@taraxvoid/voidflow 0.14.0-next.1 → 0.14.0

package/README.md

@@ -179,38 +179,6 @@ jobs:
 The job reports as `validate / Validate`, the check the `tool()` entry in
 [`rulesets/index.ts`](#branch-rulesets-as-code) requires.
 
-### Code scanning (SARIF)
-
-`site-ci.yml` and `tool-ci.yml` write gitleaks and zizmor results as SARIF
-and keep them as the `voidflow-sarif` artifact (7 days). gitleaks still fails
-the job on a finding; the zizmor SARIF run scans every workflow and never
-fails the job (the zizmor gate in `tool-ci.yml` is unchanged). Both steps run
-after a failure too, so the findings that failed a run are the ones uploaded.
-
-`upload-sarif.yml` sends them to code scanning, which is what voidlight
-counts. It is a separate workflow because it needs `security-events: write`,
-and a reusable workflow can't ask for more than its caller grants: adding it to
-the validate workflows would break every caller that doesn't. Add a second job:
-
-```yaml
-jobs:
-  validate:
-    uses: taraxvoid/voidflow/.github/workflows/site-ci.yml@<sha> # <version>
-  sarif:
-    needs: validate
-    if: ${{ !cancelled() && needs.validate.result != 'skipped' }}
-    permissions:
-      contents: read
-      actions: read
-      security-events: write
-    uses: taraxvoid/voidflow/.github/workflows/upload-sarif.yml@<sha> # <version>
-```
-
-Each tool uploads under its own category (`gitleaks`, `zizmor`), so a later
-run closes only that tool's fixed alerts. gitleaks SARIF is redacted.
-Code scanning is free on public repositories; private ones need GitHub Code
-Security, without which the upload step fails.
-
 ### Unlighthouse (performance / SEO budgets)
 
 `site-ci.yml` runs `bun run test:e2e:lighthouse` on PRs into `live`. Sites

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@taraxvoid/voidflow",
-    "version": "0.14.0-next.1",
+    "version": "0.14.0",
     "description": "Enter a flow state of security, stability, and developer ergonomics - batteries-included Biome, vitest, Astro, local hooks, CI and deployments on Netlify and Cloudflare support with GitHub rulesets, branch environments, releases and security checks.",
     "license": "MIT",
     "keywords": [
@@ -61,8 +61,8 @@
         }
     },
     "devDependencies": {
-        "@biomejs/biome": "2.5.14",
-        "@playwright/test": "1.64.0",
+        "@biomejs/biome": "2.5.15",
+        "@playwright/test": "1.64.1",
         "@socketsecurity/bun-security-scanner": "1.1.3"
     },
     "dependencies": {