📄 Raw API response:"
           cat "$response_file"
 
-          if [ "$http_code" -ne 201 ]; then
+          if [ "$http_code" -ne 201 ] && [ "$http_code" -ne 200 ]; then
             echo "::error ::Unexpected HTTP response from Probely API: $http_code"
             exit 1
           fi
@@ -60,7 +60,8 @@ jobs:
           scan_id=$(jq -r '.id // empty' "$response_file")
 
           if [ -z "$scan_id" ]; then
-            echo "::error ::Scan ID not found in response. Check API key, target ID, or base URL."
+            echo "::error ::Scan ID not found in response. Response content:"
+            cat "$response_file"
             exit 1
           fi
 
@@ -94,7 +95,7 @@ jobs:
             exit 1
           fi
 
-      - name: Download Probely HTML Report
+      - name: Download Probely CSV Report
         run: |
           echo "📥 Downloading report for scan $scan_id ..."
           curl -s "$API_BASE/targets/$TARGET_ID/scans/$scan_id/endpoints/" \

package/.github/workflows/templates/check-codeql.template.yml

@@ -4,7 +4,7 @@
 # has completed successfully.
 #
 # Version: v1.0.0
-# Maintainer: Scott Lopez <support@neteng.pro>
+# Maintainer: Scott Lopez <support@netwk.pro>
 # Usage: Copy to `.github/workflows/check-codeql.yml` in your repo or reference directly if shared centrally.
 #
 # Copyright © 2025 Network Pro Strategies (Network Pro™)

package/.github/workflows/templates/publish.template.yml

@@ -4,7 +4,7 @@
 # GPR.
 #
 # Version: v1.1.0
-# Maintainer: Scott Lopez <support@neteng.pro>
+# Maintainer: Scott Lopez <support@netwk.pro>
 # Usage: Copy to `.github/workflows/publish.yml` in your repo or reference
 # directly if shared centrally.
 #

package/.stylelintignore

@@ -4,6 +4,9 @@
 # SPDX-License-Identifier: CC-BY-4.0 OR GPL-3.0-or-later
 # This file is part of Network Pro.
 
+# Netlify
+.netlify
+
 # Report files and test results
 playwright-report
 test-results

package/CHANGELOG.md

@@ -22,6 +22,63 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 ---
 
+## [1.25.9] - 2025-11-11
+
+### Changed
+
+- Updated the support email address to `support@netwk.pro` in the following files:
+  - `README.md`
+  - `check-codeql.template.yml`
+  - `publish.template.yml`
+  - `contact.vcf`
+- Modified `eslint.config.mjs` to include `.cjs` files when linting JavaScript.
+- Bumped project version to `v1.25.9`.
+
+## Fixed
+
+- Modified `.github/workflows/probely-scan.yml` to accept either a 200 or 201 response.
+  - Workflow was correctly triggering scan, but then failed due to receiving a 200 response rather than the 201 that was expected.
+
+---
+
+## [1.25.8] - 2025-11-11
+
+### Added
+
+- 🔐 **Branch protection rules** on `master`:
+  - Enforced pull requests for all changes
+  - Blocked force pushes
+  - Linear history requirement
+- 🚫 **CI workflow to prevent merges from `audit-netlify` to `master`**:
+  - PRs originating from `audit-netlify` targeting `master` are automatically rejected
+  - Triggered on `pull_request` events
+  - Uses `github.event.pull_request.head.ref` for precise branch detection
+- 🚀 **Netlify CI deployment** for audit-only branch:
+  - Workflow `.github/workflows/deploy-audit-netlify.yml` added
+  - Deploys `audit-netlify` to a separate Netlify site
+  - Uses environmental variables to trigger `vite build --mode audit`
+- 🌐 **`hooks.server.js` CSP hardening** for audit deployments:
+  - Probely scanner detection based on UA/IP added via `isProbelyScanner()`
+  - Audit-specific CSP disables analytics and CSP reporting endpoints
+  - Logs detailed CSP info when in `isAudit` or `isDebug` modes
+- 🛡️ Middleware improvements:
+  - User-agent/IP fingerprinting for Probely DAST
+  - Added logging for audit-mode scanner matches
+- 🧪 Support for per-environment `.env` files (e.g. `.env.audit`)
+- 🔄 Git helper scripts:
+  - Added bash script to sync `audit-netlify` with latest `master`
+  - Supports merge conflict resolution via VS Code diff viewer
+
+### Changed
+
+- Updated `.stylelintignore` to exclude `.netlify` directory
+- Updated `lint:md` script to exclude the `build/` and `.netlify/` directories
+- Refined `svelte.config.js` to support alternate build targets (Vercel → Netlify via adapter switch)
+- Audit builds now use isolated `.env` config and a separate Netlify site token
+- Bumped project version to `v1.25.8`
+
+---
+
 ## [1.25.7] - 2025-11-11
 
