fix(e2e): correct j1 registration assertions to match dev Register.tsx flow

- Registration test: assert 'Check your email' heading (dev shows email verification screen after signUp, no session established) - Sign-in test: use mock routes directly without registration step; dev Login.tsx calls getSession() which the mock provides Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix(e2e): await route mocks and add session mocking to all tests
2026-04-15 21:41:05 +00:00 · 2026-04-15 21:41:05 +00:00 · 2026-04-15 21:41:04 +00:00 · 2026-04-15 21:41:04 +00:00 · 2026-04-15 21:41:04 +00:00 · 2026-04-15 21:41:04 +00:00
4 changed files with 0 additions and 24 deletions
@@ -166,8 +166,6 @@ jobs:
      - name: Scan frontend image for vulnerabilities
        uses: anchore/scan-action@v5
        id: scan
-        env:
-          GRYPE_CONFIG: .grype.yaml
        with:
          image: "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:sha-${{ github.sha }}"
          fail-build: true
@@ -265,8 +263,6 @@ jobs:
      - name: Scan auth image for vulnerabilities
        uses: anchore/scan-action@v5
        id: scan
-        env:
-          GRYPE_CONFIG: .grype.yaml
        with:
          image: "${{ env.REGISTRY }}/${{ env.AUTH_IMAGE_NAME }}:sha-${{ github.sha }}"
          fail-build: true
@@ -347,16 +343,12 @@ jobs:
          load: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
-          build-args: |
-            APT_CACHE_BUST=${{ github.run_id }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Scan receiptwitness image for vulnerabilities
        uses: anchore/scan-action@v5
        id: scan
-        env:
-          GRYPE_CONFIG: .grype.yaml
        with:
          image: "${{ env.REGISTRY }}/${{ env.RECEIPTWITNESS_IMAGE_NAME }}:sha-${{ github.sha }}"
          fail-build: true
@@ -379,8 +371,6 @@ jobs:
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
-          build-args: |
-            APT_CACHE_BUST=${{ github.run_id }}
          cache-from: type=gha

  build-and-push-api:
@@ -439,16 +429,12 @@ jobs:
          load: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
-          build-args: |
-            APT_CACHE_BUST=${{ github.run_id }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Scan api image for vulnerabilities
        uses: anchore/scan-action@v5
        id: scan
-        env:
-          GRYPE_CONFIG: .grype.yaml
        with:
          image: "${{ env.REGISTRY }}/${{ env.API_IMAGE_NAME }}:sha-${{ github.sha }}"
          fail-build: true
@@ -471,8 +457,6 @@ jobs:
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
-          build-args: |
-            APT_CACHE_BUST=${{ github.run_id }}
          cache-from: type=gha

  deploy-dev:
@@ -1,4 +0,0 @@
-ignore:
-  # Python 3.12 CVEs — only fixed in 3.13+, cannot upgrade major version safely
-  - vulnerability: CVE-2025-13836
-  - vulnerability: CVE-2026-4519
@@ -1,6 +1,5 @@
 FROM python:3.12-slim AS build

-ARG APT_CACHE_BUST=0
 RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
    libpq-dev \
    build-essential \
@@ -13,7 +12,6 @@ RUN pip install --no-cache-dir --prefix=/install .

 FROM python:3.12-slim AS prod

-ARG APT_CACHE_BUST=0
 RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends libpq5 && rm -rf /var/lib/apt/lists/*

 WORKDIR /app
@@ -5,7 +5,6 @@ WORKDIR /app

 # build-essential and libpq-dev are needed to compile any C-extension wheels
 # (e.g. psycopg2 fallback).  No git needed — common/ is copied from the repo root.
-ARG APT_CACHE_BUST=0
 RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
    libpq-dev \
    build-essential \
@@ -26,7 +25,6 @@ FROM python:3.12-slim AS prod
 WORKDIR /app

 # Install Playwright system dependencies for Chromium
-ARG APT_CACHE_BUST=0
 RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
    libnss3 \
    libatk1.0-0 \
Author	SHA1	Message	Date
Barcode Betty	c953fabc6b	fix(e2e): correct j1 registration assertions to match dev Register.tsx flow - Registration test: assert 'Check your email' heading (dev shows email verification screen after signUp, no session established) - Sign-in test: use mock routes directly without registration step; dev Login.tsx calls getSession() which the mock provides Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:41:05 +00:00
Barcode Betty	09f88f0bf8	fix(e2e): await route mocks and add session mocking to all tests - Make mockAuthRoutes async and await all page.route() calls to prevent race conditions - Add auth route mocking to J8 unauth tests (required since VITE_MOCK_AUTH was removed) - Add auth route mocking to smoke test - Replace broken mockSessionPending with mockSessionDelayed for spinner test Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:41:05 +00:00
Barcode Betty	f0bbf51486	fix: change remaining text-gray-400 to text-gray-600 on Dashboard stats CAR-676 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:41:04 +00:00
Barcode Betty	716fb4e1b2	fix: change text-gray-400 to text-gray-600 on Dashboard empty state CAR-676 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:41:04 +00:00
Barcode Betty	68420b5f01	fix(e2e): add mock for /auth/session endpoint The J8 test calls /api/auth/session which maps to /auth/session in Better Auth. Adding mock to ensure consistent behavior. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:41:04 +00:00
Barcode Betty	b6da52fb07	fix(e2e): correct Better Auth mock response formats - sign-up returns { token, user } - sign-in returns { redirect, token, user } - get-session returns { session, user } Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:41:04 +00:00
Barcode Betty	5e5f13c5b5	fix(e2e): use more permissive regex patterns for route mocking Use wildcard patterns to match URLs with query parameters or trailing slashes. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:41:04 +00:00
Barcode Betty	c47252a342	fix(e2e): correct Better Auth mock route patterns - Changed sign-up route from /auth/register to /auth/sign-up/email - Changed session route from /auth/session to /auth/get-session Better Auth hits /auth/sign-up/email for registration and /auth/get-session for session checks. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:41:04 +00:00
Barcode Betty	00f3c86276	fix(e2e): replace VITE_MOCK_AUTH with Playwright route mocking - Removed VITE_MOCK_AUTH=true from playwright.config.ts webServer command - Added mockAuthRoutes helper to e2e/fixtures.ts to mock /auth/* endpoints - Updated j1-registration-login.spec.ts to use route mocking instead of env var-based mock auth Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:41:04 +00:00