@networkpro/web 1.25.8 → 1.25.10

package/.env.template

@@ -5,7 +5,7 @@
 # Rename to `.env` (or `.env.local`) and customize as needed
 
 # Custom environment mode for scripts and tooling
-# One of: dev, test, ci, preview, production
+# One of: dev, test, ci, audit, production
 ENV_MODE=dev
 
 # Optional: API keys or tokens for local dev (never commit real values)

package/.github/workflows/auto-assign.yml

@@ -25,6 +25,8 @@ on:
 jobs:
   auto-assign:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: 'Auto-assign issue or PR'

package/.github/workflows/backup-branch.yml

@@ -22,6 +22,8 @@ jobs:
     name: Sync backup/nightly-snapshot to master
     runs-on: ubuntu-24.04
     if: github.ref == 'refs/heads/master' && github.event_name != 'pull_request'
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: Checkout master branch

package/.github/workflows/build-and-publish.yml

@@ -42,11 +42,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -132,11 +127,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -193,11 +183,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable

package/.github/workflows/check-security-txt-expiry.yml

@@ -12,6 +12,8 @@ jobs:
   check-expiry:
     runs-on: ubuntu-latest
     name: Validate .well-known/security.txt expiration
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: Checkout repo

package/.github/workflows/dependency-review.yml

@@ -13,6 +13,8 @@ permissions:
 jobs:
   dependency-review:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: 'Checkout Repository'

package/.github/workflows/meta-check.yml

@@ -18,6 +18,9 @@ permissions:
 jobs:
   meta:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
+
     steps:
       - name: Checkout repo
         uses: actions/checkout@v5

package/.github/workflows/prevent-audit-merge.yml

@@ -16,6 +16,9 @@ permissions:
 jobs:
   check-branch:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
+
     steps:
       - name: Fail if source is audit-netlify
         run: |

package/.github/workflows/probely-scan.yml

@@ -45,7 +45,7 @@ jobs:
           echo "📄 Raw API response:"
           cat "$response_file"
 
-          if [ "$http_code" -ne 201 ]; then
+          if [ "$http_code" -ne 201 ] && [ "$http_code" -ne 200 ]; then
             echo "::error ::Unexpected HTTP response from Probely API: $http_code"
             exit 1
           fi
@@ -60,7 +60,8 @@ jobs:
           scan_id=$(jq -r '.id // empty' "$response_file")
 
           if [ -z "$scan_id" ]; then
-            echo "::error ::Scan ID not found in response. Check API key, target ID, or base URL."
+            echo "::error ::Scan ID not found in response. Response content:"
+            cat "$response_file"
             exit 1
           fi
 
@@ -94,7 +95,7 @@ jobs:
             exit 1
           fi
 
-      - name: Download Probely HTML Report
+      - name: Download Probely CSV Report
         run: |
           echo "📥 Downloading report for scan $scan_id ..."
           curl -s "$API_BASE/targets/$TARGET_ID/scans/$scan_id/endpoints/" \

package/.github/workflows/secret-scan.yml

@@ -21,6 +21,8 @@ jobs:
       issues: write
     env:
       CODEQL_ACTION_ANALYSIS_KEY: gitleaks
+      ENV_MODE: ci
+
     steps:
       # ---------------------------------------------------------------------
       # Checkout the full repo history (needed for Gitleaks to scan all commits)

package/.github/workflows/templates/check-codeql.template.yml

@@ -4,7 +4,7 @@
 # has completed successfully.
 #
 # Version: v1.0.0
-# Maintainer: Scott Lopez <support@neteng.pro>
+# Maintainer: Scott Lopez <support@netwk.pro>
 # Usage: Copy to `.github/workflows/check-codeql.yml` in your repo or reference directly if shared centrally.
 #
 # Copyright © 2025 Network Pro Strategies (Network Pro™)
@@ -24,6 +24,8 @@ jobs:
   check:
     name: Check CodeQL Status
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: Check CodeQL Workflow

