Aria

Fixed release packaging to ensure the Documentation route is correctly included in distribution archives. This resolves an issue where the /docs endpoint was missing from shipped builds.

Internal: refreshed Quality-Gate Report PDF with backfilled audit data. No changes to template functionality or dependencies.

Packaging hygiene: excluded documentation artifacts (AGENTS.md, docs folder, Word files) from the shipped bundle to reduce package size. Quick-start PDF now included in distribution. No functional changes — update at your convenience.

**Fixed:** useCountUp hook now renders correct initial values during server-side rendering. Previously, SSR and client hydration could produce mismatched DOM, causing layout shift or visual inconsistency on first paint. This fix ensures the counter displays the expected starting value before animation begins.

Dependency hygiene: resolved pnpm.overrides cross-major version mismatches to ensure consistent dependency resolution across the project. No user-facing changes.

Applied P1 visual and documentation polish to the premium audit module: - **Wordmarks**: refined logo rendering and spacing across audit UI - **Blog glyphs**: improved icon consistency and sizing in content preview areas - **activeTeams docs**: clarified team management documentation and examples These updates enhance clarity and visual coherence in the premium audit workflow without requiring any action on your part.

Documentation and internal structure updates: - Migrated Framer Motion imports to Motion (motion/react) for improved tree-shaking and bundle efficiency - Reorganized dashboard pages into reusable component structure for better maintainability No breaking changes or new features in this release.

Dependency maintenance release. Updated project dependencies to latest stable versions for improved security and compatibility.

Minor maintenance release. - **fix(dashboard)**: corrected full-width wrapper layout - **lint(label)**: removed unused eslint-disable directive No breaking changes or new features.

Dependency updates: propagated UI00-BASE #116. Added pnpm.override for qs to mitigate known DoS vector (#174). No breaking changes or new features in this release.

Internal maintenance: synchronized RevealOnScroll `as` prop and useIsMobile singleton hook from UI00-BASE to maintain consistency across the template suite. No breaking changes or new features.

Dependency maintenance: updated non-major dependencies to their latest patch and minor versions. No breaking changes or new features in this release.

Dependency hygiene: updated @types/react to v19.2.15. This patch release includes minor type refinements and maintains compatibility with React 19.2.x.

Dependency management: added pnpm.overrides configuration for ws and brace-expansion@5.x to ensure consistent dependency resolution across the project. No functional changes.

Backported the Skeleton component primitive with integrated dashboard loading.tsx template (#163). This gives you a ready-to-use loading skeleton for dashboard layouts, reducing boilerplate when building perceived-performance patterns. The Skeleton primitive follows ARIA best practices and pairs with Next.js Suspense boundaries for seamless async UI transitions. Use it to scaffold content placeholders while data loads—particularly useful for dashboard cards, tables, and list views. No breaking changes. Drop-in addition to your component library.

Added dynamic OpenGraph image generation using Next.js native `next/og` module. The root `opengraph-image.tsx` now composes brand-aware social preview images automatically, eliminating the need for static fallbacks. This ensures consistent, on-brand preview cards across social platforms and messaging apps when your SaaS links are shared. Image generation respects your template's design tokens and typography. **Update:** No breaking changes. Existing OG meta tags continue to work; the new image endpoint is automatically served by Next.js.

**Navbar & Theme Toggle Improvements** Fixed landmark structure in navbar component with proper `aria-controls` bindings and corrected `aria-pressed` state on theme toggle button. These changes improve screen reader announcements and ensure toggle state is properly exposed to assistive technologies. No breaking changes. Update at your convenience.

Documentation: Updated WCAG accessibility standard references from 2.1 to 2.2 in code comments to reflect current compliance guidelines.

Added `<RevealOnScroll>` component for triggering animations and content reveals when elements enter the viewport. Ideal for below-fold conversion patterns on SaaS landing pages. **What's new:** - `<RevealOnScroll>` wrapper component with configurable trigger thresholds - Pairs with existing animation utilities for staggered reveals - Reduces layout shift and improves perceived performance - Works with Next.js SSR out of the box **Use case:** Animate hero sections, feature cards, and CTAs as users scroll—proven to lift engagement metrics on SaaS homepages.

