Skip to content

Release: 4 features, 3 fixes, 1 doc, 1 refactor, 8 chores → Main#7965

Merged
h0lybyte merged 17 commits intomainfrom
dev
Mar 14, 2026
Merged

Release: 4 features, 3 fixes, 1 doc, 1 refactor, 8 chores → Main#7965
h0lybyte merged 17 commits intomainfrom
dev

Conversation

@github-actions
Copy link
Contributor

@github-actions github-actions bot commented Mar 14, 2026

Release: Dev → Main

17 atomic commits ready for main

Features

Bug Fixes

Documentation

Refactoring

Chores


This PR is automatically maintained by CI — KBVE Studio

* fix(ci): bump lint-and-test timeout from 30m to 120m

The Validate Dev→Main PR lint and test job was exceeding the 30-minute
timeout and getting cancelled.

* fix(ci): bump WASM build timeout to 120m and upgrade download-artifact to v8
@github-actions
Copy link
Contributor Author

github-actions bot commented Mar 14, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 4 package(s) with unknown licenses.
See the Details below.

License Issues

.github/workflows/utils-tauri-build.yml

PackageVersionLicenseIssue Type
actions/download-artifact8.*.*NullUnknown License

packages/rust/soul/Cargo.toml

PackageVersionLicenseIssue Type
solana-client>= 2.3.0, < 3.0.0NullUnknown License
solana-program>= 2.3.0, < 3.0.0NullUnknown License
solana-sdk>= 2.3.0, < 3.0.0NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
actions/actions/download-artifact 8.*.* 🟢 6.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST🟢 10SAST tool is run on all commits
cargo/ahash 0.7.8 🟢 3.8
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Code-Review🟢 6Found 20/30 approved changesets -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/commander 14.0.3 🟢 7
Details
CheckScoreReason
Maintained🟢 107 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 8Found 8/9 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST🟢 10SAST tool is run on all commits
npm/cssnano-utils 5.0.1 🟢 6.5
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/22 approved changesets -- score normalized to 1
Maintained🟢 1016 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 9SAST tool is not run on all commits -- score normalized to 9
npm/lint-staged 16.4.0 UnknownUnknown
npm/postcss-merge-rules 7.0.8 🟢 6.5
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/22 approved changesets -- score normalized to 1
Maintained🟢 1016 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 9SAST tool is not run on all commits -- score normalized to 9
npm/postcss-selector-parser 7.1.1 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 6Found 18/27 approved changesets -- score normalized to 6
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/tinyexec 1.0.4 UnknownUnknown
cargo/solana-client >= 2.3.0, < 3.0.0 UnknownUnknown
cargo/solana-program >= 2.3.0, < 3.0.0 UnknownUnknown
cargo/solana-sdk >= 2.3.0, < 3.0.0 UnknownUnknown

Scanned Files

  • .github/workflows/utils-tauri-build.yml
  • Cargo.lock
  • packages/rust/soul/Cargo.toml
  • pnpm-lock.yaml

@github-actions github-actions bot changed the title Release: 1 fix → Main Release: 1 fix, 1 chore → Main Mar 14, 2026
Increase JUMP_VELOCITY from 8.0 to 11.0 for higher jumps.
Fix Children::iter() type mismatch in name label update system.
@github-actions github-actions bot changed the title Release: 1 fix, 1 chore → Main Release: 2 fixes, 1 chore → Main Mar 14, 2026
Supersedes dependabot PR #7821. Includes bug fixes for layer rule
deduping, selector-parser updates, and performance improvements.
@github-actions github-actions bot changed the title Release: 2 fixes, 1 chore → Main Release: 2 fixes, 2 chores → Main Mar 14, 2026
@github-actions github-actions bot changed the title Release: 2 fixes, 2 chores → Main Release: 2 fixes, 1 doc, 2 chores → Main Mar 14, 2026
…7963)

* feat(data): add universal map proto definition (mapdb.proto)

Single source of truth for world geography across all games. Covers
zones with biomes and terrain generation, tile-based dungeons with room
types and hazards, world objects (trees, rocks, flowers, ores), points
of interest, spawn points with conditional rules, and region grouping.