package/.github/workflows/templates/publish.template.yml

@@ -4,7 +4,7 @@
 # GPR.
 #
 # Version: v1.1.0
-# Maintainer: Scott Lopez <support@neteng.pro>
+# Maintainer: Scott Lopez <support@netwk.pro>
 # Usage: Copy to `.github/workflows/publish.yml` in your repo or reference
 # directly if shared centrally.
 #
@@ -50,11 +50,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -136,11 +131,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -197,11 +187,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable

package/CHANGELOG.md

@@ -22,6 +22,53 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 ---
 
+## [1.25.10] - 2025-11-12
+
+### Changed
+
+- Updated GitHub workflows to specify `ENV: ci` where appropriate:
+  - `templates/check-codeql.template.yml`
+  - `templates/publish.template.yml`
+  - `auto-assign.yml`
+  - `branch-backup.yml`
+  - `check-security-txt-expiry.yml`
+  - `dependency-review.yml`
+  - `meta-check.yml`
+  - `prevent-audit-merges.yml`
+  - `secret-scan.yml`
+- Added `@sveltejs/adapter-netlify` devDependency for smoother toggling between production and audit modes.
+  - Production uses `@sveltejs/adapter-vercel` only. `@sveltejs/adapter-netlify` exists solely to support the audit environment.
+- Bumped project version to `v1.25.10`.
+- Updated dependencies:
+  - `@testing-library/svelte` `^5.2.8` → `^5.2.9`
+  - `eslint-plugin-jsdoc` `^61.1.12` → `^61.2.0`
+  - `posthog-js` `^1.290.0` → `^1.292.0`
+
+## Removed
+
+- Removed unneeded comments in `build-and-publish.yml` workflow.
+
+---
+
+## [1.25.9] - 2025-11-11
+
+### Changed
+
+- Updated the support email address to `support@netwk.pro` in the following files:
+  - `README.md`
+  - `check-codeql.template.yml`
+  - `publish.template.yml`
+  - `contact.vcf`
+- Modified `eslint.config.mjs` to include `.cjs` files when linting JavaScript.
+- Bumped project version to `v1.25.9`.
+
+## Fixed
+
+- Modified `.github/workflows/probely-scan.yml` to accept either a 200 or 201 response.
+  - Workflow was correctly triggering scan, but then failed due to receiving a 200 response rather than the 201 that was expected.
+
+---
+
 ## [1.25.8] - 2025-11-11
 
 ### Added
@@ -56,6 +103,7 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 - Updated `lint:md` script to exclude the `build/` and `.netlify/` directories
 - Refined `svelte.config.js` to support alternate build targets (Vercel → Netlify via adapter switch)
 - Audit builds now use isolated `.env` config and a separate Netlify site token
+- Bumped project version to `v1.25.8`
 
 ---
 
@@ -1807,7 +1855,9 @@ This enables analytics filtering and CSP hardening for the audit environment.
 
 <!-- Link references -->
 
-[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.8...HEAD
+[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.10...HEAD
+[1.25.10]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.10
+[1.25.9]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.9
 [1.25.8]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.8
 [1.25.7]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.7
 [1.25.6]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.6

package/LICENSE.md

@@ -226,7 +226,7 @@ This legal page may be updated to comply with legal or operational changes. The
 ## 14. Contact
 
 The Company may be contacted via our [Contact Form](https://netwk.pro/contact) or by email at:  
-📧 `support (at) neteng.pro`
+📧 `support (at) netwk.pro`
 
