feat(changelog): publish curated product updates by waleedlatif1 · Pull Request #8787 · simstudioai/sim

waleedlatif1 · 2026-10-08T06:15:46Z

Summary

Replace raw release bullets with curated product updates. The index presents dates and linked titles in Sim’s shared landing typography, with up to 12 entries and a crawlable archive. Articles hold the useful detail and media, without personal bylines, repeated header summaries, card borders, or visible video descriptions.

Add deployment comparison, fork comparison, and Power BI updates using real product captures and contextual Sim integration/docs links. The two silent videos are edited walkthroughs from actual screenshots; the Power BI image demonstrates configuration without claiming an executed query.
Reuse the EMCN lightbox for screenshots and native controls for video. Keep responsive spacing, theme tokens, keyboard navigation, and accessible media labels.
Serve permanent article URLs, canonical metadata, structured data, sitemap entries, and stable RSS identities from one content registry. Development previews stay noindex and drafts stay off public routes and feeds. Validate media, publication dates, and integration/model/docs backlinks against the corresponding source catalogs.
Document story selection, real media production, editorial ownership, and maintenance. The Sim Internals workflow collects candidates, prepares and reviews drafts, verifies relevant links, preserves editorial edits, prepares actual recording assets, and monitors publication. Private exports and the operations runbook retain the live configuration; publication still requires feature-owner and editor review.
Use the existing trusted-PR checkout cache in the Helm job while preserving full history and the normal fork/push checkout path.

Validation

Browser QA: 320, 390, 768, 1024, and 1280px; light/dark themes; no horizontal overflow; shared lightbox zoom, Escape, and focus restoration; both videos play through and seek; no browser warnings or errors.
Real HTTP checks: canonical/schema consistency, crawlable list/archive links, draft exclusion, RSS identities, sitemap, live docs/integration destinations, and MP4 range responses. The 13-entry archive overflow scenario was also verified earlier in this PR.
Model-link regression cases were demonstrated failing before the fix and passing afterward. Local lint, type-check, all audits, docs manifest, block registry, and all 409 script tests pass. Nineteen workspace tasks passed locally; the duplicate full application run was stopped after more than 20 minutes without a final result. Its route-inventory timeout passed on isolated retry under the unchanged 60-second limit. The full CI test shards passed on this commit.
All 27 active CI checks passed at 038d86a1cb, including build, lint, both full test shards, database integration shards, CLI/SCIM E2E, desktop-live, and packaged Electron smoke. All review threads are resolved.
Live Sim verification: model-link preparation and editorial execution, deployed retry preserving the existing PR’s edited content, and healthy monitoring. Truncated model output fails closed. Captures and product availability remain a human editorial responsibility.

Checklist

Code follows project style guidelines
Self-reviewed my changes
Relevant regression and end-to-end checks completed
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

vercel · 2026-10-08T06:15:52Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Oct 8, 2026 11:56pm UTC

waleedlatif1 · 2026-10-08T06:16:06Z

@greptile

waleedlatif1 · 2026-10-08T06:16:07Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T06:16:13Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

1 issue found across 65 files

Confidence score: 4/5

apps/sim/lib/changelog/media.ts can let a padded src bypass the same-origin check and resolve to an external media URL. Reject tabs and newlines or normalize the value before checking its origin.

Prompt for AI agents (unresolved issues)


Check if these issues are valid — if so, understand the root cause of each and fix them. When an issue isn't valid or won't be fixed in this PR, reply in its thread with the reason and then resolve the thread. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="apps/sim/lib/changelog/media.ts">

<violation number="1" location="apps/sim/lib/changelog/media.ts:7">
P3: The same-origin branch can be bypassed with ASCII tab/newline padding. The URL parser strips tab/newline before resolving, so `src` of `"/\n//evil.com/x.mp4"` passes the guard (starts with `/`, second char is `\n` not `/`) but resolves to `https://evil.com/x.mp4`, defeating the media-origin allowlist and the CSP `media-src` restriction. Strip ASCII tabs/newlines from the string before the prefix check.</violation>
</file>

_{Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic}

greptile-apps · 2026-10-08T06:21:50Z

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; the revised guide preserves saved editor decisions.

Summary

Replaces GitHub release bullets with curated product updates, permanent article pages, an archive, and shared RSS and sitemap content.

