From e751e7de5e226353aab4d037ddbea3a53624abd2 Mon Sep 17 00:00:00 2001 From: "google-labs-jules[bot]" <161369871+google-labs-jules[bot]@users.noreply.github.com> Date: Mon, 29 Jun 2026 06:23:07 +0000 Subject: [PATCH 1/2] security: replace compromised polyfill.io with cloudflare mirror The polyfill.io domain was recently sold and has been linked to a supply chain attack involving malicious script injections (e.g., fake login prompts). This commit updates mkdocs.yml to use the safe Cloudflare mirror for polyfills, ensuring security while maintaining compatibility for older browsers. Signed-off-by: Jules Co-authored-by: ChristopherRabotin <4823784+ChristopherRabotin@users.noreply.github.com> --- mkdocs.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mkdocs.yml b/mkdocs.yml index a58a58d..9d15020 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -205,5 +205,5 @@ markdown_extensions: extra_javascript: - js/config.js - - https://polyfill.io/v3/polyfill.min.js?features=es6 + - https://cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?features=es6 - https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-mml-chtml.js From 5282977c5d3f61eec600f5d34fa2e7abd5e4259a Mon Sep 17 00:00:00 2001 From: Christopher Rabotin Date: Mon, 29 Jun 2026 00:27:05 -0600 Subject: [PATCH 2/2] Fix firebase + remove polyfill --- .github/workflows/firebase-hosting-merge.yml | 7 +++++++ .github/workflows/firebase-hosting-pull-request.yml | 7 +++++++ mkdocs.yml | 1 - 3 files changed, 14 insertions(+), 1 deletion(-) diff --git a/.github/workflows/firebase-hosting-merge.yml b/.github/workflows/firebase-hosting-merge.yml index ff2a0a7..ba24873 100644 --- a/.github/workflows/firebase-hosting-merge.yml +++ b/.github/workflows/firebase-hosting-merge.yml @@ -12,6 +12,13 @@ jobs: steps: - uses: actions/checkout@v3 - run: sh tasker.sh build + # Pin Node to avoid the keep-alive socket regression in Node 22.23.0 / + # 24.17.0 (nodejs/node#63989), which makes firebase-tools fail channel + # deploys with "premature close" -> retried release -> FAILED_PRECONDITION. + - name: Pin Node for Firebase deploy + uses: actions/setup-node@v4 + with: + node-version: "24.18.0" - uses: FirebaseExtended/action-hosting-deploy@v0 with: repoToken: '${{ secrets.GITHUB_TOKEN }}' diff --git a/.github/workflows/firebase-hosting-pull-request.yml b/.github/workflows/firebase-hosting-pull-request.yml index 9369ea6..73ca921 100644 --- a/.github/workflows/firebase-hosting-pull-request.yml +++ b/.github/workflows/firebase-hosting-pull-request.yml @@ -10,6 +10,13 @@ jobs: steps: - uses: actions/checkout@v3 - run: sh tasker.sh build + # Pin Node to avoid the keep-alive socket regression in Node 22.23.0 / + # 24.17.0 (nodejs/node#63989), which makes firebase-tools fail channel + # deploys with "premature close" -> retried release -> FAILED_PRECONDITION. + - name: Pin Node for Firebase deploy + uses: actions/setup-node@v4 + with: + node-version: "24.18.0" - uses: FirebaseExtended/action-hosting-deploy@v0 with: repoToken: '${{ secrets.GITHUB_TOKEN }}' diff --git a/mkdocs.yml b/mkdocs.yml index 9d15020..1209d86 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -205,5 +205,4 @@ markdown_extensions: extra_javascript: - js/config.js - - https://cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?features=es6 - https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-mml-chtml.js