chore(ci): move hydra-gates-ref v1.3.0 -> v1.4.0 - #438
Merged
Conversation
A pinned `hydra-gates-ref` is a silent expiry date on every upstream fix: this repo cannot receive a gate-package change until this line moves. v1.4.0 is the latest tag and the first one that carries `hydra-gates/scripts/axe-run.cjs` (verified absent at v1.3.0), so it is also the first that has ConductionNL/.github#168 axe DOM scoping and ConductionNL/.github#165 gate-46 fix. `enable-axe` is deliberately NOT enabled in this commit. Ordering matters: the ref lands first, enabling axe is a separate decision.
Contributor
Quality Report — ConductionNL/softwarecatalog @
|
| Check | PHP | Vue | Security | License | Tests |
|---|---|---|---|---|---|
| lint | ✅ | ||||
| phpcs | ✅ | ||||
| phpmd | ✅ | ||||
| psalm | ✅ | ||||
| phpstan | ✅ | ||||
| phpmetrics | ✅ | ||||
| eslint | ✅ | ||||
| stylelint | ✅ | ||||
| build | ✅ | ||||
| check-manifest | ✅ | ||||
| check-vue-demi | ✅ | ||||
| test-l10n | ✅ | ||||
| composer | ✅ | ✅ 121/121 | |||
| npm | ✅ | ✅ 849/849 | |||
| PHPUnit | ✅ | ||||
| Newman | ⏭️ | ||||
| Playwright | ✅ | ||||
| Hydra gates | ✅ |
Quality workflow — 2026-08-05 22:03 UTC
Download the full PDF report from the workflow artifacts.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Moves this repo's
hydra-gates-refpin from v1.3.0 to v1.4.0 in.github/workflows/code-quality.yml. One line of config; the rest of the diff is the comment recording why.Why
quality.ymlis consumed at@main, but the gates package is pinned per-caller. A pinned ref is a silent expiry date on every upstream fix — this repo cannot receive a gate-package change until this line moves. That has already bitten this programme twice:v1.0.1predating a batch of fixes, leaving 16 gates dead fleet-wide (ConductionNL/.github#159);require-full-coveragedefault flipped on@mainreached v1.0.1 runners that predate the coverage accounting, producingexit 98(ConductionNL/.github#173).v1.4.0 is the latest tag and is the only tag containing
hydra-gates/scripts/axe-run.cjs— verified absent at v1.3.0, present at v1.4.0. So at v1.3.0 this repo could not useenable-axe: trueat all, and had neither#168's axe DOM scoping nor#165's gate-46 fix.Explicitly not in this PR
enable-axe: trueis not set. Ordering matters: the ref lands first. Enabling axe is a separate decision — a vanilla Nextcloud 34 still reports serious/critical violations on core's own routes that DOM scoping does not remove.Verification
v1.4.0 gates more than v1.3.0, so a
Hydra Gatesverdict that changes here is a real finding, not a sweep artefact. The failing-job set is compared against this repo's owndevelopmentbaseline before merge; genuine gate findings are reported, not silenced.Part of a 15-repo consumer-ref sweep.