From 84c224ac192736ccbdbae94fd0045d8a6dfcb4ca Mon Sep 17 00:00:00 2001 From: Ruben van der Linde Date: Wed, 5 Aug 2026 23:45:29 +0200 Subject: [PATCH] chore(ci): move hydra-gates-ref v1.3.0 -> v1.4.0 A pinned `hydra-gates-ref` is a silent expiry date on every upstream fix: this repo cannot receive a gate-package change until this line moves. v1.4.0 is the latest tag and the first one that carries `hydra-gates/scripts/axe-run.cjs` (verified absent at v1.3.0), so it is also the first that has ConductionNL/.github#168 axe DOM scoping and ConductionNL/.github#165 gate-46 fix. `enable-axe` is deliberately NOT enabled in this commit. Ordering matters: the ref lands first, enabling axe is a separate decision. --- .github/workflows/code-quality.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.github/workflows/code-quality.yml b/.github/workflows/code-quality.yml index d6d9d618..eab0c96a 100644 --- a/.github/workflows/code-quality.yml +++ b/.github/workflows/code-quality.yml @@ -170,4 +170,13 @@ jobs: # reproducible and a later gate change cannot move this repo's verdict # without a commit here. enable-hydra-gates: true - hydra-gates-ref: v1.3.0 + hydra-gates-ref: v1.4.0 + # PIN MOVED v1.3.0 -> v1.4.0 (fleet consumer-ref sweep, 2026-08-05). + # A pinned ref is a silent expiry date on every upstream fix: this repo + # cannot receive a gate-package fix until this line moves. v1.4.0 is the + # latest tag and the FIRST one carrying `hydra-gates/scripts/axe-run.cjs` + # (verified absent at v1.3.0), so it is also the first that has #168's + # axe DOM scoping and #165's gate-46 fix. + # `enable-axe` is deliberately still NOT set — a vanilla Nextcloud 34 + # reports serious/critical violations on core's OWN routes that DOM + # scoping does not remove. Enabling axe is a separate decision.