 <sub>[Back to top](#top)</sub>
 

package/README.md

@@ -114,7 +114,7 @@ static/
 ├── pgp/
 │   ├── contact@s.neteng.pro.asc       # Public key for secure email
 │   ├── security@s.neteng.pro.asc      # Public key for security contact
-│   ├── support@neteng.pro.asc         # Public key for general support
+│   ├── support@netwk.pro.asc          # Public key for general support
 └── ...
 ```
 
@@ -533,7 +533,7 @@ Source code, branding, and visual assets are subject to reuse and distribution t
 
 ## 🙋‍♂️Questions?
 
-Reach out via our [Contact Form](https://netwk.pro/contact), open an issue on this repo, or email us directly at `support (at) neteng.pro`.
+Reach out via our [Contact Form](https://netwk.pro/contact), open an issue on this repo, or email us directly at `support (at) netwk.pro`.
 
 </section>
 

package/eslint.config.mjs

@@ -52,7 +52,7 @@ export default [
 
   // General JavaScript/Node.js configuration
   {
-    files: ['**/*.mjs', '**/*.js'],
+    files: ['**/*.mjs', '**/*.cjs', '**/*.js'],
     languageOptions: {
       globals: GLOBALS,
       ecmaVersion: 'latest',

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@networkpro/web",
   "private": false,
-  "version": "1.25.8",
+  "version": "1.25.10",
   "description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
   "keywords": [
     "advisory",
@@ -85,7 +85,7 @@
   },
   "dependencies": {
     "dompurify": "^3.3.0",
-    "posthog-js": "^1.290.0",
+    "posthog-js": "^1.292.0",
     "semver": "^7.7.3",
     "svelte": "5.43.6"
   },
@@ -94,17 +94,18 @@
     "@eslint/js": "^9.39.1",
     "@lhci/cli": "^0.15.1",
     "@playwright/test": "^1.56.1",
+    "@sveltejs/adapter-netlify": "^5.2.4",
     "@sveltejs/adapter-vercel": "^6.1.1",
     "@sveltejs/kit": "2.48.4",
     "@sveltejs/vite-plugin-svelte": "^6.2.1",
     "@testing-library/jest-dom": "^6.9.1",
-    "@testing-library/svelte": "^5.2.8",
+    "@testing-library/svelte": "^5.2.9",
     "@vitest/coverage-v8": "3.2.4",
     "autoprefixer": "^10.4.22",
     "browserslist": "^4.28.0",
     "eslint": "^9.39.1",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-jsdoc": "^61.1.12",
+    "eslint-plugin-jsdoc": "^61.2.0",
     "eslint-plugin-svelte": "^3.13.0",
     "globals": "^16.5.0",
     "jsdom": "26.1.0",

package/src/lib/security/probely.js

@@ -15,7 +15,7 @@ This file is part of Network Pro.
  * @updated 2025-11-11
  */
 
-/** @typedef {{ ua: string, ip: string }} ScannerInput */
+/** @typedef {{ ua?: string, ip?: string }} ScannerInput */
 
 /**
  * Check if a request is likely from Probely.
@@ -23,7 +23,13 @@ This file is part of Network Pro.
  * @returns {boolean} - True if the request matches Probely’s fingerprint.
  */
 export function isProbelyScanner({ ua, ip }) {
-  const PROBELY_UA_FRAGMENT = 'probelyspdr/';
+  const PROBELY_UA_FRAGMENTS = [
+    'probelyspdr/',
+    'probelyfp/',
+    'probelymrkt/',
+    'probelysc/',
+    'python-httpx/',
+  ];
   const PROBELY_IPS = [
     '18.235.241.170',
     '52.65.214.19',
@@ -41,7 +47,10 @@ export function isProbelyScanner({ ua, ip }) {
   const normalizedIP = ip?.trim() ?? '';
 
   return (
-    normalizedUA.includes(PROBELY_UA_FRAGMENT) ||
-    PROBELY_IPS.includes(normalizedIP)
+    PROBELY_UA_FRAGMENTS.some((fragment) =>
+      normalizedUA.includes(fragment.toLowerCase()),
+    ) || PROBELY_IPS.includes(normalizedIP)
   );
 }
+
+// cspell:ignore probelyfp probelymrkt probelysc httpx

package/static/bin/contact.vcf

@@ -3,7 +3,7 @@ VERSION:3.0
 FN:Scott Lopez
 N:Lopez;Scott
 TEL;TYPE=WORK,PREF=1:(623) 252-4350
-EMAIL;TYPE=WORK:support@neteng.pro
+EMAIL;TYPE=WORK:support@netwk.pro
 EMAIL;TYPE=Secure:business@s.neteng.pro
 ADR;TYPE=WORK:;;Peoria\, AZ 85382\nUS
 ORG:Network Pro Strategies