Compare commits

...

14 Commits

Author SHA1 Message Date
Savannah Savings a9a7db63b8 fix: improve preview server startup detection in lighthouse CI [CAR-937]
CI / lint (pull_request) Successful in 13s
CI / test (pull_request) Successful in 14s
CI / audit (pull_request) Successful in 10s
CI / e2e (pull_request) Successful in 39s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 42s
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 20:46:37 +00:00
Savannah Savings 75700fbb5e fix: increase timeout for preview server in lighthouse CI [CAR-937]
CI / audit (pull_request) Successful in 10s
CI / test (pull_request) Successful in 13s
CI / lint (pull_request) Successful in 14s
CI / e2e (pull_request) Successful in 43s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m53s
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 20:41:58 +00:00
Savannah Savings a729b7e21a fix: add sleep before wait-on to ensure preview server is ready [CAR-937]
CI / audit (pull_request) Successful in 12s
CI / test (pull_request) Successful in 12s
CI / lint (pull_request) Successful in 14s
CI / e2e (pull_request) Successful in 41s
CI / build-and-push (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m20s
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 20:37:53 +00:00
Savannah Savings 4d5a5545e6 fix: use queueMicrotask before setState in VerifyEmail effect [CAR-937]
CI / lint (pull_request) Successful in 12s
CI / e2e (pull_request) Successful in 42s
CI / audit (pull_request) Successful in 11s
CI / test (pull_request) Successful in 13s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m15s
Avoids lint error 'Avoid calling setState() directly within an effect'.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 20:34:29 +00:00
Savannah Savings 92edcc716d chore: trigger CI re-run
CI / audit (pull_request) Successful in 11s
CI / test (pull_request) Successful in 14s
CI / lighthouse (pull_request) Failing after 1m14s
CI / lint (pull_request) Failing after 14s
CI / e2e (pull_request) Successful in 39s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
2026-05-21 20:31:25 +00:00
Savannah Savings aed8d58a94 fix: add overrides for remaining audit vulnerabilities [CAR-937]
CI / e2e (pull_request) Successful in 39s
CI / lighthouse (pull_request) Failing after 1m14s
CI / lint (pull_request) Failing after 13s
CI / test (pull_request) Successful in 12s
CI / deploy-uat (pull_request) Has been skipped
CI / audit (pull_request) Successful in 10s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
- Add @babel/plugin-transform-modules-systemjs >=7.29.4 for GHSA-fv7c-fp4j-7gwp
- Add fast-uri >=3.1.2 for GHSA-q3j6-qgpj-74h6 and GHSA-v39h-62p7-jpjc
- Raise brace-expansion to >=1.1.15 for GHSA-jxxr-4gwj-5jf2

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 20:20:27 +00:00
Savannah Savings f78b9a4cc1 chore: trigger CI re-run after rebase [CAR-937]
CI / lint (pull_request) Successful in 14s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m15s
CI / audit (pull_request) Failing after 11s
CI / test (pull_request) Successful in 12s
CI / e2e (pull_request) Successful in 43s
CI / deploy-dev (pull_request) Has been skipped
2026-05-21 20:14:24 +00:00
Savannah Savings a65bb0ef19 fix: update better-auth to 1.6.11 to resolve GHSA-wxw3-q3m9-c3jr
CI / audit (pull_request) Failing after 11s
CI / test (pull_request) Successful in 12s
CI / lint (pull_request) Successful in 14s
CI / deploy-uat (pull_request) Has been skipped
CI / e2e (pull_request) Successful in 42s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m15s
Resolves moderate severity OAuth state mismatch vulnerability in better-auth.
Updated package-lock.json to reflect patched transitive dependencies.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 20:06:22 +00:00
Savannah Savings 9af0e36db0 Merge pull request 'ci: pin setup-node to SHA to fix Gitea Actions module error [CAR-935]' (#9) from betty/car-935-fix-setup-node into dev
CI / audit (push) Failing after 10s
CI / lint (push) Successful in 13s
CI / deploy-uat (push) Has been skipped
CI / test (push) Successful in 12s
CI / e2e (push) Successful in 38s
CI / build-and-push (push) Failing after 9s
CI / deploy-dev (push) Failing after 33s
CI / lighthouse (push) Failing after 1m18s
CI / lint (pull_request) Successful in 14s
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m13s
CI / audit (pull_request) Failing after 4s
CI / test (pull_request) Successful in 13s
CI / e2e (pull_request) Successful in 42s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
Merge: ci: pin setup-node to SHA to fix Gitea Actions module error [CAR-935]
2026-05-21 19:34:39 +00:00
Savannah Savings 1ffc9466fc ci: pin setup-node to SHA 49933ea5288caeca8642d1e84afbd3f7d6820020
CI / audit (pull_request) Failing after 42s
CI / e2e (pull_request) Successful in 38s
CI / test (pull_request) Successful in 43s
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m13s
CI / lint (pull_request) Successful in 42s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
Fixes 'Cannot find module .../dist/setup/index.js' error in Gitea Actions runner.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 19:25:45 +00:00
Savannah Savings 456e938310 Merge pull request 'chore: move workflows from .github to .gitea' (#5) from barcode-betty/move-workflows-to-gitea into dev
CI / lint (pull_request) Failing after 4s
CI / test (pull_request) Successful in 11s
CI / audit (pull_request) Failing after 11s
CI / e2e (pull_request) Successful in 46s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m13s
chore: move workflows from .github to .gitea (CAR-896)

