# MER5-4568

## Status

APPROVED

## PHPUnit metrics

| Counter | Coverage |
| --- | --- |
| Tests | 86 passed, 0 failed, 0 skipped, 86 total (`composer test`) |
| Lines | 82.87% (571/689 on `includes/`, excluding `class-snap-blocks.php`; 80% gate PASS via `composer test:coverage`) |

New coverage: `Snap_Finance_Amount_Formatter` and `Snap_Finance_Marketing_Assets` (100% lines/methods) with `CartAmountFormatterTest` and `MarketingAssetsTest`.

## Dependency vulnerabilities

| Dependency / audit source | Source | Advisory / CVE | Severity / CVSS | Classification | Disposition |
| --- | --- | --- | --- | --- | --- |
| OWASP dependency-check-maven | MAVEN | - | Summary: N/A | audit | WooCommerce PHP plugin; no Maven build; OWASP not applicable |
| composer audit | COMPOSER | - | Summary: no advisories | audit | `composer audit` — no security vulnerability advisories found |
| npm audit | NPM | - | Summary: N/A | audit | No module `package.json`; npm not applicable |

## Commit message suggestions

Copy option 1 — Short (subject only)

```txt
MER5-4568 Fix Snap shipping amount validation and static checkout logos (v3.11.0)

Checklist: [x] compiles, [x] local startup, [x] tests/coverage, [x] vulnerable deps (composer audit clean; npm/OWASP N/A)
```

Copy option 2 — Conventional style

```txt
MER5-4568 fix(checkout): two-decimal order-pay amounts and static as-low-as logos

- Add Snap_Finance_Amount_Formatter for shippingAmount/totalAmount Snap payload fields
- Add Snap_Finance_Marketing_Assets with Dark/White SVG checkout option URLs
- Resolve merge wiring in bootstrap and snap-finance-checkout.php; expand README v3.11.0

Checklist: [x] compiles, [x] local startup, [x] tests/coverage, [x] vulnerable deps (composer audit clean; npm/OWASP N/A)
```

Copy option 3 — More concise conventional

```txt
MER5-4568 fix(checkout): Snap shipping decimal fix + static logo CDN paths (3.11.0)

Amount formatter, marketing assets helper, unit tests, merge conflict resolution.

Checklist: [x] compiles, [x] local startup, [x] tests/coverage, [x] vulnerable deps (composer audit clean; npm/OWASP N/A)
```

Copy option 4 — Minimal (ticket + one line)

```txt
MER5-4568 Fix invalid shipping amount and replace S3 logo listing with static as-low-as SVGs.

Checklist: [x] compiles, [x] local startup, [x] tests/coverage, [x] vulnerable deps (composer audit clean; npm/OWASP N/A)
```