fix(ci): baseline exact Sparkle public-key fingerprint instead of a pattern allowlist

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
fix(ci): build on Xcode 27 SDK and allowlist Sparkle public key
2026-11-01 19:52:09 +00:00 · 2026-11-01 19:49:46 +00:00
2 changed files with 5 additions and 3 deletions
@@ -0,0 +1,2 @@
+# Sparkle SUPublicEDKey: EdDSA public verification key, not a secret (exact historical finding only)
+b3940a3656a8dbc8d669825ed1d0cc0ec9e619d4:project.yml:generic-api-key:66
@@ -60,7 +60,7 @@ struct MarkdownDocument: FileDocument {

        let rawContent = frontmatter != nil ? body : markdown
        let content = preProcessSubscript(rawContent, enabled: extensions.subscript_)
-        let document = Document(parsing: content)
+        let document = Markdown.Document(parsing: content)
        var htmlVisitor = HTMLConverter()
        html += htmlVisitor.visit(document)
        return applyExtensions(html, extensions: extensions)
@@ -127,7 +127,7 @@ struct MarkdownDocument: FileDocument {
    }

    private static func renderFrontmatterAsMarkdown(_ yaml: String) -> String {
-        let document = Document(parsing: "---\n\(yaml)\n---")
+        let document = Markdown.Document(parsing: "---\n\(yaml)\n---")
        var htmlVisitor = HTMLConverter()
        return htmlVisitor.visit(document)
    }
@@ -275,7 +275,7 @@ struct MarkdownDocument: FileDocument {
 private struct HTMLConverter: MarkupWalker {
    private var result = ""

-    mutating func visit(_ document: Document) -> String {
+    mutating func visit(_ document: Markdown.Document) -> String {
        result = ""
        for child in document.children {
            visitChild(child)
Author	SHA1	Message	Date
forge-recoveryandClaude Sonnet 5.5	791e487737	fix(ci): baseline exact Sparkle public-key fingerprint instead of a pattern allowlist KofTwentyTwo/ci-policy: ci / fork-guard (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / gradle-0 (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / gradle-1 (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / java-docker-2 (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / java-maven-3 (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / manifests-4 (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / node-5 (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / rust-6 (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / rust-7 (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / rust-8 (pull_request) Skipped Details KofTwentyTwo/ci-policy: ci / not-enrolled (pull_request) Skipped Details KofTwentyTwo/ci-policy: Shared source and config CI / verify (pull_request) Successful in 24s Details KofTwentyTwo/ci-policy: Shared source and config CI / secrets (pull_request) Successful in 40s Details KofTwentyTwo/ci-policy: Shared source and config CI / gate (pull_request) Successful in 20s Details KofTwentyTwo/ci-policy: ci / source-config-9 (pull_request) Successful in 1m8s Details KofTwentyTwo/ci-policy: ci / ci-result (pull_request) Successful in 11s Details Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 19:52:09 +00:00
forge-recoveryandClaude Sonnet 5.5	736e6f3b6e	fix(ci): build on Xcode 27 SDK and allowlist Sparkle public key - Qualify swift-markdown's Document: SwiftUI now exports its own Document protocol, making the bare name ambiguous. - Allowlist the Sparkle SUPublicEDKey (an EdDSA public verification key, not a secret) for gitleaks. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-01 19:49:46 +00:00