 ### Added
@@ -1770,7 +1827,9 @@ This enables analytics filtering and CSP hardening for the audit environment.
 
 <!-- Link references -->
 
-[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.7...HEAD
+[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.9...HEAD
+[1.25.9]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.9
+[1.25.8]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.8
 [1.25.7]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.7
 [1.25.6]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.6
 [1.25.5]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.5

package/LICENSE.md

@@ -226,7 +226,7 @@ This legal page may be updated to comply with legal or operational changes. The
 ## 14. Contact
 
 The Company may be contacted via our [Contact Form](https://netwk.pro/contact) or by email at:  
-📧 `support (at) neteng.pro`
+📧 `support (at) netwk.pro`
 
 <sub>[Back to top](#top)</sub>
 

package/README.md

@@ -114,7 +114,7 @@ static/
 ├── pgp/
 │   ├── contact@s.neteng.pro.asc       # Public key for secure email
 │   ├── security@s.neteng.pro.asc      # Public key for security contact
-│   ├── support@neteng.pro.asc         # Public key for general support
+│   ├── support@netwk.pro.asc          # Public key for general support
 └── ...
 ```
 
@@ -533,7 +533,7 @@ Source code, branding, and visual assets are subject to reuse and distribution t
 
 ## 🙋‍♂️Questions?
 
-Reach out via our [Contact Form](https://netwk.pro/contact), open an issue on this repo, or email us directly at `support (at) neteng.pro`.
+Reach out via our [Contact Form](https://netwk.pro/contact), open an issue on this repo, or email us directly at `support (at) netwk.pro`.
 
 </section>
 

package/eslint.config.mjs

@@ -52,7 +52,7 @@ export default [
 
   // General JavaScript/Node.js configuration
   {
-    files: ['**/*.mjs', '**/*.js'],
+    files: ['**/*.mjs', '**/*.cjs', '**/*.js'],
     languageOptions: {
       globals: GLOBALS,
       ecmaVersion: 'latest',

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@networkpro/web",
   "private": false,
-  "version": "1.25.7",
+  "version": "1.25.9",
   "description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
   "keywords": [
     "advisory",
@@ -70,7 +70,7 @@
     "lint:fix": "eslint . --ext .js,.cjs,.mjs,.svelte --fix",
     "lint:jsdoc": "eslint . --ext .js,.cjs,.mjs,.svelte --max-warnings=0",
     "lint:css": "stylelint \"**/*.{css,svelte}\" --ignore-path .stylelintignore",
-    "lint:md": "npx markdownlint-cli2 \"**/*.{md,markdown}\" \"#node_modules/**\" \"#playwright-report/**\" \"#test-results/**\"",
+    "lint:md": "npx markdownlint-cli2 \"**/*.{md,markdown}\" \"#build/**\" \"#.netlify/**\" \"#node_modules/**\" \"#playwright-report/**\" \"#test-results/**\"",
     "format": "prettier --check .",
     "format:fix": "prettier --write .",
     "lint:all": "npm-run-all --parallel --print-label lint lint:md lint:css --sequential format",

package/static/bin/contact.vcf

@@ -3,7 +3,7 @@ VERSION:3.0
 FN:Scott Lopez
 N:Lopez;Scott
 TEL;TYPE=WORK,PREF=1:(623) 252-4350
-EMAIL;TYPE=WORK:support@neteng.pro
+EMAIL;TYPE=WORK:support@netwk.pro
 EMAIL;TYPE=Secure:business@s.neteng.pro
 ADR;TYPE=WORK:;;Peoria\, AZ 85382\nUS
 ORG:Network Pro Strategies