Documentation: Added Copilot and Codex bot instructions to enforce Renovate dependency management canon (#158). This improves consistency in automated dependency updates across the template but does not affect template functionality or buyer workflows.

Backport: synced family component fixes from UI04 (#115). Internal consistency update with no breaking changes or new features.

Refactored entry animations to CSS-first approach (Phase 1+2 backport from UI04). This reduces JavaScript animation overhead and improves perceived performance on lower-end devices. Animations remain visually identical; the change is purely under the hood for better efficiency and maintainability. No migration needed — update and deploy.

Documentation: removed stale per-kit generate-report.js script (#155). Internal cleanup with no impact on template functionality or buyer workflows.

Documentation: refreshed QG report for v1.7.3 with improved route framing across 34 unique routes. This update clarifies architectural patterns and guidance for the Next.js SaaS template structure.

Resolved three P1 data leaks identified in Phase 7 review (#153). These fixes address sensitive content exposure in demo materials that could have been visible in production builds or shared environments. If you deployed v1.7.1 or v1.7.2 to staging or production, review the affected demo content sections and redeploy with v1.7.3. No code changes required on your end—update and rebuild. **Affected areas:** Demo content modules only. No impact to core template functionality or user-facing components.

Dependency security update: pinned brace-expansion to 1.1.14 to address a known vulnerability in earlier versions. This is a patch-level update with no impact on template functionality or APIs.

Dependency hygiene: removed 3 dead cross-major pnpm.overrides entries (#151). This cleanup reduces lock file noise and improves maintainability without affecting runtime behaviour or the template's feature set.

Added a new dashboard route to the SaaS template, giving you a dedicated entry point for user metrics and account management. This release also resolves critical P1 and P2 issues from Phase 7 (#149), improving overall reliability. **What's new:** - Dashboard route with brand-voice integration - P1 fixes: core functionality stability - P2 fixes: edge-case handling and error recovery No breaking changes. Update at your convenience.

CI: pinned renovatebot/github-action to v46.1.14 for build stability. No template changes.

CI maintenance: upgraded renovatebot/github-action from v40 to v46. This resolves 404 errors in scheduled Renovate runs caused by deprecated v40-tier tag resolution. No changes to template code or dependencies.

Dependency hygiene: updated path-to-regexp to v8. This is a maintenance release with no breaking changes to the template or its public APIs.

Dependency hygiene: updated @types/node to v24.12.4 for improved Node.js type definitions.

Fixed WCAG SC 2.4.7 Focus Visible compliance on three `bg-transparent` input components (#140). Keyboard users will now see clear focus indicators on these inputs, improving navigation clarity and accessibility audit scores. No migration needed — update and deploy.

Dependency hygiene: updated brace-expansion to v5. No breaking changes or feature updates in this release.

Dependency maintenance: pinned basic-ftp security override to v6 and updated non-major dependencies to latest patch versions. No breaking changes or new features in this release.

Dependency hygiene: updated type definitions to latest versions. No breaking changes or new features in this release.

Documentation: finalized quality-gate evidence and compliance records for v1.6.12. No functional changes or dependency updates in this release.

Documentation maintenance: backfilled changelog entries for v1.3.8 through v1.6.10 and corrected structural drift in release documentation. No functional changes to the template or components.

- chore(hero): swap product-demo video assets (#128)

- fix(audit): close cluster of issues from external Claude+ChatGPT v1.6.9 audits (#127)

- fix(hero,premium-audit): land stranded post-#122 work — Pass 2 audit + hero video updates (#126)

- fix(error,404): WebGL ambient glow + clickable collapsed sidebar logo (post-#122 follow-up) (#124) - fix(ambient-glow): guard ResizeObserver for environments without it (#123)

- fix(deps): override fast-uri to >=3.1.2 to close GHSA-q3j6-qgpj-74h6 (#125)

- fix(premium-audit): close all P0 + actionable P1 findings from PREMIUM_AUDIT.md (#122)

- fix(privacy): replace 'Stripe' vendor name with [CUSTOMISE] placeholder (#121)

- fix(a11y): wire ARIA menu pattern on DashboardHeader profile dropdown (#120)

- fix(a11y): jsx-a11y rules + violation fixes + consent backport (#119)

- fix(deps): canonical ^-bounded pnpm.overrides family block (#118)

- chore(ui01): backport ui00-base hardening — workflow canon + mech-review findings (#117)

- feat(auth): client-side validation on register + forgot-password (#114)

- feat(demo): propagate ui00-base demo-banner pattern + buyer-clean auth (#113)

- fix: remove residual audit copy leaks

- feat: complete premium audit polish

- fix(styles): backport input focus rings - fix(chart): use responsive usage chart - fix(content): polish ui01 demo surfaces

- Maintenance release

- fix(deps): update non-major dependencies (#111)

- docs: add UI01 quality gate report docx

- docs: update UI01 Lighthouse summaries (#108)

- Fix sidebar reduced-motion coverage (#107)

- Fix UI01 v1.3.46 review findings (#106)

- Fix UI01 v1.3.45 review advisories (#105)

- Align global error fallback palette (#104)

- Fix UI01 v1.3.43 review findings (#103)

- Fix UI01 v1.3.42 review findings (#102)

- Fix UI01 v1.3.41 review findings

- Fix UI01 v1.3.40 review findings

- Fix UI01 phase 2 review findings

- Fix UI01 phase 2 cleanup findings

- Fix UI01 review cleanup findings

- fix: address ui01 phase 2 review findings

- fix: address ui01 external review cleanup

- fix: announce prompt copy failures (#94)

- fix: address ui01 phase 2 review findings (#93)

- fix: address ui01 external review cleanup (#92)

- fix: address ui01 v1.3.31 final review findings (#91)

- fix: address ui01 phase 2 review findings (#90)

- fix: address ui01 v1.3.29 review cleanup (#89)

- Maintenance release

- fix: address ui01 phase 2 external review findings (#88)

- fix: address ui01 phase 2 review findings (#87)

- fix: address UI01 phase 2 review findings

- Clear UI01 auth brand literal finding (#85)

- Clear UI01 v1.3.23 mechanical findings (#83)

- Fix UI01 review findings (#81)

- fix: clear ui01 v1.3.21 review findings (#80)

- fix: address ui01 external review findings (#79)

- fix: clear ui01 v1.3.19 review findings (#78)

- fix: clear ui01 v1.3.18 review findings

- fix: satisfy ui01 v1.3.17 mechanical review

- fix: clear ui01 v1.3.16 review blockers

- fix: address ui01 te-verify review findings (#73)

- Fix/qg cleanup 20260430 (#72)

- chore(qg): track lighthouse summaries (#70)

- fix(qg): clear dashboard timer warnings (#69)

- docs: document chat-scripts.ts trigger phrases in DEMO_CONTENT.md (#68)

- perf(home): defer below-fold sections behind scroll gate (#67)

- perf(lenis): lazy-load Lenis + GSAP to fix desktop Lighthouse performance (#66)

- fix(llm-review): P2 — motion guards, providers MotionConfig, token consistency, dashboard refactor (#65)

- fix(ui01): fix validate-licence URL and add reduced-motion guards to api-showcase + product-proof - chore(qg): address Copilot findings on PR #63 + add audit-applicability statement - chore(qg): publish v1.3.6 Quality Gate Audit Report (PDF at kit root)

- chore(qg): publish v1.3.6 Quality Gate Audit Report (PDF at kit root) (#63)

- fix(a11y): bump --model-violet/blue lightness to clear WCAG 4.5:1 vs --bg-deep (#62)

- fix(hero): change video container from aspect-video to aspect-square (#61)

- fix(mobile): hide hero trust bar; rebuild pricing compare as stacked cards (#59)

- fix(review): land external-review feedback (Claude Opus 4.7 + ChatGPT 5.5) (#60)

- fix(dashboard): add AI-generated disclosure on dashboard root page (#57)

- feat(ui01): UK + EU + US compliance scaffolding (Quality Gate 17) (#55)

- fix(ui01): second external-review cleanup (demo + a11y) (#51)

- fix(deps): pin dependencies (#53)

- chore(deps): pin dependencies (#52)

- Fix/copilot pr46 followup (#50)

- fix(ui01): address Copilot PR #46 review comments (6 items) (#48)

- fix(ui01): external-review cleanup pass (legal safety + a11y + theme) (#46)

- Maintenance release

- fix(ui01): add poster frame to hero product demo video (#42)

- fix(ui01): full v1.2.16 te-verify-review cleanup (P1+P2+P3) (#40)

- fix(ui01): full v1.2.15 three-way review cleanup (P1+P2+P3) (#38)

- fix(ui01): address 6 blocking P1s from v1.2.14 mechanical + LLM review (#37)

- fix(ui01): address mechanical-review v1.2.13 P2 + P3 findings (#36)

- chore(deps): slim renovate.json to extend org preset (#35)

- chore(ci): remove unused codeql.yml (#34)

- fix(ui01): address external-review blockers on v1.2.10 (#33)

- fix(ui01): backport brand-sweep from ui03 v1.1.15 review

- chore: sync next-env.d.ts

- docs(ui01): sync CUSTOMIZATION.md with the token-level cascade fixes

- refactor(ui01): cascade --brand-glow* and orb tokens from the primitive hue

- refactor(ui01): close one-file-rebrand cascade gaps found during live test

- refactor(ui01): centralise theme in globals.css + document one-file rebrand

- chore: remove all Envato / marketplace references from kit packaging

- docs(ui01): add [1.2.2] CHANGELOG entry covering te-verify follow-up work

- fix(ui01): close propagation gaps from first verification pass (9 residual P1s)

- Maintenance release

- feat(ui01): address 23 P1 blockers from full te-verify-review audit of v1.1.3

- chore(deps): update dependency typescript to v6 (#30)

- chore(ci): remove dead kit-level mechanical-review.yml

- chore(deps): update dependency @types/node to v24 (#27) - chore(deps): update dependency lighthouse to v13 (#29)

- fix(perf,a11y): close lighthouse regressions + regenerate audit docs - feat: accessibility, tokens, demo-content hygiene (v1.0.16–v1.0.19) - fix: demo metrics realism, light-mode tokens, offline fonts (v1.0.15) - chore(renovate): block major GitHub Actions version bumps - fix(deps): update all non-major dependencies

- feat: brand centralisation + GA wiring (v1.0.14)

- docs: tranche A doc accuracy + policy sync (v1.0.13) - chore(renovate): tune config — security PRs any-time, routine bumps Monday mornings only

- chore(ui01): release v1.0.12 - fix(ui01): swap trademarked fictional-universe names for genuinely invented ones - fix(demo-content): replace real org names with fictional in about + blog

- chore(ui01): release v1.0.11 - fix(ui01): scrub remaining demo-content legal risks (te-verify R-001 to R-006)

- chore(ui01): release v1.0.10 - fix(ui01): align package.json version with release tag + guard against drift

- chore(ui01): release v1.0.9 - refactor(ui01): tokenise last hardcoded chart colour - fix(ui01): rephrase footer year comment to avoid mechanical-review FP

- chore(ui01): release v1.0.8 - fix(ui01): polish sweep — footer year, dup asset, cleaner code examples - refactor(ui01): promote hardcoded brand literals to semantic tokens

- chore(ui01): release v1.0.7 - fix(ui01): strip all real-company demo content — P0 legal risk - fix(ui01): chain Mechanical Review inside release.yml

- chore(ui01): release v1.0.6 - fix(ui01): rename demo API key prefix sk-aria → tmpl_aria_ - fix(ui01): a11y — label the three unlabeled inputs flagged by review #19 - fix(ui01): mechanical review findings — v1.0.5 P1s + CodeQL

- chore(ui01): release v1.0.5 - fix(ui01): plug .docs/ + scratch-file leaks in release ZIP; extend CHANGELOG

- feat(ui01): implement premium 3-pane context layout and fix hydration - feat(ui01): implement premium 3-pane context layout and fix hydration - chore: bump to v1.0.3 — clean release with fixed zip excludes - fix: expand zip_excludes to remove dev artifacts from release package