Evan JarrettandClaude Opus 5 ee9ccc1fb8 appview: drop crossorigin from the imgs.blue preconnect ...

Connections are keyed by credentials mode. The crossorigin attribute
opened the imgs.blue socket in anonymous-CORS mode, but every request
to that origin is a plain <img src> avatar fetch (BlobCDNURL /
resizeImage) in no-cors mode, so nothing could reuse it. The browser
opened a second connection anyway and Lighthouse flagged the hint as
unused while still listing imgs.blue as a preconnect candidate worth
~300ms of LCP.

The attribute is correct for the font preloads below, which is where it
was likely copied from; comment the distinction so it stays put.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LpqkSRqpcnAjsSZgFTUN5z

2026-08-31 16:57:49 -05:00

..

authgate

auth: let over-quota users delete by granting the non-push subset

2026-08-09 16:49:44 -05:00

db

appview: cover the half of 13edb71 that had no tests

2026-08-25 16:34:26 -05:00

handlers

appview: make the footer Bluesky link configurable

2026-08-25 16:34:26 -05:00

holdclient

appview/holdclient: cover the tier fan-out itself, and its failure path

2026-08-25 16:34:26 -05:00

holdhealth

vuln scanner fixes, major refactor of the credential helper.

2026-02-17 22:38:25 -06:00

holdpurge

appview: support OCI manifest DELETE

2026-08-09 20:54:50 -05:00

jetstream

appview: cover the half of 13edb71 that had no tests

2026-08-25 16:34:26 -05:00

labeler

fix labeler issues

2026-05-09 21:21:20 -05:00

leases

appview: run background workers under a lease

2026-08-11 21:26:46 -05:00

licenses

use for range and wg.Go

2026-01-04 22:39:48 -06:00

middleware

auth: make anonymous pull work, and let the hold decide it

2026-08-10 21:43:32 -05:00

ogcard

more lint fixes. enable autofix

2026-01-06 23:56:17 -06:00

public

add SBOM package diffing, verify hold-service captain records

2026-06-13 12:49:03 -05:00

readme

large list of ui fixes for accessibility/hardening etc.

2026-04-21 21:18:13 -05:00

registryauth

appview: give each registry domain its own JWT service name

2026-08-02 20:40:55 -05:00

routes

appview: make the footer Bluesky link configurable

2026-08-25 16:34:26 -05:00

src

convert alert to modal. go fix the codebase

2026-05-16 11:59:47 -05:00

storage

appview: guard the tag-listing paging that gates a shared-record delete

2026-08-25 16:34:25 -05:00

templates

appview: drop crossorigin from the imgs.blue preconnect

2026-08-31 16:57:49 -05:00

webhooks

webhooks: enforce the entitlement at dispatch time

2026-08-09 21:14:58 -05:00

config_test.go

appview: support OCI manifest DELETE

2026-08-09 20:54:50 -05:00

config.go

appview: make the footer Bluesky link configurable

2026-08-25 16:34:26 -05:00

crypto_keys_test.go

appview: stop the crypto key first-boot race

2026-08-11 21:34:42 -05:00

crypto_keys.go

appview: stop the crypto key first-boot race

2026-08-11 21:34:42 -05:00

domain_routing_test.go

appview: let a registry domain keep its port, and its /v2

2026-08-25 16:34:25 -05:00

overlay_test.go

lots of refactor and cleanup to allow for branding overrides

2026-02-02 22:42:15 -06:00

overlay.go

lots of refactor and cleanup to allow for branding overrides

2026-02-02 22:42:15 -06:00

server.go

appview: stop leasing the billing tier refresh, and let it be cancelled

2026-08-25 16:34:26 -05:00

themes.go

add theme overrides

2026-02-03 20:35:13 -06:00

ui_test.go

minor bug fixes, add ability see starred repos

2026-05-06 21:55:47 -05:00

ui.go

convert alert to modal. go fix the codebase

2026-05-16 11:59:47 -05:00