merge: incorporate origin/main into community-mode branch

Conflicts resolved:
- VERSION: keep 0.14.0.0 (our branch > main's 0.13.1.0)
- CHANGELOG.md: keep both entries, 0.14.0.0 above 0.13.1.0

Main brought in v0.13.1.0 "Defense in Depth": auth token via file
instead of /health endpoint, Bearer auth on cookie picker data routes,
CORS tightened, state file expiry, textContent over innerHTML in
extension, symlink-aware path validation, portable freeze hook,
shell config input sanitization. 20 regression tests.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Garry Tan
2026-03-28 07:38:15 -07:00
23 changed files with 488 additions and 66 deletions
+2
View File
@@ -156,6 +156,8 @@ OUTCOME="$(json_safe "$OUTCOME")"
SESSION_ID="$(json_safe "$SESSION_ID")"
SOURCE="$(json_safe "$SOURCE")"
EVENT_TYPE="$(json_safe "$EVENT_TYPE")"
REPO_SLUG="$(json_safe "$REPO_SLUG")"
BRANCH="$(json_safe "$BRANCH")"
# Escape null fields — sanitize ERROR_CLASS and FAILED_STEP via json_safe()
ERR_FIELD="null"