Skip to content

fix(git-id-switcher): replace broken Snyk badge with static shield#470

Merged
nullvariant merged 1 commit intomainfrom
fix/snyk-badge-replacement
Apr 14, 2026
Merged

fix(git-id-switcher): replace broken Snyk badge with static shield#470
nullvariant merged 1 commit intomainfrom
fix/snyk-badge-replacement

Conversation

@nullvariant
Copy link
Copy Markdown
Owner

@nullvariant nullvariant commented Apr 14, 2026

Summary

  • The snyk.io/test/github/*/badge.svg endpoint now returns HTTP 410 Gone; Snyk retired the public badge generator in favor of the app.snyk.io dashboard (which requires org membership to view).
  • Replace the broken dynamic badge with a static shields.io Snyk monitored badge linking to snyk.io across the root README, the extension README, and all 26 i18n translations.
  • Bump git-id-switcher to 0.19.2.

Why a static badge

  • The new Snyk dashboard URLs (app.snyk.io/org/.../project/...) return 403 Forbidden for non-members, so they cannot serve as a public badge destination.
  • img.shields.io/snyk/vulnerabilities/github/<org>/<repo> still works but cannot scope to a targetFile, so every extension README in the monorepo would display the same aggregate number — misleading as the repo grows.
  • Static badge preserves the "Snyk monitored" signal without depending on an endpoint that may be retired again.

Changes

  • README.md (root) — markdown badge replaced
  • extensions/git-id-switcher/README.md — HTML badge replaced
  • extensions/git-id-switcher/docs/i18n/*/README.md (26 languages) — HTML badge replaced
  • extensions/git-id-switcher/CHANGELOG.md — 0.19.2 entry added
  • extensions/git-id-switcher/package.json — version bump
  • package-lock.json — workspace version sync

Test plan

  • npx prettier --check on all touched files
  • npm run lint:all
  • Badge renders correctly on GitHub preview (visual check after merge)
  • grep -r "snyk.io/test/github" returns zero matches in the repo

@nullvariant @claude
fix(git-id-switcher): replace broken Snyk badge with static shield
46be638 
The snyk.io/test/github/*/badge.svg endpoint now returns HTTP 410 Gone
as Snyk retired public badge generation in favor of the app.snyk.io
dashboard (which requires org membership to view).

Replace the broken dynamic badge with a static shields.io
"Snyk monitored" badge linking to snyk.io across the root README,
the extension README, and all 26 i18n translations. Bump
git-id-switcher to 0.19.2.

Signed-off-by: Null;Variant <null@nullvariant.com>

🖥️ IDE: [VS Code](https://code.visualstudio.com/)
🔌 Extension: [Claude Code](https://claude.ai/download)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Model-Raw: claude-opus-4-6
@nullvariant-luna
Copy link
Copy Markdown
Contributor

nullvariant-luna bot commented Apr 14, 2026

👧 Luna's Exploration Report 📦

No new dependencies added. Just version bumps! Nothing to explore here... 😴

Botに418返そうよ！

This report was curiously compiled by nullvariant-luna[bot]

@nullvariant-mimi
Copy link
Copy Markdown
Contributor

nullvariant-mimi bot commented Apr 14, 2026

🐰 Mimi's Validation Report ✅

All checks are looking good! Great job! 🎉

⏳ Some checks are still running. I will keep watching!

バリデーターを通してくださいね

This report was carefully prepared by nullvariant-mimi[bot]

@nullvariant-blaze
Copy link
Copy Markdown
Contributor

nullvariant-blaze bot commented Apr 14, 2026

🐗 Blaze's Release Review 🔥

🔥🔥🔥 VERSION BUMP DETECTED! THIS IS IT! 🔥🔥🔥

✨ PATCH VERSION BUMP in extensions/git-id-switcher/package.json

0.19.1 → 0.19.2

✨ Quick patch! Nice and clean.

よっしゃ！デプロイしまくるぞ！

This review was ENTHUSIASTICALLY filed by nullvariant-blaze[bot]

@nullvariant-slow
Copy link
Copy Markdown
Contributor

nullvariant-slow bot commented Apr 14, 2026

🦥 Slow's Code Review 😩

...yawn... Do I really have to review this?

⚠️ TOO LONG... I can barely keep my eyes open reading these:

File Lines

| extensions/git-id-switcher/src/ui/documentationInternal.ts | 505 |

Split it up... reading long files is exhausting.

働きたくないでござる

This review was reluctantly filed by nullvariant-slow[bot]

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 14, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 46be638.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

package-lock.json

PackageVersionLicenseIssue Type
extensions/git-id-switcher0.19.2NullUnknown License
Allowed Licenses: 0BSD, Apache-2.0, BlueOak-1.0.0, BSD-2-Clause, BSD-3-Clause, CC0-1.0, CC-BY-3.0, CC-BY-4.0, ISC, MIT, PSF-2.0, Python-2.0, Unlicense
Excluded from license check: pkg:githubactions/semgrep/semgrep-action, pkg:githubactions/SocketDev/action, pkg:githubactions/restyled-io/actions, pkg:githubactions/restyled-io/actions/run, pkg:githubactions/restyled-io/actions/setup, pkg:githubactions/SonarSource/sonarqube-scan-action

OpenSSF Scorecard

PackageVersionScoreDetails
npm/extensions/git-id-switcher 0.19.2 UnknownUnknown

Scanned Files

  • package-lock.json

@nullvariant-ciel
Copy link
Copy Markdown
Contributor

nullvariant-ciel bot commented Apr 14, 2026 •
edited
Loading

🕊️ Ciel's Mediation 🌤️

*~~ floating down from the clouds ~~ The zoo seems a bit noisy today...*

4 zoo members have reviewed this PR.

Zoo Member Status
🦥 Slow Commented
🐰 Mimi Commented
👧 Luna Commented
🐗 Blaze Commented

⚖️ The zoo has mixed opinions. Some are concerned, some are fine with it. Please review each comment carefully and make the final call.

まあまあ、ほどほどに。

This mediation was peacefully delivered by nullvariant-ciel[bot]

1 similar comment
@nullvariant-ciel
Copy link
Copy Markdown
Contributor

nullvariant-ciel bot commented Apr 14, 2026

🕊️ Ciel's Mediation 🌤️

*~~ floating down from the clouds ~~ The zoo seems a bit noisy today...*

4 zoo members have reviewed this PR.

Zoo Member Status
🦥 Slow Commented
🐰 Mimi Commented
👧 Luna Commented
🐗 Blaze Commented

⚖️ The zoo has mixed opinions. Some are concerned, some are fine with it. Please review each comment carefully and make the final call.

まあまあ、ほどほどに。

This mediation was peacefully delivered by nullvariant-ciel[bot]

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 14, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Apr 14, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

nullvariant-justice[bot]
nullvariant-justice bot approved these changes Apr 14, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@nullvariant-justice nullvariant-justice bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚖️ Justice grants passage. CI checks passed — this code meets the garden's standards.

@nullvariant nullvariant merged commit 07ace31 into main Apr 14, 2026
42 of 44 checks passed
@nullvariant nullvariant deleted the fix/snyk-badge-replacement branch April 14, 2026 01:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nullvariant-justice nullvariant-justice[bot] nullvariant-justice[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nullvariant