Merge PR #5 to dev. QA verified by Checkout Charlie.
2026-05-21 12:14:16 +00:00
Savannah Savings 23ddc8b8e2 Merge pull request 'ci: convert GitHub Actions to Gitea Actions (ubuntu-latest)' (#4) from betty/car-869-gitea-actions-app into dev
CI / audit (push) Failing after 11s
CI / test (push) Successful in 13s
CI / lint (push) Successful in 14s
CI / test (pull_request) Successful in 12s
CI / lint (pull_request) Successful in 14s
CI / e2e (push) Successful in 42s
CI / audit (pull_request) Failing after 12s
CI / e2e (pull_request) Successful in 41s
CI / build-and-push (push) Failing after 7s
CI / build-and-push (pull_request) Has been skipped
CI / lighthouse (push) Failing after 1m18s
CI / deploy-uat (push) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / deploy-dev (push) Failing after 27s
CI / lighthouse (pull_request) Failing after 1m16s
ci: convert GitHub Actions to Gitea Actions (ubuntu-latest)

CTO-approved. QA passed. Mechanical CI migration.

cc @cpfarhood
2026-05-21 11:55:47 +00:00
Flea Flicker 5076f12486 chore: move workflows from .github to .gitea
CI / lint (pull_request) Has been cancelled
CI / test (pull_request) Has been cancelled
CI / audit (pull_request) Has been cancelled
CI / e2e (pull_request) Has been cancelled
CI / lighthouse (pull_request) Has been cancelled
CI / build-and-push (pull_request) Has been cancelled
CI / deploy-dev (pull_request) Has been cancelled
CI / deploy-uat (pull_request) Has been cancelled
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 11:54:10 +00:00
Flea Flicker 95466ccfef ci: convert GitHub Actions to Gitea Actions (ubuntu-latest)
CI / audit (pull_request) Failing after 11s
CI / test (pull_request) Successful in 14s
CI / lint (pull_request) Successful in 15s
CI / e2e (pull_request) Successful in 37s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m14s
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-21 04:10:33 +00:00
4 changed files with 912 additions and 963 deletions
@@ -21,10 +21,10 @@ env:
jobs:
lint:
runs-on: runners-cartsnitch
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
with:
node-version: "20"
cache: npm
@@ -35,10 +35,10 @@ jobs:
run: npx tsc --noEmit
test:
runs-on: runners-cartsnitch
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
with:
node-version: "20"
cache: npm
@@ -47,10 +47,10 @@ jobs:
run: npx vitest run
audit:
runs-on: runners-cartsnitch
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
with:
node-version: "20"
cache: npm
@@ -59,10 +59,10 @@ jobs:
run: npm audit --audit-level=high
e2e:
runs-on: runners-cartsnitch
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
with:
node-version: "20"
cache: npm
@@ -71,11 +71,11 @@ jobs:
- run: npx playwright test
lighthouse:
runs-on: runners-cartsnitch
runs-on: ubuntu-latest
needs: [test]
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
with:
node-version: "20"
cache: npm
@@ -87,8 +87,17 @@ jobs:
npx playwright install --with-deps chromium
- name: Start preview server
run: |
npm run preview &
npx wait-on http://localhost:4173/ --timeout 30000
