@networkpro/web 1.25.9 → 1.25.10

package/.env.template

@@ -5,7 +5,7 @@
 # Rename to `.env` (or `.env.local`) and customize as needed
 
 # Custom environment mode for scripts and tooling
-# One of: dev, test, ci, preview, production
+# One of: dev, test, ci, audit, production
 ENV_MODE=dev
 
 # Optional: API keys or tokens for local dev (never commit real values)

package/.github/workflows/auto-assign.yml

@@ -25,6 +25,8 @@ on:
 jobs:
   auto-assign:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: 'Auto-assign issue or PR'

package/.github/workflows/backup-branch.yml

@@ -22,6 +22,8 @@ jobs:
     name: Sync backup/nightly-snapshot to master
     runs-on: ubuntu-24.04
     if: github.ref == 'refs/heads/master' && github.event_name != 'pull_request'
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: Checkout master branch

package/.github/workflows/build-and-publish.yml

@@ -42,11 +42,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -132,11 +127,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -193,11 +183,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable

package/.github/workflows/check-security-txt-expiry.yml

@@ -12,6 +12,8 @@ jobs:
   check-expiry:
     runs-on: ubuntu-latest
     name: Validate .well-known/security.txt expiration
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: Checkout repo

package/.github/workflows/dependency-review.yml

@@ -13,6 +13,8 @@ permissions:
 jobs:
   dependency-review:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: 'Checkout Repository'

package/.github/workflows/meta-check.yml

@@ -18,6 +18,9 @@ permissions:
 jobs:
   meta:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
+
     steps:
       - name: Checkout repo
         uses: actions/checkout@v5

package/.github/workflows/prevent-audit-merge.yml

@@ -16,6 +16,9 @@ permissions:
 jobs:
   check-branch:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
+
     steps:
       - name: Fail if source is audit-netlify
         run: |

package/.github/workflows/secret-scan.yml

@@ -21,6 +21,8 @@ jobs:
       issues: write
     env:
       CODEQL_ACTION_ANALYSIS_KEY: gitleaks
+      ENV_MODE: ci
+
     steps:
       # ---------------------------------------------------------------------
       # Checkout the full repo history (needed for Gitleaks to scan all commits)

package/.github/workflows/templates/check-codeql.template.yml

@@ -24,6 +24,8 @@ jobs:
   check:
     name: Check CodeQL Status
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: Check CodeQL Workflow

package/.github/workflows/templates/publish.template.yml

@@ -50,11 +50,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -136,11 +131,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -197,11 +187,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable

package/CHANGELOG.md

@@ -22,6 +22,34 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 ---
 
+## [1.25.10] - 2025-11-12
+
+### Changed
+
+- Updated GitHub workflows to specify `ENV: ci` where appropriate:
+  - `templates/check-codeql.template.yml`
+  - `templates/publish.template.yml`
+  - `auto-assign.yml`
+  - `branch-backup.yml`
+  - `check-security-txt-expiry.yml`
+  - `dependency-review.yml`
+  - `meta-check.yml`
+  - `prevent-audit-merges.yml`
+  - `secret-scan.yml`
+- Added `@sveltejs/adapter-netlify` devDependency for smoother toggling between production and audit modes.
+  - Production uses `@sveltejs/adapter-vercel` only. `@sveltejs/adapter-netlify` exists solely to support the audit environment.
+- Bumped project version to `v1.25.10`.
+- Updated dependencies:
+  - `@testing-library/svelte` `^5.2.8` → `^5.2.9`
+  - `eslint-plugin-jsdoc` `^61.1.12` → `^61.2.0`
+  - `posthog-js` `^1.290.0` → `^1.292.0`
+
+## Removed
+
+- Removed unneeded comments in `build-and-publish.yml` workflow.
+
+---
+
 ## [1.25.9] - 2025-11-11
 
 ### Changed
@@ -1827,7 +1855,8 @@ This enables analytics filtering and CSP hardening for the audit environment.
 
 <!-- Link references -->
 
-[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.9...HEAD
+[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.10...HEAD
+[1.25.10]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.10
 [1.25.9]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.9
 [1.25.8]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.8
 [1.25.7]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.7

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@networkpro/web",
   "private": false,
-  "version": "1.25.9",
+  "version": "1.25.10",
   "description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
   "keywords": [
     "advisory",
@@ -85,7 +85,7 @@
   },
   "dependencies": {
     "dompurify": "^3.3.0",
-    "posthog-js": "^1.290.0",
+    "posthog-js": "^1.292.0",
     "semver": "^7.7.3",
     "svelte": "5.43.6"
   },
@@ -94,17 +94,18 @@
     "@eslint/js": "^9.39.1",
     "@lhci/cli": "^0.15.1",
     "@playwright/test": "^1.56.1",
+    "@sveltejs/adapter-netlify": "^5.2.4",
     "@sveltejs/adapter-vercel": "^6.1.1",
     "@sveltejs/kit": "2.48.4",
     "@sveltejs/vite-plugin-svelte": "^6.2.1",
     "@testing-library/jest-dom": "^6.9.1",
-    "@testing-library/svelte": "^5.2.8",
+    "@testing-library/svelte": "^5.2.9",
     "@vitest/coverage-v8": "3.2.4",
     "autoprefixer": "^10.4.22",
     "browserslist": "^4.28.0",
     "eslint": "^9.39.1",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-jsdoc": "^61.1.12",
+    "eslint-plugin-jsdoc": "^61.2.0",
     "eslint-plugin-svelte": "^3.13.0",
     "globals": "^16.5.0",
     "jsdom": "26.1.0",

package/src/lib/security/probely.js

@@ -15,7 +15,7 @@ This file is part of Network Pro.
  * @updated 2025-11-11
  */
 
-/** @typedef {{ ua: string, ip: string }} ScannerInput */
+/** @typedef {{ ua?: string, ip?: string }} ScannerInput */
 
 /**
  * Check if a request is likely from Probely.
@@ -23,7 +23,13 @@ This file is part of Network Pro.
  * @returns {boolean} - True if the request matches Probely’s fingerprint.
  */
 export function isProbelyScanner({ ua, ip }) {
-  const PROBELY_UA_FRAGMENT = 'probelyspdr/';
+  const PROBELY_UA_FRAGMENTS = [
+    'probelyspdr/',
+    'probelyfp/',
+    'probelymrkt/',
+    'probelysc/',
+    'python-httpx/',
+  ];
   const PROBELY_IPS = [
     '18.235.241.170',
     '52.65.214.19',
@@ -41,7 +47,10 @@ export function isProbelyScanner({ ua, ip }) {
   const normalizedIP = ip?.trim() ?? '';
 
   return (
-    normalizedUA.includes(PROBELY_UA_FRAGMENT) ||
-    PROBELY_IPS.includes(normalizedIP)
+    PROBELY_UA_FRAGMENTS.some((fragment) =>
+      normalizedUA.includes(fragment.toLowerCase()),
+    ) || PROBELY_IPS.includes(normalizedIP)
   );
 }
+
+// cspell:ignore probelyfp probelymrkt probelysc httpx