4 people f7ef467cc9 fix: pr-bug-scan validated finding from #6335 (#8804) ...

* fix: address pr-bug-scan validated finding from #6335

Replaced unguarded crypto.randomUUID() with the established createBrowserUuid() fallback in both markup shape-id call sites.

* fix(review): cover markup crypto fallback call sites with regression tests

PR #8804 replaced two unguarded crypto.randomUUID() calls with
createBrowserUuid(), matching the convention established in #5471, but
shipped without extending that PR's regression-test pattern to the new
call sites. Add hook-level tests for useMarkupPointerHandlers.onPointerDown
and useMarkupEditor.commitPendingText under a simulated non-secure-context
crypto global.

Co-authored-by: Orca <help@stably.ai>

* fix(review): consolidate annotation bridge token onto createBrowserUuid

BrowserPane had its own inline crypto.randomUUID guard with a
Date.now()+Math.random() fallback, duplicating the getRandomValues-based
fallback already centralized in createBrowserUuid() and used at every
other call site in the renderer.

Co-authored-by: Orca <help@stably.ai>

---------

Co-authored-by: orca-bug-scan-bot <orca-bug-scan-bot@stably.ai>
Co-authored-by: Jinjing <6427696+AmethystLiang@users.noreply.github.com>
Co-authored-by: Orca <help@stably.ai>

2026-07-15 16:47:18 -07:00

..

cli

Add version-matched skill guides to the CLI (#8624)

2026-07-14 02:17:55 -07:00

main

Fix PR checks sticking to a stale linked PR after a terminal branch switch (#8760)

2026-07-15 15:52:41 -07:00

preload

Fix manual project order across paired runtime hosts (#8894)

2026-07-15 13:32:13 -07:00

relay

fix(worktrees): stop surfacing prunable git worktrees as live workspaces (#8409)

2026-07-15 15:24:15 -07:00

renderer

fix: pr-bug-scan validated finding from #6335 (#8804)

2026-07-15 16:47:18 -07:00

shared

Fix PR checks sticking to a stale linked PR after a terminal branch switch (#8760)

2026-07-15 15:52:41 -07:00

types

Update onboarding feature wall experience (#2652)

2026-05-23 12:21:13 -07:00