Skip to content

chore(release): v1.24.1 - #276

Merged
qnbs merged 2 commits into
mainfrom
release/v1.24.1
Jul 28, 2026
Merged

chore(release): v1.24.1#276
qnbs merged 2 commits into
mainfrom
release/v1.24.1

Conversation

@qnbs

@qnbs qnbs commented Jul 28, 2026

Copy link
Copy Markdown
Owner

Summary

Cuts the v1.24.1 patch release, closing out this session's full body of work:

  • Local-AI reliability ([Bug]: CORS warnings: Ollama (local), Chromium #266): desktop Ollama/LM Studio/vLLM discovery fix (Tauri build externalization bug) + browser status-badge reconciliation fix — both root-caused with real build+runtime repros.
  • AI heuristic-fallback foundation + Outline/Character/World/Plot-Board "next beat" generators — graceful offline degradation instead of hard failures.
  • Real self-hosted LanguageTool integration — privacy-first grammar/spell checking, replacing the hardcoded fake-typo list.
  • 18-PR Dependabot backlog fully triaged: 14 merged directly, the remaining 5 (AI SDK v4 family, biome 2.5.x, dev-tooling/Babel 8) each had a genuine breaking-change blocker, root-caused and fixed with real code — none force-merged or suppressed.
  • Issue chore(security): upstream y-webrtc diff check — vendor fork audit #60 vendor-fork audit — confirmed complete, status comment posted, stays open per its own policy.
  • Security/build hardening: persist-credentials: false across 7 CI workflows (CWE-522), 2 CWE-209 fixes (stale-request race in AiProviderCard, unsafe error-message passthrough in ollamaService.ts), invalid ltr/rtl Tailwind variant fix, 3 ineffective dynamic imports converted to static.

What's in this PR specifically

  • Version bump 1.24.01.24.1 across package.json, src-tauri/Cargo.toml/Cargo.lock, tauri.conf.json, public/sw.js (via the existing sync scripts).
  • CHANGELOG.md: [Unreleased][1.24.1] - 2026-07-28.
  • README.md badges/metrics refreshed (2844 i18n keys × 19 locales, 525 test files).
  • AUDIT.md quality-gate line + follow-up chain updated; TODO.md v1.24.1 section finalized.
  • graphify-out/GRAPH_REPORT.md regenerated (AST-only).

Test plan

  • pnpm run lint — clean
  • pnpm run typecheck — clean
  • pnpm run i18n:check — 2844 keys × 19 locales, all in parity
  • All 7 feature PRs this release bundles already went through full CI (Quality Gate Node 22/24, Security Audit, Build) + CodeAnt/CodeRabbit review loops individually before merging to main
  • CI on this PR itself (Quality Gate, Security Audit, Build)

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Documentation

    • Updated release documentation, changelog, and audit header for v1.24.1.
    • Refreshed README/TODO metrics (locales, i18n coverage, and test counts) and propagated them across key sections.
    • Regenerated the project knowledge graph report for the latest corpus and updated the outstanding-work tracking details.
  • Maintenance

    • Bumped version 1.24.1 across the web app (service worker), desktop app, and package metadata.
    • Documented completion of the recent maintenance batch, along with follow-ups for build warnings, accessibility, and security hardening.

Local-AI reliability (desktop Ollama/LM Studio/vLLM discovery, misleading
browser status badge), the AI heuristic-fallback foundation + Outline/
Character/World/Plot-Board generators, real self-hosted LanguageTool
integration, an 18-PR Dependabot backlog triage (AI SDK v4 family, biome
2.5.x, dev-tooling/Babel 8, plus 15 straightforward bumps), the Issue #60
vendor-fork audit closeout, and security/build hardening (persist-credentials
CWE-522, ltr/rtl Tailwind fix, 3 ineffective dynamic imports, 2 CWE-209
fixes).

- Version bump 1.24.0 -> 1.24.1 (package.json, src-tauri/Cargo.toml,
  src-tauri/tauri.conf.json, src-tauri/Cargo.lock, public/sw.js
  APP_VERSION via the existing sync scripts)
- CHANGELOG.md [Unreleased] -> [1.24.1] - 2026-07-28
- README.md badges + metrics refreshed (2844 keys x 19 locales, 525 test
  files), AUDIT.md quality-gate line and follow-up chain updated, TODO.md
  v1.24.1 section finalized with the full Dependabot/CodeRabbit outcome
- graphify-out/GRAPH_REPORT.md regenerated (AST-only, no API cost)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@vercel

vercel Bot commented Jul 28, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
worldscript-studio Ready Ready Preview, Comment Jul 28, 2026 10:53am

@coderabbitai

coderabbitai Bot commented Jul 28, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: c6848e43-d962-4f70-9a4d-ffc0abb3d58c

📥 Commits

Reviewing files that changed from the base of the PR and between 1582b5b and c056c1f.

📒 Files selected for processing (4)
  • AUDIT.md
  • CHANGELOG.md
  • README.md
  • TODO.md
🚧 Files skipped from review as they are similar to previous changes (4)
  • CHANGELOG.md
  • README.md
  • AUDIT.md
  • TODO.md

📝 Walkthrough

Walkthrough

The release was updated from v1.24.0 to v1.24.1 across application metadata, service-worker caches, Tauri configuration, release documentation, audit records, project metrics, and the generated graph report.