Auto-generated 517-line mapdb-schema.ts via gen-all.mjs pipeline.

* feat(mapdb): replace hand-written IMapSchema with proto-generated Zod schemas

Migrate astro-kbve mapdb content collection to use WorldObjectDefSchema
from the proto-to-Zod codegen pipeline as the single source of truth.

- Extend mapdb.proto with resource, structure, spawn, and visual fields
- Regenerate mapdb-schema.ts with new field refinements
- Rewrite IMapSchema.ts to merge WorldObjectDefSchema + Astro rendering fields
- Migrate all 15 MDX content files to proto field names (snake_case)
- Replace discriminated resource/structure union with field-presence checks
- Update ServiceMapDB, MapDBPanel, ReactMapDBPanel for unified WorldObjectDef
- Update API routes (mapdb, resources, structures) for new schema shape

* fix(mapdb): correct import path depth and restore Starlight title field

- Fix relative import from IMapSchema.ts to generated mapdb-schema.ts
  (was 4 levels up, needs 6 to reach repo root)
- Add title field to all 15 MDX files (required by Starlight docsLoader)

* fix(codegen): remove unused readdirSync import from gen-all.mjs
@github-actions github-actions bot changed the title Release: 2 fixes, 1 doc, 2 chores → Main Release: 1 feature, 2 fixes, 1 doc, 2 chores → Main Mar 14, 2026
….1.4 (#7969)

Major version bump aligned with styled-components v5+ already in use.
v2 migrates off EOL babel packages and includes bug fixes.
Supersedes dependabot PR #7820.
@github-actions github-actions bot changed the title Release: 1 feature, 2 fixes, 1 doc, 2 chores → Main Release: 1 feature, 2 fixes, 1 doc, 3 chores → Main Mar 14, 2026
Minor version bump with bug fixes and improvements.
Supersedes dependabot PR #7818.
@github-actions github-actions bot changed the title Release: 1 feature, 2 fixes, 1 doc, 3 chores → Main Release: 1 feature, 2 fixes, 1 doc, 4 chores → Main Mar 14, 2026
#7970)

* feat(discordsh): add GitHub token resolver with ENV and vault fallback

Resolve GitHub PAT via env vars (GITHUB_TOKEN, GITHUB_TOKEN_API,
GITHUB_TOKEN_PAT) with first non-empty value winning. Falls back to
Supabase vault lookup by guild ID tag when no env var is set.

Also adds get_secret_by_tag() to VaultClient for tag-based secret
retrieval from the vault-reader Edge Function.

* fix(discordsh): stabilize flaky rage_draught test

The rage_draught_used_then_attack_deals_bonus test panicked ~5% of
the time because the level-1 enemy had a 20% chance to roll Flee as
its next intent after each turn, removing itself from session.enemies.
The test then accessed enemies[0] unconditionally.

Fix: pin initial enemy intent to Defend (avoids side effects from
the UseItem turn) and guard the post-attack assert against the enemy
having fled.
@github-actions github-actions bot changed the title Release: 1 feature, 2 fixes, 1 doc, 4 chores → Main Release: 2 features, 2 fixes, 1 doc, 4 chores → Main Mar 14, 2026
@nx-cloud
Copy link

nx-cloud bot commented Mar 14, 2026

🤖 Nx Cloud AI Fix Eligible

An automatically generated fix could have helped fix failing tasks for this run, but Self-healing CI is disabled for this workspace. Visit workspace settings to enable it and get automatic fixes in future runs.

To disable these notifications, a workspace admin can disable them in workspace settings.


View your CI Pipeline Execution ↗ for commit 9ea8369

Command Status Duration Result
nx e2e astro-e2e ❌ Failed 47s View ↗

☁️ Nx Cloud last updated this comment at 2026-03-14 23:54:31 UTC

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
@github-actions github-actions bot changed the title Release: 2 features, 2 fixes, 1 doc, 4 chores → Main Release: 2 features, 2 fixes, 1 doc, 5 chores → Main Mar 14, 2026
* feat(ci): add Monday e2e scheduled workflow

Weekly full-sweep e2e regression test running every Monday at 06:00 UTC.

