Skip to content

fix(quill): smaller changes, more consistent, more stable#54375

Merged
adamleithp merged 10 commits intomasterfrom
quill/small-changes
Apr 13, 2026
Merged

fix(quill): smaller changes, more consistent, more stable#54375
adamleithp merged 10 commits intomasterfrom
quill/small-changes

Conversation

@adamleithp
Copy link
Copy Markdown
Contributor

Problem

Fixing some inconsistencies

Changes

Too many

How did you test this code?

No

adamleithp and others added 6 commits April 13, 2026 12:55
@posthog/quill-tokens@0.1.0-alpha.2 is already on npm, which was
blocking republish with a 403. Bump both @posthog/quill and
@posthog/quill-tokens to 0.1.0-alpha.3 so the next workflow run has a
fresh version to publish. Also add `stamphog` as a third option on
the workflow_dispatch `tag` input so the publish workflow can target
that dist-tag.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
le again, re-work fill-* colors to be neutral
 particularly fill-hover
@assign-reviewers-posthog assign-reviewers-posthog bot requested a review from a team April 13, 2026 22:41
@adamleithp adamleithp removed the request for review from a team April 13, 2026 22:42
@socket-security
Copy link
Copy Markdown

socket-security bot commented Apr 13, 2026

@socket-security
Copy link
Copy Markdown

socket-security bot commented Apr 13, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
High CVE: npm @hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware

CVE: GHSA-wc8c-qw6v-h7f6 @hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware (HIGH)

Affected versions: < 1.19.10

Patched version: 1.19.10

From: pnpm-lock.yamlnpm/@hono/node-server@1.19.9

ℹ Read more on: This package | This alert | What is a CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@hono/node-server@1.19.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps bot commented Apr 13, 2026

Prompt To Fix All With AI
This is a comment left during a code review.
Path: packages/quill/packages/primitives/src/button.stories.tsx
Line: 45

Comment:
**Incorrect label on disabled button**

The button in the first `<div>` is rendered `disabled` but labeled `"Selected"` — the second `<div>` correctly uses `"Disabled"`. This makes the story misleading when comparing the two backgrounds side-by-side.

```suggestion
                <Button disabled>Disabled</Button>
```

How can I resolve this? If you propose a fix, please make it concise.

---

This is a comment left during a code review.
Path: packages/quill/apps/storybook/.storybook/main.ts
Line: 19-34

Comment:
**Pending rebuild dropped when a change arrives during an active rebuild**

If a token file is saved while `rebuilding` is `true`, the debounce timer fires 100 ms later, `rebuild()` returns early, and the pending change is silently lost. The developer must save the file again to pick up the change.

A simple fix is to queue one deferred rebuild:

```typescript
const rebuild = (server: ViteDevServer): void => {
    if (rebuilding) {
        rebuildPending = true
        return
    }
    rebuildPending = false
    rebuilding = true
    const proc = spawn('pnpm', ['exec', 'tsx', 'src/build.ts'], {
        cwd: tokensRoot,
        stdio: 'inherit',
        shell: true,
    })
    proc.on('exit', (code) => {
        rebuilding = false
        if (code === 0) {
            server.ws.send({ type: 'full-reload' })
        }
        if (rebuildPending) {
            rebuild(server)
        }
    })
}
```

(Also declare `let rebuildPending = false` alongside `let rebuilding = false`.)

How can I resolve this? If you propose a fix, please make it concise.

Reviews (1): Last reviewed commit: "formatting" | Re-trigger Greptile

adamleithp and others added 2 commits April 13, 2026 23:44
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
@adamleithp adamleithp added the stamphog Request AI review from stamphog label Apr 13, 2026
Copy link
Copy Markdown

@stamphog stamphog bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Gates denied this PR because it touches CI/CD workflows and dependency/toolchain files, which require human review. The author is also not on the owning team for the affected files.

@stamphog stamphog bot removed the stamphog Request AI review from stamphog label Apr 13, 2026
@adamleithp adamleithp added the stamphog Request AI review from stamphog label Apr 13, 2026
stamphog[bot]

This comment was marked as outdated.

@stamphog stamphog bot removed the stamphog Request AI review from stamphog label Apr 13, 2026
@adamleithp adamleithp changed the title fix(quill): small changes fix(quill): smaller changes, more consistent, more stable Apr 13, 2026
@adamleithp adamleithp merged commit 2bec876 into master Apr 13, 2026
158 checks passed
@adamleithp adamleithp deleted the quill/small-changes branch April 13, 2026 22:57
@deployment-status-posthog
Copy link
Copy Markdown

deployment-status-posthog bot commented Apr 13, 2026

Deploy status

Environment Status Deployed At Workflow
dev ✅ Deployed 2026-04-13 23:25 UTC Run
prod-us ✅ Deployed 2026-04-14 02:41 UTC Run
prod-eu ✅ Deployed 2026-04-14 02:45 UTC Run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants