Skip to content

release: promote acc to main — v2026.11.1 - #248

Merged
sgort merged 17 commits into
mainfrom
acc
Nov 12, 2026
Merged

sgort merged 17 commits into
mainfrom
acc

Conversation

@sgort

@sgort sgort commented Nov 12, 2026

Copy link
Copy Markdown
Owner

Promotes acc to production: v2026.11.0 → v2026.11.1 (#246). 17 commits, 10 non-merge, touching 22 files. The sign-in work (linked-data-explorer#163) already reached main through #242 without a release cut; v2026.11.1 records it, and this promotion brings what came after.

The 10 non-merge commits

ACC state at the release merge (ab5ff1c, #246)

  • CI on chore: bump release to v2026.11.1 #246: audit, scan, Build and deploy ACC, lockfile-review and release-sbom green.
  • Tests: npm test green (the human's run), format, lint clean.
  • GitLab mirror: acc and main fast-forwarded as part of the release.
  • npm run check-previews: OK, every preview belongs to an open pull request.

Deploy

The push to main runs azure-static-web-apps-white-sky-02b674303.yml (production). sbom.yml runs --verify-release; docs/sbom/ttl-editor-2026.11.1.cdx.json is committed (8 components, npm 11.19.1) and #246's strict check passed.

PROD steps

None in this repository. The production build reads .env.production: VITE_BACKEND_URL=https://backend.linkeddata.open-regels.nl, VITE_KEYCLOAK_URL=https://keycloak.open-regels.nl. Publishing through the backend needs the LDE backend's POST /v1/triplydb/publish on PROD, which went live with linked-data-explorer v2026.11.2 (#339) on 12 November, with TRIPLYDB_ACCOUNT and TRIPLYDB_API_TOKEN set there.

Behaviour changes that reach PROD

  • Publish goes through the LDE backend, as the signed-in lde-author, with the server's TriplyDB credential. The Publish dialog asks only for the dataset; Base URL, Account and API Token are gone, and an old token in localStorage is removed on first load.
  • Dependency updates: react and react-dom 19.3.1, lucide-react 1.64.0.

Not in this release

#247 (zizmor-action v0.8.0) opened after the release cut and stays open: its audit fails until the pin register in SECURITY-PIPELINE.md records the new digest, as for linked-data-explorer #307.

renovate Bot and others added 17 commits November 11, 2026 14:35
…alog keeps only the dataset (#234)

Publishing is one call to the LDE backend's POST /v1/triplydb/publish,
made with the signed-in author's token. The backend holds the TriplyDB
instance, account and token, uploads the TTL and the logos, syncs the
service and logs who published.

- The Publish dialog asks only for the dataset name; Base URL, Account,
  API Token and the token reminder are gone.
- Test connection checks the dataset through the backend.
- The stored config is only { dataset }: an old token in localStorage is
  removed the first time the editor loads.
- The required-services picker gets base URL and account from the
  backend's publish-target; unconfigured when publishing is not.
@github-actions

Copy link
Copy Markdown

Lockfile review

✓ No blocking findings.

0 added (0 runtime) · 0 removed (0 runtime) · 65 updated (3 runtime) · 0 downgraded.

