diff --git a/.changeset/pin-swagger-dark-theme.md b/.changeset/pin-swagger-dark-theme.md new file mode 100644 index 000000000..bbfff014b --- /dev/null +++ b/.changeset/pin-swagger-dark-theme.md @@ -0,0 +1,7 @@ +--- +'fets': patch +--- + +Pin the Swagger UI dark-theme CSS to an immutable jsDelivr GitHub commit + +The dark stylesheet is loaded from `cdn.jsdelivr.net/gh/Itz-fork/Fastapi-Swagger-UI-Dark@868ea5da…` with SRI, so upstream default-branch changes cannot invalidate the integrity hash or swap the file silently. diff --git a/.changeset/swagger-ui-sri.md b/.changeset/swagger-ui-sri.md index 9817dafea..8b93c946b 100644 --- a/.changeset/swagger-ui-sri.md +++ b/.changeset/swagger-ui-sri.md @@ -4,4 +4,4 @@ Pin Swagger UI CDN assets and load them with Subresource Integrity (SRI) -Swagger UI previously pulled unversioned `unpkg.com/swagger-ui-dist` scripts/styles without integrity checks. Assets are now pinned to `swagger-ui-dist@5.11.0` (and the dark theme CSS) and loaded via ``/`