npm run preview -- --port 4173 &
for i in $(seq 1 30); do
if curl -s http://localhost:4173/ > /dev/null 2>&1; then
echo "Server ready on http://localhost:4173/"
exit 0
fi
echo "Waiting for server... ($i/30)"
sleep 2
done
echo "Server failed to start"
exit 1
- name: Run Lighthouse CI
run: |
CHROME_PATH=$(find /home/runner/.cache/ms-playwright -name chrome -type f 2>/dev/null | head -1)
@@ -96,7 +105,7 @@ jobs:
CHROME_PATH="$CHROME_PATH" lhci autorun --chrome-flags="--headless=new --no-sandbox --disable-gpu --disable-dev-shm-usage"
build-and-push:
runs-on: runners-cartsnitch
runs-on: ubuntu-latest
if: github.event_name == 'push'
needs: [lint, test, e2e]
outputs:
@@ -172,11 +181,7 @@ jobs:
only-fixed: "true"
output-format: sarif
- name: Upload frontend scan results to GitHub Security
uses: github/codeql-action/upload-sarif@v3
if: always()
with:
sarif_file: ${{ steps.scan.outputs.sarif }}
- name: Push Docker image
if: github.event_name == 'push'
@@ -196,24 +201,15 @@ jobs:
git push origin "v${{ steps.calver.outputs.version }}"
deploy-dev:
runs-on: runners-cartsnitch
runs-on: ubuntu-latest
needs: [build-and-push]
if: always() && !cancelled() && github.event_name == 'push' && (github.ref == 'refs/heads/dev' || github.ref == 'refs/heads/main')
steps:
- name: Generate GitHub App token
id: app-token
uses: actions/create-github-app-token@v1
with:
app-id: ${{ secrets.CARTSNITCH_APP_ID }}
private-key: ${{ secrets.CARTSNITCH_APP_PRIVATE_KEY }}
owner: ${{ github.repository_owner }}
repositories: infra
- name: Checkout infra repo
uses: actions/checkout@v4
with:
repository: cartsnitch/infra
token: ${{ steps.app-token.outputs.token }}
token: ${{ secrets.GITEA_TOKEN }}
ref: main
path: infra
@@ -249,24 +245,15 @@ jobs:
git push origin main
deploy-uat:
runs-on: runners-cartsnitch
runs-on: ubuntu-latest
needs: [build-and-push]
if: always() && !cancelled() && github.event_name == 'push' && (github.ref == 'refs/heads/uat' || github.ref == 'refs/heads/main')
steps:
- name: Generate GitHub App token
id: app-token
uses: actions/create-github-app-token@v1
with:
app-id: ${{ secrets.CARTSNITCH_APP_ID }}
private-key: ${{ secrets.CARTSNITCH_APP_PRIVATE_KEY }}
owner: ${{ github.repository_owner }}
repositories: infra
- name: Checkout infra repo
uses: actions/checkout@v4
with:
repository: cartsnitch/infra
token: ${{ steps.app-token.outputs.token }}
token: ${{ secrets.GITEA_TOKEN }}
ref: main
path: infra
+881 -921
View File
File diff suppressed because it is too large Load Diff
+3 -1
View File
@@ -48,10 +48,12 @@
"vitest": "^3.2.4"
},
"overrides": {
"@babel/plugin-transform-modules-systemjs": ">=7.29.4",
"@rollup/pluginutils": "5.3.0",
"brace-expansion": ">=1.1.15",
"fast-uri": ">=3.1.2",
"flatted": "^3.4.2",
"serialize-javascript": "7.0.5",
"brace-expansion": ">=1.1.13",
"lodash": ">=4.17.24",
"minimatch": "^10.2.4"
}
+1 -1
View File
@@ -16,7 +16,7 @@ export function VerifyEmail() {
const callbackURL = searchParams.get("callbackURL") || "/";
if (!token) {
setStatus("error");
queueMicrotask(() => setStatus("error"));
return;
}