release: v0.1.1217

[kojiwakayama]

The release that should actually make derived CSP origins work in production.

• fix(security): initialize the adapter before deriving CSP origins #3484 — the real cause. getAllSourceFiles answers [] until the adapter has a content context, and only ensureSourceSnapshotFresh (which awaits ensureInitialized) establishes one. The config load called it; the derivation path never did. The adapter's file-list warmup is itself gated on being initialized, so the empty read never filled in — not a cold cache that warms, one that never warms. Preview looked fine only because its adapter was already initialized by the time derivation asked.
• feat(security): say why a CSP derivation produced nothing #3482 — every derivation outcome now names itself (no tenant context, no source listing, read threw, read nothing, or read N files and derived K origins), bounded to one line per content version. If fix(security): initialize the adapter before deriving CSP origins #3484 is still not the whole story, the next answer comes from a log line instead of another release cycle.

Check after deploy:

curl -sSD - -o /dev/null https://vf-csp-probe.production.veryfront.com/ | grep -i content-security-policy

img-src should gain https://images.unsplash.com and https://cdn.jsdelivr.net. It has neither today while preview has both.

VERYFRONT_CSP_ENFORCE remains untouched.

Summary by CodeRabbit

• Chores
  • Updated the application version to 0.1.1217.
  • Synchronized the displayed version information across the project.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 0a6ab198-3b7a-4069-88f1-de09e4047548

📥 Commits

Reviewing files that changed from the base of the PR and between 4e2901a and b142ffb.

⛔ Files ignored due to path filters (1)

• src/html/hydration-script-builder/hydration-runtime.generated.ts is excluded by !**/*.generated.*

📒 Files selected for processing (2)

• deno.json
• src/utils/version-constant.ts

---

📝 Walkthrough

Walkthrough

The project version is updated from 0.1.1216 to 0.1.1217 in deno.json and src/utils/version-constant.ts.

Changes

Release version update

Layer / File(s)	Summary
Update release version deno.json, src/utils/version-constant.ts	The project metadata and exported VERSION constant now use 0.1.1217.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• veryfront/veryfront-code#3478: Updates the same version fields for a consecutive release.
• veryfront/veryfront-code#3472: Updates the project version and exported VERSION constant.
• veryfront/veryfront-code#3467: Updates the version in the same release files.

Suggested reviewers: kwakayama

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the release version and matches the version updates in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/v0.1.1217

---

_{Comment @coderabbitai help to get the list of available commands.}