Skip to content

fix(ci): configure git identity for tests and clear high npm audit advisories - #64

Merged
utx0 merged 9 commits into
mainfrom
metta/fix-ci-first-run-git-identity-npm-audit-high-vulns
Aug 8, 2026
Merged

fix(ci): configure git identity for tests and clear high npm audit advisories#64
utx0 merged 9 commits into
mainfrom
metta/fix-ci-first-run-git-identity-npm-audit-high-vulns

Conversation

@utx0

@utx0 utx0 commented Aug 8, 2026

Copy link
Copy Markdown
Member

Summary

Follow-up to #62: the first CI run failed on both jobs. This fixes both causes.

  • gates job: tests/progress-ceremony-metrics.test.ts failed CI-only because GitHub runners have no git user.name/user.email, so metta install --git-init in temp dirs cannot commit and ceremony metrics report "no data". Root cause confirmed by simulating an identity-less environment locally (6/14 tests fail). Fix: a "Configure git identity" step (github-actions[bot]) before npm test.
  • audit job: two pre-existing high advisories in transitive dev deps — nanoid <=3.3.16 and postcss <=8.5.22. Fix: npm audit fix lockfile bumps (nanoid 3.3.15 → 3.3.18, postcss 8.5.15 → 8.5.26). package.json untouched; npm audit --audit-level=high now exits 0.

Verification

  • Tests: 1859/1859 passing (103 files); tsc/lint/build clean; finalize gates all pass
  • No src/ or test changes — workflow file + lockfile + change artifacts only

🤖 Generated with Claude Code

https://claude.ai/code/session_01AA8wwFpob25iYZFCBBEtKK

ryder and others added 9 commits August 8, 2026 23:47
Tests in progress-ceremony-metrics run `metta install --git-init` in temp
dirs and assert metrics from the resulting initial commit. GitHub-hosted
runners have no git user.name/user.email, so the commit fails and 6 tests
fail CI-only. Configure a bot identity in the gates job before npm test.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AA8wwFpob25iYZFCBBEtKK
…ries

Lockfile-only bumps of transitive dev deps in the vite/vitest toolchain:
nanoid 3.3.15 -> 3.3.18, postcss 8.5.15 -> 8.5.26. Resolves the high
advisories that made the CI audit job exit 1; npm audit --audit-level=high
now exits 0.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AA8wwFpob25iYZFCBBEtKK
…n summary

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AA8wwFpob25iYZFCBBEtKK
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AA8wwFpob25iYZFCBBEtKK
@utx0
utx0 merged commit 3b6b630 into main Aug 8, 2026
1 of 2 checks passed
@utx0
utx0 deleted the metta/fix-ci-first-run-git-identity-npm-audit-high-vulns branch August 8, 2026 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant