[pull] main from lynx-family:main

.changeset/afraid-eels-dress.md

@@ -0,0 +1,2 @@
+---
+---

.changeset/shaky-walls-wish.md

@@ -0,0 +1,2 @@
+---
+---

.github/workflows/test.yml

@@ -204,6 +204,26 @@ jobs:
   website:
     needs: build
     uses: ./.github/workflows/workflow-website.yml
+  zizmor:
+    runs-on: lynx-ubuntu-24.04-medium
+    permissions:
+      security-events: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - name: Install the latest version of uv
+        uses: astral-sh/setup-uv@v5
+      - name: Run zizmor 🌈
+        run: uvx zizmor --format=sarif . > results.sarif
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: results.sarif
+          category: zizmor
   # Copied from https://github.com/swc-project/swc/blob/b192dc82e6a84bd30f159fb12ca8a216f41e8efb/.github/workflows/CI.yml#L491
   done:
     needs:
@@ -217,6 +237,7 @@ jobs:
       - test-tools
       - test-type
       - website
+      - zizmor
     if: always()
     runs-on: lynx-ubuntu-24.04-medium
     name: Done

cspell.jsonc

@@ -99,6 +99,7 @@
     "rustc",
     "samchon", // https://github.com/samchon/openapi
     "serde", // https://github.com/serde-rs/serde
+    "SARIF", // https://sarifweb.azurewebsites.net/
     "turborepo", // https://github.com/vercel/turbo
     "typecheck", // vitest uses `--typecheck`
     "typeof",
@@ -113,6 +114,7 @@
     "PAPI", // Lynx's Element PAPI
     "parseable", // https://pnpm.io/cli/list
     "debugids", // https://getsentry.github.io/debugids/
+    "zizmor", // https://github.com/woodruffw/zizmor
   ],
   // Glob
   "ignorePaths": [

packages/web-platform/web-elements/src/XFoldViewNg/XFoldviewSlotNgTouchEventsHandler.ts

@@ -78,19 +78,11 @@ export class XFoldviewSlotNgTouchEventsHandler
     if (this.#scrollingVertically === false) {
       return;
     }
-    /**
-     * on chromium browsers, the y-axis js scrolling won't interrupt the pan-x gestures
-     * we make sure the x-axis scrolling will block the y-axis scrolling
-     */
     const scrollableKidY = this.#getTheMostScrollableKid(deltaY);
-    /**
-     * on chromium browsers, the y-axis js scrolling won't interrupt the pan-x gestures
-     * we make sure the x-axis scrolling will block the y-axis scrolling
-     */
     if (
       parentElement
     ) {
-      if (event.cancelable && !isChromium) {
+      if (event.cancelable) {
         event.preventDefault();
       }
       if (

packages/web-platform/web-elements/src/XFoldViewNg/x-foldview-ng.css

@@ -71,9 +71,6 @@ x-foldview-slot-ng {
   contain: strict;
   order: 3;
 }
-x-foldview-ng > x-foldview-slot-ng * {
-  touch-action: pan-x pinch-zoom;
-}
 x-foldview-slot-ng scroll-view {
   /* avoiding default bounce on ios safari */
   overscroll-behavior-y: none;

packages/webpack/react-webpack-plugin/src/ReactWebpackPlugin.ts

@@ -50,7 +50,7 @@ interface ReactWebpackPluginOptions {
   firstScreenSyncTiming?: 'immediately' | 'jsReady';
 
   /**
-   * {@inheritdoc @lynx-dev/react-rsbuild-plugin#PluginReactLynxOptions.enableSSR}
+   * {@inheritdoc @lynx-js/react-rsbuild-plugin#PluginReactLynxOptions.enableSSR}
    */
   enableSSR?: boolean;