platphorm-space-news

chore: add auto PR approve+merge workflow

chore: bump package version

chore: normalize package metadata and bump version

Merge pull request #17 from mbarbine/consolidate/platphorm-space-news-20260811-cont3 consolidate 11 PRs into one commit

chore: consolidate open pull requests into one commit

chore: consolidate open PRs into single commit

🛡️ Sentinel: Fix SSRF and trust bypass via trailing dots Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>

palette: improve accessibility of active filter badges This commit resolves critical accessibility issues on the active news filter badges. Key additions: - Interactive keyboard navigation (handles Enter and Space keydown events to clear the filters) - Descriptive ARIA labels on the active filter badges - focus-visible ring styles for keyboard navigation visual feedback - Hides the decorative 'x' characters from screen readers using aria-hidden - Eliminates duplicate '.js' files for route paths to prevent compiler and Vitest import resolution ambiguity - Downgrades ESLint to v9 to prevent eslint-plugin-react loading crashes Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>

fix(security): prevent trailing dot SSRF and host bypass Normalize parsed hostnames by stripping trailing dots before performing SSRF blocklist checks and domain trust validation. This prevents potential bypasses with hostnames like localhost. or platphormnews.com. in HTTP client fetching. Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>

feat: improve accessibility of active filter badges - Implement keyboard triggers (Enter/Space onKeyDown) on ActiveFilters - Add visible focus outlines via focus-visible - Use descriptive ARIA labels and hide the static 'x' close indicator - Downgrade ESLint package to v9 to fix plugin compatibility issues - Explicitly include .ts extensions in API route imports inside unit tests Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>

🛡️ Sentinel: Fix SSRF and trust bypass via trailing dots 🚨 Severity: HIGH 💡 Vulnerability: Hostname/FQDN trailing dot validation bypass 🎯 Impact: Attackers could bypass SSRF safety checks (blocking localhost, metadata endpoints) and domain trusts (platphormnews.com) by appending a trailing dot. 🔧 Fix: Normalized hostnames to lowercase and stripped trailing dots using regex `.replace(/\.+$/, "")` before conducting validation and trust checks. Also converted legacy JS route-compliance to TypeScript and deleted obsolete duplicate JS route files. ✅ Verification: Ran full unit test suite, including new trailing dot bypass unit tests, and all 53 tests passed. Also ran a successful production build. Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>

fix: support Vercel alias compliance status

feat: expose canonical route compliance

chore: reconcile and restore pnpm build

chore: add OSS compliance metadata and discovery assets

update

update

Merge pull request #3 from mbarbine/feature/add-dynamic-seo-and-ai-plugin-discovery-12016371636490380113 feat: add dynamic SEO routes, AI plugin discovery, and vitest tests

Rename project to 'Space News Aggregator (StarBase)' Updated project name and removed v0 specific instructions.

Merge pull request #2 from mbarbine/v0/mbarbine-030fafd3 Launch Space News aggregator with live RSS feeds and resources

fix: resolve Server Component event handler issue Remove event handlers from Server Components for TopBar. Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>

Merge pull request #1 from mbarbine/v0/mbarbine-7edbd7d2 Launch Space News aggregator with live RSS feeds and SEO

fix: correct template literal escaping Fix syntax errors in template literals to enable build success. Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>