mosaic/stack
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

fix(ci): resolve pipeline #516 audit and test failures #429

Merged
jason.woltje merged 1 commits from fix/pipeline-516-audit-tests into main 2026-02-21 20:11:59 +00:00
Conversation 0 Commits 1 Files Changed 3 +61 -86
jason.woltje commented 2026-02-21 20:08:33 +00:00
Owner
Copy Link

Summary

  • Add pnpm overrides for minimatch (>=10.2.1) and tar (>=7.5.8) to resolve high-severity audit findings blocking CI security-audit step
  • Add localStorage mock to web vitest setup to fix ThemeProvider test failures (localStorage.clear not a function)

Root Cause

Pipeline #516 (manual trigger on main) failed in api, orchestrator, and web steps:

  1. 5 vulnerabilities found
    Severity: 1 low | 4 moderate exits 1 due to minimatch ReDoS vulnerability
  2. 5 web tests fail in ThemeProvider.test.tsx due to missing localStorage mock

Verification

All quality gates pass locally: lint, typecheck, tests for api/orchestrator/web.

Test plan

  • CI pipeline passes on this branch (audit, lint, typecheck, test, build)
  • Merge to main and verify pipeline is green
## Summary - Add pnpm overrides for minimatch (>=10.2.1) and tar (>=7.5.8) to resolve high-severity audit findings blocking CI security-audit step - Add localStorage mock to web vitest setup to fix ThemeProvider test failures (localStorage.clear not a function) ## Root Cause Pipeline #516 (manual trigger on main) failed in api, orchestrator, and web steps: 1. 5 vulnerabilities found Severity: 1 low | 4 moderate exits 1 due to minimatch ReDoS vulnerability 2. 5 web tests fail in ThemeProvider.test.tsx due to missing localStorage mock ## Verification All quality gates pass locally: lint, typecheck, tests for api/orchestrator/web. ## Test plan - [ ] CI pipeline passes on this branch (audit, lint, typecheck, test, build) - [ ] Merge to main and verify pipeline is green
jason.woltje added 1 commit 2026-02-21 20:08:34 +00:00
fix(ci): resolve pipeline #516 audit and test failures
All checks were successful
ci/woodpecker/push/orchestrator Pipeline was successful
Details
ci/woodpecker/push/web Pipeline was successful
Details
ci/woodpecker/push/api Pipeline was successful
Details
8f9eac7a94 
- Add pnpm overrides for minimatch (>=10.2.1) and tar (>=7.5.8)
  to resolve high-severity audit findings blocking CI
- Add localStorage mock to web vitest setup to fix ThemeProvider
  test failures (localStorage.clear not a function)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
jason.woltje merged commit c23ebca648 into main 2026-02-21 20:11:59 +00:00
jason.woltje deleted branch fix/pipeline-516-audit-tests 2026-02-21 20:11:59 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
ai
AI/LLM integration
 api
Backend/API work
 api
auth
Authentication
 database
database
Database/schema work
 devops
Docker/deployment
 docs
Documentation
 frontend
graph
knowledge-module
migration
Data migration
 orchestrator
Orchestrator service (apps/orchestrator/)
 p0
Critical priority
 p1
High priority
 p2
Medium priority
 p3
Low priority
 performance
Performance work
 phase-1
phase-2
phase-3
phase-4
phase-5
plugin
MoltBot plugin work
 search
security
Security-related
 setup
Initial setup
 testing
Testing/QA
 web
Frontend work
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaic/stack#429
Delete Branch "fix/pipeline-516-audit-tests"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?