From 342a1a6544ca0f5536abf39fe9ee0137949e879c Mon Sep 17 00:00:00 2001 From: Imani Manyara Date: Fri, 13 Nov 2026 16:39:21 -0500 Subject: [PATCH 1/2] Pin the shared Go release workflow to v1.0.0 release.yml calls simtabi/.github's go-release.yml at 767e0c0, its v1.0.0 release (simtabi/.github#31), written as @ # v1.0.0 so Dependabot can advance the commit and the tag comment together. v1.0.0 changes only the shared repository's docs and tests since the previous pin. --- .github/workflows/release.yml | 2 +- CHANGELOG.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2d8542f..3fa2f34 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -35,7 +35,7 @@ jobs: contents: write id-token: write attestations: write - uses: simtabi/.github/.github/workflows/go-release.yml@d648d8998f95a351001979f9c4527badca588bf1 # simtabi/.github#30 + uses: simtabi/.github/.github/workflows/go-release.yml@767e0c01251dbbfc695d03dfdd73db48733e852e # v1.0.0 with: tag: ${{ inputs.tag || github.ref_name }} post-release: bash .scripts/release-launchers.sh diff --git a/CHANGELOG.md b/CHANGELOG.md index f5e8bf1..27ce4d3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,7 +6,7 @@ All notable changes to `ichava/icon-sets-sync` (formerly `ichava/maintainer-tool ### Changed -- `release.yml` calls simtabi/.github's shared `go-release.yml` at `d648d89` (simtabi/.github#30), its latest commit, which adds an optional `node-version` input and changes nothing a caller passes. +- `release.yml` calls simtabi/.github's shared `go-release.yml` at its `v1.0.0` release (`767e0c0`), pinned as `@ # v1.0.0` so Dependabot can advance the commit and the tag comment together. The release adds optional inputs only (`node-version` among them) and changes nothing a caller passes. ## [0.1.0] - 2026-11-13 From f7788084873f02504ecfc1a43035aed5b6d81094 Mon Sep 17 00:00:00 2001 From: Imani Manyara Date: Fri, 13 Nov 2026 16:43:36 -0500 Subject: [PATCH 2/2] Name icon-browser where the SVG docs named react-icon-browser react-icon-browser is retired and the browser whose caps this tool matches lives in icon-browser's resources/js since react consolidation 3d. docs/configuration.md and the comments in policy.go and vectors_test.go say so. The caps, the vectors and syncscript_test.go's guard against the retired path are unchanged. --- CHANGELOG.md | 1 + docs/configuration.md | 2 +- src/internal/core/svg/policy.go | 5 +++-- src/internal/core/svg/vectors_test.go | 2 +- 4 files changed, 6 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 27ce4d3..a2d3c33 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,7 @@ All notable changes to `ichava/icon-sets-sync` (formerly `ichava/maintainer-tool ### Changed +- `docs/configuration.md` and the SVG package's comments name icon-browser where they named react-icon-browser, which is retired; the browser's SVG caps live in icon-browser's `resources/js` since 2026-11-12. CHANGELOG history and the guard in `syncscript_test.go` that names the retired path are unchanged. - `release.yml` calls simtabi/.github's shared `go-release.yml` at its `v1.0.0` release (`767e0c0`), pinned as `@ # v1.0.0` so Dependabot can advance the commit and the tag comment together. The release adds optional inputs only (`node-version` among them) and changes nothing a caller passes. ## [0.1.0] - 2026-11-13 diff --git a/docs/configuration.md b/docs/configuration.md index c272105..11d8ac4 100644 --- a/docs/configuration.md +++ b/docs/configuration.md @@ -235,7 +235,7 @@ through with a warning. `report_only` writes nothing and is never refused. A document over 4,500,000 bytes or 30,000 elements is refused before it builds a tree. It is treated like an unparseable file: counted and left as it was. The caps are the `MaxBytes` and `MaxNodes` fields on the -policy, and match react-icon-browser's and core's; the pack SVGs measure at most 1.0 MB and 6,741 elements. +policy, and match icon-browser's browser (formerly react-icon-browser) and core's; the pack SVGs measure at most 1.0 MB and 6,741 elements. ## Download and extraction limits diff --git a/src/internal/core/svg/policy.go b/src/internal/core/svg/policy.go index 2b6cb86..5ed4db7 100644 --- a/src/internal/core/svg/policy.go +++ b/src/internal/core/svg/policy.go @@ -23,8 +23,9 @@ import ( // largest file is 1,053,328 bytes and the largest has 6,741 elements, so these // are about 4.3x and 4.5x the observed maximum. // -// They match react-icon-browser's AppConfig.limits (svgMaxChars 4,500,000, -// svgMaxNodes 30,000, react-icon-browser#197) and core's caps, so this tool +// They match the browser's AppConfig.limits (svgMaxChars 4,500,000, +// svgMaxNodes 30,000, set in react-icon-browser#197; the browser lives in +// icon-browser's resources/js since 2026-11-12) and core's caps, so this tool // never accepts an SVG that a consumer rejects. Change all three together. const ( DefaultMaxBytes = 4_500_000 diff --git a/src/internal/core/svg/vectors_test.go b/src/internal/core/svg/vectors_test.go index a3d295d..44039a3 100644 --- a/src/internal/core/svg/vectors_test.go +++ b/src/internal/core/svg/vectors_test.go @@ -8,7 +8,7 @@ import ( ) // testdata/presentation-vectors.json is the vector table every sanitiser in -// the ecosystem runs: byte-identical here and in core, react-icon-browser and +// the ecosystem runs: byte-identical here and in core, icon-browser and // js-icon-components. It is the only copy of these rows here: its first 27 // were an inline Go table, removed once every one of them was confirmed in // this file. This test runs the whole shared file, including the marker rows