release: v0.1.1215

[kojiwakayama]

Carries the CSP reporting endpoint and the project-less-domain fix to production.

• feat(security): collect CSP violation reports so report-only means something #3470 — the platform CSP now asks browsers to report what it blocks, to /_vf/csp-report, and the endpoint records it. Until now the report-only floor did neither job: it does not enforce, so it protected nothing, and with no reporting endpoint the violations it named reached only whoever happened to open devtools. This is what makes the VERYFRONT_CSP_ENFORCE decision evidence-based instead of a repeat of fix(modules,security,cli): unblock hydration and cut v0.1.1206 #3417. The endpoint is exempt from security.auth and security.csrf, without which any project using either would have advertised a reporting endpoint that answered 401/403 and collected nothing.
• fix(proxy): answer 404 for a veryfront domain that names no project #3469 — staging.veryfront.com and preview.veryfront.com answered 502 "Missing project context" where development.veryfront.com answered 404 for the identical condition. They match the environment-root branch in parseProjectDomain and were forwarded with x-project-slug: "". Now all three answer 404. Local project-less hosts keep reaching the project chooser.
• docs(skill): stop implying load_skill is availability-gated #3468 — architecture docs no longer imply load_skill is availability-gated.

Delivery is unchanged: still report-only for projects that declared no policy, still enforced for those that did. VERYFRONT_CSP_ENFORCE is untouched.

Once merged this dispatches veryfront-code-released; the veryfront-server promotion PR follows.

Summary by CodeRabbit

• Chores
  • Updated the application version from 0.1.1214 to 0.1.1215.
  • Ensured the displayed and packaged version information remains consistent.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 17b897f8-3726-4f51-83fa-09ad195d0868

📥 Commits

Reviewing files that changed from the base of the PR and between 2c445bd and d9d81e3.

⛔ Files ignored due to path filters (1)

• src/html/hydration-script-builder/hydration-runtime.generated.ts is excluded by !**/*.generated.*

📒 Files selected for processing (2)

• deno.json
• src/utils/version-constant.ts

---

📝 Walkthrough

Walkthrough

The release version changed from 0.1.1214 to 0.1.1215 in project metadata and the exported VERSION constant.

Changes

Version update

Layer / File(s)	Summary
Synchronize release version deno.json, src/utils/version-constant.ts	The project version and exported VERSION constant now use 0.1.1215.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• veryfront/veryfront-code#3346: Updates the same version metadata files.
• veryfront/veryfront-code#3462: Applies the same version-bump pattern.
• veryfront/veryfront-code#3467: Updates the same project version and exported constant.

Suggested reviewers: kwakayama, copilot

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the version release and matches the version updates in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/v0.1.1215

---

_{Comment @coderabbitai help to get the list of available commands.}