Updated (65)
  • lucide-react 1.57.0 → 1.64.0 — runtime
  • react 19.3.0 → 19.3.1 — runtime
  • react-dom 19.3.0 → 19.3.1 — runtime
  • @asamuzakjp/css-color 7.1.5 → 7.1.9 — dev
  • @asamuzakjp/dom-selector 10.0.3 → 10.0.5 — dev
  • @babel/helper-string-parser 7.29.7, 8.0.6 → 7.29.11, 8.0.8 — dev
  • @babel/helpers 7.29.7 → 7.29.10 — dev
  • @babel/parser 7.29.8, 8.0.7 → 7.29.11, 8.0.10 — dev
  • @babel/runtime 7.29.7 → 7.29.10 — dev
  • @babel/traverse 7.29.8 → 7.29.10 — dev
  • @babel/types 7.29.8, 8.0.6 → 7.29.11, 8.0.10 — dev
  • @bramus/specificity 2.4.2 → 2.4.3 — dev
  • @oxc-project/types 0.153.0 → 0.155.0 — dev
  • @playwright/test 1.63.0 → 1.64.1 — dev
  • @rolldown/binding-android-arm-eabi 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-android-arm64 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-darwin-arm64 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-darwin-x64 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-freebsd-x64 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-linux-arm-gnueabihf 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-linux-arm64-gnu 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-linux-arm64-musl 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-linux-ppc64-gnu 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-linux-s390x-gnu 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-linux-x64-gnu 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-linux-x64-musl 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-openharmony-arm64 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-win32-arm64-msvc 1.2.13 → 1.2.15 — dev
  • @rolldown/binding-win32-x64-msvc 1.2.13 → 1.2.15 — dev
  • @typescript-eslint/project-service 8.70.0 → 8.72.1 — dev
  • @typescript-eslint/scope-manager 8.70.0 → 8.72.1 — dev
  • @typescript-eslint/tsconfig-utils 8.70.0 → 8.72.1 — dev
  • @typescript-eslint/types 8.70.0 → 8.72.1 — dev
  • @typescript-eslint/typescript-estree 8.70.0 → 8.72.1 — dev
  • @typescript-eslint/utils 8.70.0 → 8.72.1 — dev
  • @typescript-eslint/visitor-keys 8.70.0 → 8.72.1 — dev
  • @vitest/coverage-v8 5.0.4 → 5.0.5 — dev
  • @vitest/eslint-plugin 1.6.27 → 1.6.28 — dev
  • @vitest/mocker 5.0.4 → 5.0.5 — dev
  • @vitest/spy 5.0.4 → 5.0.5 — dev
  • acorn 8.18.0 → 8.19.0 — dev
  • autoprefixer 10.6.1 → 10.6.2 — dev
  • axe-core 4.13.0 → 4.14.0 — dev
  • baseline-browser-mapping 2.11.24 → 2.11.34 — dev
  • browserslist 4.29.0 → 4.29.5 — dev
  • caniuse-lite 1.0.30001810 → 1.0.30001819 — dev
  • electron-to-chromium 1.5.430 → 1.5.467 — dev
  • globals 14.0.0, 17.12.0 → 14.0.0, 17.13.0 — dev
  • is-core-module 2.16.2 → 2.17.0 — dev
  • lilconfig 3.1.3 → 3.1.4 — dev
  • lint-staged 17.5.1 → 17.6.0 — dev
  • magic-string 1.4.3 → 1.4.5 — dev
  • node-releases 2.0.55 → 2.0.60 — dev
  • playwright 1.63.0 → 1.64.1 — dev
  • playwright-core 1.63.0 → 1.64.1 — dev
  • postcss 8.5.31 → 8.5.32 — dev
  • resolve 1.22.12, 2.0.0-next.7 → 1.22.13, 2.0.0-next.7 — dev
  • rolldown 1.2.13 → 1.2.15 — dev
  • tldts 7.4.13 → 7.4.19 — dev
  • tldts-core 7.4.13 → 7.4.19 — dev
  • typed-array-byte-offset 1.0.4 → 1.0.5 — dev
  • update-browserslist-db 1.3.3 → 1.3.4 — dev
  • vite 8.3.4 → 8.3.5 — dev
  • vitest 5.0.4 → 5.0.5 — dev
  • which-typed-array 1.1.22 → 1.1.24 — dev

@github-actions

Copy link
Copy Markdown

Azure Static Web Apps: Your stage site is ready! Visit it here: https://white-sky-02b674303-248.westeurope.1.azurestaticapps.net

@sgort
sgort merged commit 6910bb8 into main Nov 12, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant