jason5ng32andClaude Fable 5 10b3368f67 Fix(ci): render the i18n comment from validated numbers only ...

Even fenced plain text from the PR's run let a hostile PR speak in the
bot's voice. The artifact now carries a structured --json snapshot
(counts, locale codes, key paths); the privileged side validates every
field against enums, integer bounds and tight regexes, then renders the
comment text entirely with trusted code. A hostile PR can at most
misstate its own coverage numbers — it cannot emit prose, links or
instructions as the bot.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-23 12:41:00 +08:00

..

fetch-favicons.js

Feat(connectivity): ship the favicon fetcher and auto-heal missing icons

2026-08-22 17:23:41 +08:00

i18n-scaffold.js

Feat(i18n): empty-value skeletons with scaffolding and build-time pruning

2026-08-22 21:17:20 +08:00

i18n-status.js

Fix(ci): render the i18n comment from validated numbers only

2026-08-23 12:41:00 +08:00