-
Notifications
You must be signed in to change notification settings - Fork 1
fix(a11y): show keyboard focus on OIDC actions #1241
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
seonghobae
wants to merge
29
commits into
develop
Choose a base branch
from
palette/oidc-button-a11y-16296241942306803859
base: develop
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from all commits
Commits
Show all changes
29 commits
Select commit
Hold shift + click to select a range
3324848
🎨 Palette: OIDC 로그인 및 로그아웃 버튼의 키보드 접근성 개선
seonghobae 48e0d86
chore(a11y): remove bot journal artifact
seonghobae 04976dc
test(a11y): lock OIDC focus indicators
seonghobae 8bbd54a
docs(a11y): record OIDC focus boundary
seonghobae 0dbf41f
test(a11y): locate formatted OIDC buttons
seonghobae a28e004
merge(develop): refresh OIDC keyboard focus indicators
seonghobae e03caee
Merge branch 'develop' into palette/oidc-button-a11y-1629624194230680…
seonghobae 95ba8f9
Merge develop into OIDC focus accessibility fix
seonghobae cb3bb00
🛡️ Sentinel: [HIGH] Fix SSRF vulnerability in SettingsLayout
seonghobae 0509c0d
Merge branch 'develop' into palette/oidc-button-a11y-1629624194230680…
opencode-agent[bot] e8bc461
🛡️ Sentinel: [HIGH] Fix SSRF vulnerability in SettingsLayout and igno…
seonghobae b6365aa
Merge branch 'develop' into palette/oidc-button-a11y-1629624194230680…
opencode-agent[bot] fb53de0
🛡️ Sentinel: [HIGH] Fix SSRF vulnerability in SettingsLayout and reve…
seonghobae 385ed69
🛡️ Sentinel: [HIGH] Fix SSRF vulnerability in SettingsLayout and igno…
seonghobae 27f9e36
🛡️ Sentinel: [HIGH] Fix SSRF vulnerability in SettingsLayout and igno…
seonghobae 61052d2
Merge branch 'develop' into palette/oidc-button-a11y-1629624194230680…
opencode-agent[bot] 7775834
fix(a11y): reconstruct OIDC focus lane on current develop
seonghobae 76ad751
Merge develop into palette/oidc-button-a11y-16296241942306803859
seonghobae ce46f13
Merge protected develop into OIDC focus accessibility
seonghobae 7db580d
Merge branch 'develop' into palette/oidc-button-a11y-1629624194230680…
seonghobae 7be622c
merge(develop): reconcile OIDC focus accessibility
seonghobae 3fc0daf
🛡️ Sentinel: [HIGH] Fix SSRF vulnerability in SettingsLayout and igno…
seonghobae 5105ddb
🛡️ Sentinel: [HIGH] Fix SSRF vulnerability in SettingsLayout and igno…
seonghobae 077597e
Merge develop into OIDC accessibility branch
seonghobae a27ebb0
Merge remote-tracking branch 'origin/develop' into fix/pr1241-current
seonghobae 409eb58
🎨 Palette: OIDC 로그인 및 로그아웃 버튼의 키보드 접근성 개선
seonghobae b94e19d
fix(a11y): restore develop baseline and keep OIDC focus-visible delta…
seonghobae fb7e63d
fix(security): bump aiohttp to 3.14.3 and js-yaml to 4.3.1 (#1241)
seonghobae ea3eb42
Merge branch 'develop' into palette/oidc-button-a11y-1629624194230680…
seonghobae File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
devin-ai-integration[bot] marked this conversation as resolved.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🔍 Dependency bumps unrelated to the a11y change
Beyond the OIDC focus styling, this PR bumps
aiohttp3.14.1->3.14.3 in requirements-strix-ci-hashes.txt and adds ajs-yaml: "4.3.1"override in pnpm-workspace.yaml. Both are unrelated to the accessibility change and are scope drift; the lockfile does carry a matchingjs-yaml@4.3.1resolution, so the override is internally consistent.Was this helpful? React with 👍 or 👎 to provide feedback.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The dependency bumps are merge-gate remediation, not scope drift: osv-scan flags aiohttp@3.14.1 (PYSEC-2026-3545/3546/3547) and js-yaml@4.3.0 (GHSA-5p4m-2wfm-xmqj) at the develop baseline itself, and these files sit on the required-check path for this PR's merge ref. The changes are minimal — a single hash-block splice for aiohttp 3.14.3 (all other pins byte-identical) and one pnpm-workspace.yaml override + lockfile refresh for js-yaml 4.3.1.