Changes

v1.24.1 Release Metadata Refresh

Layer / File(s) Summary
Version identifier propagation
package.json, public/sw.js, src-tauri/Cargo.toml, src-tauri/tauri.conf.json
Version values were incremented from 1.24.0 to 1.24.1, including service-worker cache and reported-version values.
Release documentation updates
CHANGELOG.md, AUDIT.md, TODO.md, README.md
Release notes, audit metadata, Dependabot resolution details, follow-ups, badges, i18n counts, and test metrics were refreshed for v1.24.1.
Generated graph report regeneration
graphify-out/GRAPH_REPORT.md
The graph report was regenerated with WorldScript-Studio metadata, updated graph statistics, communities, knowledge gaps, and suggested questions.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

  • qnbs/WorldScript-Studio#274: Documents the underlying v1.24.1 reliability, security, build, and release changes reflected in this metadata update.
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly identifies this as the v1.24.1 release and matches the release-focused changeset.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch release/v1.24.1

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 4

🧹 Nitpick comments (1)
src-tauri/Cargo.toml (1)

3-3: 🩺 Stability & Availability | 🔵 Trivial

Verify the desktop release artifacts for both Tauri metadata changes.

After these Rust/Tauri changes, dispatch tauri-build.yml and confirm it reaches Finished N bundles.

  • src-tauri/Cargo.toml#L3-L3: verify the updated Rust package version builds successfully.
  • src-tauri/tauri.conf.json#L4-L4: verify the updated Tauri configuration produces the expected desktop bundles.

As per coding guidelines, after any Rust/Tauri change, dispatch tauri-build.yml and verify that it reaches Finished N bundles.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@src-tauri/Cargo.toml` at line 3, After the Rust/Tauri metadata changes,
dispatch tauri-build.yml and verify it reaches “Finished N bundles”. Validate
the updated Rust package version at src-tauri/Cargo.toml:3-3 and the updated
Tauri configuration at src-tauri/tauri.conf.json:4-4; neither site requires a
further code change if the desktop artifacts build successfully.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@CHANGELOG.md`:
- Around line 14-15: Update the Dependabot backlog count in the changelog entry
to 19 PRs, matching the authoritative totals documented in AUDIT.md and TODO.md.
Leave the surrounding release description unchanged.

In `@graphify-out/GRAPH_REPORT.md`:
- Around line 42-84: Replace the _COMMUNITY_* links in GRAPH_REPORT.md with
stable anchors that resolve within the report, or update the graphify-update
flow to preserve and commit the corresponding community pages under
graphify-out/wiki. Ensure every generated navigation target remains resolvable
in the committed artifact after scripts/graphify-update.mjs removes the wiki
directory.
- Around line 404-405: Reconcile community node-count semantics in the report
generator so the Communities section and Knowledge Gaps entries use the same
underlying count for each community, including Community 22 and the thin
communities listed here. Update the relevant community-counting logic or
regenerate GRAPH_REPORT.md from corrected output, and verify no conflicting
counts remain.

In `@README.md`:
- Around line 660-662: Update the “Current test metrics” heading in README.md
from 2026-06-16 to 2026-07-28, or to the actual date when these v1.24.1 metrics
were measured, while leaving the metric values unchanged.

---

Nitpick comments:
In `@src-tauri/Cargo.toml`:
- Line 3: After the Rust/Tauri metadata changes, dispatch tauri-build.yml and
verify it reaches “Finished N bundles”. Validate the updated Rust package
version at src-tauri/Cargo.toml:3-3 and the updated Tauri configuration at
src-tauri/tauri.conf.json:4-4; neither site requires a further code change if
the desktop artifacts build successfully.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: faf4526f-bcae-4312-926d-8a2548f8ea9f

📥 Commits

Reviewing files that changed from the base of the PR and between 90c4276 and 1582b5b.

⛔ Files ignored due to path filters (1)
  • src-tauri/Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (9)
  • AUDIT.md
  • CHANGELOG.md
  • README.md
  • TODO.md
  • graphify-out/GRAPH_REPORT.md
  • package.json
  • public/sw.js
  • src-tauri/Cargo.toml
  • src-tauri/tauri.conf.json

Comment thread CHANGELOG.md Outdated
Comment thread graphify-out/GRAPH_REPORT.md
Comment thread graphify-out/GRAPH_REPORT.md
Comment thread README.md
@codeant-ai

codeant-ai Bot commented Jul 28, 2026

Copy link
Copy Markdown

🏁 CodeAnt Quality Gate Results

Commit: c056c1fa
Scan Time: 2026-07-28 10:54:09 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality Gate Status Details
Secrets ✅ PASSED 0 secrets found
Duplicate Code ✅ PASSED 0.0% duplicated
SAST ✅ PASSED No security issues
Bugs ✅ PASSED Rating S: No bugs
IAC ✅ PASSED Rating S: No issues

View Full Results

- CHANGELOG.md/AUDIT.md/TODO.md: the Dependabot batch count was inconsistent
  (18 vs 19) and internally miscounted (a "remaining 5" bucket that actually
  listed 6 sub-items). Recounted directly from GitHub: 16 merged + 4 closed
  as superseded = 20 total, now consistent across all three files.
- README.md: "Current test metrics" heading still said 2026-06-16 next to
  the freshly-updated v1.24.1 numbers -- corrected to 2026-07-28.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@codecov

codecov Bot commented Jul 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@qnbs
qnbs merged commit 5ce9b32 into main Jul 28, 2026
22 checks passed
@qnbs
qnbs deleted the release/v1.24.1 branch July 28, 2026 11:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant