Merge branch 'main' into claude-bump-scheduler

Author: arielvino

.all-contributorsrc

@@ -499,7 +499,8 @@
       "avatar_url": "https://avatars.githubusercontent.com/u/110767210?v=4",
       "profile": "https://github.com/LeeSkies",
       "contributions": [
-        "code"
+        "code",
+        "review"
       ]
     }
   ]

.storybook/preview.tsx

@@ -118,7 +118,7 @@ const StoryBookWrapper = ({
   }, [darkMode, isDarkTheme, toggleTheme])
 
   useEffect(() => {
-    i18n.changeLanguage(locale)
+    void i18n.changeLanguage(locale)
   }, [locale])
 
   return children

README.md

@@ -109,7 +109,7 @@ We’ve hidden a few fun surprises in the [web app](https://open-bus-map-search.
     <tr>
       <td align="center" valign="top" width="14.28%"><a href="http://www.lastmile.co.il"><img src="https://avatars.githubusercontent.com/u/209318276?v=4?s=100" width="100px;" alt="eithanwes"/><br /><sub><b>eithanwes</b></sub></a><br /><a href="#bug-eithanwes" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/alon-greenshtein"><img src="https://avatars.githubusercontent.com/u/175951799?v=4?s=100" width="100px;" alt="Alon Greenstein"/><br /><sub><b>Alon Greenstein</b></sub></a><br /><a href="#code-alon-greenshtein" title="Code">💻</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/LeeSkies"><img src="https://avatars.githubusercontent.com/u/110767210?v=4?s=100" width="100px;" alt="Lee"/><br /><sub><b>Lee</b></sub></a><br /><a href="#code-LeeSkies" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/LeeSkies"><img src="https://avatars.githubusercontent.com/u/110767210?v=4?s=100" width="100px;" alt="Lee"/><br /><sub><b>Lee</b></sub></a><br /><a href="#code-LeeSkies" title="Code">💻</a> <a href="#review-LeeSkies" title="Reviewed Pull Requests">👀</a></td>
     </tr>
   </tbody>
 </table>

eslint.config.js

@@ -69,7 +69,7 @@ export default [
       '@typescript-eslint/no-explicit-any': 'warn',
       '@typescript-eslint/no-unsafe-call': 'off',
       '@typescript-eslint/no-unsafe-member-access': 'off',
-      '@typescript-eslint/no-floating-promises': 'off',
+      '@typescript-eslint/no-floating-promises': 'error',
       '@typescript-eslint/no-base-to-string': 'off',
       '@typescript-eslint/no-unsafe-assignment': 'off',
       // Prettier

nginx-default.conf

@@ -42,10 +42,11 @@ server {
         # - script-src: no 'unsafe-inline'/'unsafe-eval' (built index.html has no inline scripts); GA/GTM hosts load the analytics scripts.
         # - style-src-elem 'unsafe-inline': MUI/emotion and styled-components inject runtime <style> elements. style-src omits
         #   'unsafe-inline', so inline style="" attributes stay blocked (the app sets none — React style={{}} writes via the CSSOM).
-        # - img-src: openstreetmap tiles, google-analytics beacon pixels.
-        # - connect-src: *.hasadna.org.il for the stride/backend APIs, google-analytics/googletagmanager for analytics.
+        # - img-src: openstreetmap tiles, google-analytics beacon pixels, avatars.githubusercontent.com for the about page's contributor avatars.
+        # - connect-src: *.hasadna.org.il for the stride/backend APIs, google-analytics/googletagmanager for analytics,
+        #   api.github.com for the about page's contributor list.
         # - frame-src: youtube(-nocookie).com instruction videos, docs.google.com hackathon registration form.
         # - frame-ancestors 'self': CSP3 clickjacking control; same effect as the X-Frame-Options SAMEORIGIN above.
-        add_header Content-Security-Policy "default-src 'self'; script-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self'; style-src-elem 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.openstreetmap.fr https://*.openstreetmap.org https://www.google-analytics.com; connect-src 'self' https://*.hasadna.org.il https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://docs.google.com; worker-src 'self' blob:; frame-ancestors 'self';" always;
+        add_header Content-Security-Policy "default-src 'self'; script-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self'; style-src-elem 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.openstreetmap.fr https://*.openstreetmap.org https://www.google-analytics.com https://avatars.githubusercontent.com; connect-src 'self' https://*.hasadna.org.il https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://api.github.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://docs.google.com; worker-src 'self' blob:; frame-ancestors 'self';" always;
     }
 }