Adds reviewed product media, local draft previews, content checks, and publishing guidance.
Proposes a weekly editorial workflow without activating it.
The latest change fixes the earlier saved-decisions concern: the guide now uses inserts for new records and partial updates for existing records.
No new actionable issues were found.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  A[Reviewed MDX and media] --> B[Published content registry]
  B --> C[Latest updates and archive]
  B --> D[Permanent article pages]
  B --> E[RSS and sitemap]
  F[Draft content] --> G[Development-only previews]

_{Reviews (5) · Last reviewed commit: "fix(changelog): preserve editorial decis..." · Reviewed by Greptile}

waleedlatif1 · 2026-10-08T06:55:10Z

@greptile

waleedlatif1 · 2026-10-08T06:55:11Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T06:55:16Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 66 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

waleedlatif1 · 2026-10-08T16:24:49Z

@greptile

waleedlatif1 · 2026-10-08T16:24:51Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T16:24:58Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 66 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

Document scheduled discovery, durable candidate state, draft PR preparation, real-media review, and operational checks. Reuse the existing cached checkout for trusted Helm PR checks while preserving full history.

waleedlatif1 · 2026-10-08T19:08:50Z

@greptile

waleedlatif1 · 2026-10-08T19:08:51Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T19:08:58Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 68 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

waleedlatif1 · 2026-10-08T19:47:50Z

@greptile

waleedlatif1 · 2026-10-08T19:47:52Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-10-08T19:47:58Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 68 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic}

waleedlatif1 requested a review from a team as a code owner October 8, 2026 06:15

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

Comment thread apps/sim/app/changelog.xml/route.ts Outdated

Comment thread apps/sim/lib/changelog/media.ts

vercel Bot deployed to Preview October 8, 2026 06:20 View deployment

waleedlatif1 force-pushed the codex/product-changelog branch from eae55a5 to 4472afc Compare October 8, 2026 06:54

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

vercel Bot deployed to Preview October 8, 2026 07:00 View deployment

waleedlatif1 added 3 commits October 8, 2026 08:09

feat(changelog): publish curated product updates

1652012

fix(changelog): harden feed rendering and media validation

c3696fa

improvement(changelog): present updates in a crawlable list

2bd4360

waleedlatif1 force-pushed the codex/product-changelog branch from 4472afc to 2bd4360 Compare October 8, 2026 16:24

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

vercel Bot deployed to Preview October 8, 2026 16:30 View deployment

improvement(changelog): define the Sim editorial workflow

bbcc878

Document scheduled discovery, durable candidate state, draft PR preparation, real-media review, and operational checks. Reuse the existing cached checkout for trusted Helm PR checks while preserving full history.

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

vercel Bot deployed to Preview October 8, 2026 19:14 View deployment

greptile-apps Bot reviewed Oct 8, 2026

View reviewed changes

Comment thread apps/sim/content/changelog/maintenance-workflow.md Outdated

fix(changelog): preserve editorial decisions in the workflow plan

43ecc20

vercel Bot temporarily deployed to Preview October 8, 2026 19:47 Inactive

cubic-dev-ai Bot reviewed Oct 8, 2026

View reviewed changes

docs(changelog): refine product stories and define editorial quality

6197069

vercel Bot temporarily deployed to Preview October 8, 2026 23:13 Inactive

refactor(changelog): simplify presentation and validate model links

038d86a

vercel Bot deployed to Preview October 8, 2026 23:56 View deployment

waleedlatif1 merged commit d0d00b1 into staging Oct 9, 2026
54 checks passed

waleedlatif1 deleted the codex/product-changelog branch October 9, 2026 00:54

waleedlatif1 mentioned this pull request Oct 9, 2026

v0.9.17: tables ledger, oracle integrations, mship improvements #8853

Open

Conversation

waleedlatif1 commented Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Validation

Checklist

Uh oh!

vercel Bot commented Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

greptile-apps Bot commented Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Confidence Score: 5/5

Summary

Diagram

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

waleedlatif1 commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot commented Oct 8, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

waleedlatif1 commented Oct 8, 2026 •

edited

Loading

vercel Bot commented Oct 8, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

greptile-apps Bot commented Oct 8, 2026 •

edited

Loading