[sh1pt-actions-fleet]

package.json said 1.0.0/1.1.0 while release tags were already at v1.1.1; this makes the webhooks release (#67) v1.2.0.

🤖 Generated with Claude Code

[github-actions]

ThreatCrush Security Scan

15 finding(s)

HIGH/CRITICAL: 1 | MEDIUM: 12 | LOW: 2

Severity	Rule	Location
HIGH	js-ssrf-outbound-request	src/lib/edgeProxy.ts:69
MEDIUM	js-unescaped-html-sink	src/components/JsonLd.tsx:13
MEDIUM	js-unescaped-html-sink	src/components/PitFooter.tsx:17
MEDIUM	redos-nested-quantifier	src/lib/emailMarkdown.ts:43
MEDIUM	redos-nested-quantifier	src/lib/emailMarkdown.ts:302
MEDIUM	js-unescaped-html-sink	src/views/Admin.tsx:1811
MEDIUM	js-unescaped-html-sink	src/views/BlogPost.tsx:168
MEDIUM	js-unescaped-html-sink	src/views/EmailBroadcast.tsx:412
MEDIUM	js-open-redirect	src/views/Featured.tsx:279
MEDIUM	js-unescaped-html-sink	src/views/NewsPost.tsx:137
MEDIUM	js-open-redirect	src/views/SoftwareDetail.tsx:160
MEDIUM	redos-nested-quantifier	supabase/functions/_shared/emailMarkdown.ts:43
MEDIUM	redos-nested-quantifier	supabase/functions/_shared/emailMarkdown.ts:302
LOW	secret-generic-credential	__tests__/lib/webhooks/supabaseStore.test.ts:11
LOW	secret-generic-credential	cli/test/cli.test.mjs:309

Snippets are redacted; ThreatCrush never prints matched credential material.