Job 1 (discover): dynamically finds all Nx projects with an e2e target
and builds a JSON matrix with per-project runner assignments — Docker-heavy
tests (axum-kbve-e2e, mc-e2e, edge-e2e) go to arc-runner-set, lighter
Playwright/vitest tests stay on ubuntu-latest.

Job 2 (e2e): fans out via the docker-test-app reusable workflow, one
runner per project, fail-fast disabled so all projects run independently.

Job 3 (summary): collects test markers and writes a pass/fail table to
the GitHub Actions step summary.

Also supports workflow_dispatch for on-demand full e2e runs.

* fix(ci): pin GitHub Actions to SHA in Monday e2e workflow

Pin all third-party actions to commit SHAs for supply chain security:
- actions/checkout@v6 → de0fac2e
- actions/setup-node@v6 → 53b83947
- pnpm/action-setup@v4 → fc06bc12
- actions/download-artifact@v8 → 3e5f45b2
Superseded by apps/cryptothrone/astro-cryptothrone since Feb 2025.
No CI, deployment, or cross-project references remain.
…7975)

Migrate astro-kbve itemdb content collection to use ItemSchema from
the proto-to-Zod codegen pipeline as the single source of truth.

- Rewrite IObjectSchema.ts to merge ItemSchema + Astro extensions
- Migrate all 67 MDX files to proto field names:
  ref→id, id→slug, category→type_flags, type removed,
  camelCase→snake_case (pixelDensity→pixel_density, etc.),
  price→buy_price, rarity→lowercase
- Include 'common' in ItemRarity enum (skipUnspecified: false)
- Delete superseded hand-written schemas:
  IBonusSchema, ICraftingSchema, IDeployableSchema, IScriptBindingSchema,
  BonusTypes
- Update ItemDBPanel.astro to use type_flags bitmask with getCategoryNames
- Update itemdb.json.ts API route for new field names (slug replaces ref)
- Update content.config.ts validateItemUniqueness for slug
…class (#7976)

The nb-oauth-discord button is inside a conditionally-rendered React
modal (client:only="react"). The previous test checked page.content()
after domcontentloaded, but the modal DOM doesn't exist until the user
opens it. Now waits for React hydration, clicks the Sign in button to
open the modal, then asserts the Discord OAuth button has the correct
CSS classes.
@github-actions github-actions bot changed the title Release: 2 features, 2 fixes, 1 doc, 5 chores → Main Release: 4 features, 3 fixes, 1 doc, 6 chores → Main Mar 14, 2026
@github-actions github-actions bot changed the title Release: 4 features, 3 fixes, 1 doc, 6 chores → Main Release: 4 features, 3 fixes, 1 doc, 7 chores → Main Mar 14, 2026
… layout (#7977)

Remove React HP/MP/EP progress bars — Bevy orb shaders now serve as the
sole stat display. Reposition mana and energy orbs above action buttons
to fix overlap. Move FPS counter and position HUD down from top edge to
avoid phone notch/status bar cutoff. Add missing --color-ep CSS variable.
@github-actions github-actions bot changed the title Release: 4 features, 3 fixes, 1 doc, 7 chores → Main Release: 4 features, 3 fixes, 1 doc, 1 refactor, 7 chores → Main Mar 14, 2026
- solana-client 2.2.2 → 2.3.13
- solana-sdk 2.2.1 → 2.3.1
- solana-program 2.2.1 → 2.3.0

Supersedes dependabot PRs #7819 and #7165. The 4.x releases have
unresolved upstream compile issues (solana-keypair 3.1.2 + five8 1.0
DecodeError missing std::error::Error impl), so we stay on 2.3.x
which is the latest stable release line.
@github-actions github-actions bot changed the title Release: 4 features, 3 fixes, 1 doc, 1 refactor, 7 chores → Main Release: 4 features, 3 fixes, 1 doc, 1 refactor, 8 chores → Main Mar 14, 2026
@h0lybyte h0lybyte merged commit ea3e251 into main Mar 14, 2026
20 of 21 checks passed
@github-project-automation github-project-automation bot moved this from Review to Done in KBVE Mar 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant