ultra11y 2.31.1 → 2.31.2

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "2.31.1",
+      "version": "2.31.2",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "2.31.1",
+  "version": "2.31.2",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "2.31.1",
+  "version": "2.31.2",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "2.31.1";
+const ULTRA11Y_PLUGIN_VERSION = "2.31.2";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "2.31.1",
+  "version": "2.31.2",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join45, relative as relative5, sep as sep7, dirname as dirname1
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "2.31.1";
+var VERSION = "2.31.2";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 2.31.1
+  version: 2.31.2
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join45, relative as relative5, sep as sep7, dirname as dirname1
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "2.31.1";
+var VERSION = "2.31.2";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD remediation backlog or GitHub issues; author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 2.31.1
+  version: 2.31.2
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/references/ci.md

@@ -196,3 +196,37 @@ Two surfaces come out of it:
   standard with its status on that page, and each non-conformity as the ordinary auditor block.
 
 A run with no page in scope is not a failure: the report step says so and the job carries on.
+
+## The action is executed in ITS OWN CI, not just parsed
+
+`tests/action.test.ts` reads `action.yml` and gates its shape. That cannot prove the thing
+works: a composite action is bash — arrays, `set -e`, quoting — and the whole file could stay
+green while the action was broken for every consumer.
+
+So `ci.yml` has an `action` job that `uses: ./` for real, twice: report-only over a
+non-conforming fixture (asserting the declared outputs, the written report, and that the
+per-page step DEGRADES rather than failing when nothing was scanned), then the page-by-page
+path — a served two-page site, crawled, scanned, snapshotted, folded in and rendered as
+per-page dossiers, asserting that each crawled page is snapshot-based and that the finding on
+one page did not leak onto the clean one. Both run with `sarif: false`, so the job needs no
+`security-events: write` and works on a fork's pull request.
+
+Two traps are worth naming, because running it is what found them.
+
+`[ cond ] && cmd` returns 1 when the condition is false, and `-e` turns that into a dead job.
+A test now forbids the form in `action.yml` **and** in every CI workflow.
+
+And **artifact names are unique per workflow RUN, not per step**. Using the action twice in
+one job — the code diff, then the served pages — died on a `409 Conflict`, with the report
+written and never uploaded. Pass `artifact-name` on each invocation:
+
+```yaml
+- uses: maxgfr/ultra11y@v2
+  with: { since: auto, artifact-name: a11y-code }
+- uses: maxgfr/ultra11y@v2
+  with: { crawl: http://localhost:3000, artifact-name: a11y-pages }
+```
+
+Left unset it keeps the historical `ultra11y-<standard>`, so a single-invocation workflow is
+unaffected.
+

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join45, relative as relative5, sep as sep7, dirname as dirname1
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "2.31.1";
+var VERSION = "2.31.2";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "2.31.1";
+export const VERSION = "2.31.2";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,