corex-ui / corex / 4e061b6676af4d8142826b0a3aab6d2d863731f0

93%

push

github

Bump postgrex to 0.22.4 (CVE-2026-66838) (#128)

* fix(deps): bump postgrex to 0.22.4 for CVE-2026-66838

SQL injection via :comment on Postgrex.stream/4 (GHSA-3gww-3f36-2388).
Raise the e2e and integration_test floor to >= 0.22.4.

Co-authored-by: Karim Semmoud <karim-semmoud@users.noreply.github.com>

* fix(slider): SSR aria values and wait for async skeletons

Doc a11y on /en/slider/patterns was racing assign_async: the wait
returned while slider_skeleton was still on screen, then axe saw
role=slider without aria-valuenow.

Emit aria-valuemin/max/now on thumbs in SSR, and wait for descendant
[data-loading] so skeletons and hooks are both gone before axe.

Co-authored-by: Karim Semmoud <karim-semmoud@users.noreply.github.com>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Karim Semmoud <karim-semmoud@users.noreply.github.com>

3 of 3 new or added lines in 1 file covered. (100.0%)

8216 of 8813 relevant lines covered (93.23%)

36.6 hits per line