Compare commits

..

3 Commits

Author SHA1 Message Date
Chris Farhood a10956744d fix(e2e): normalize reusable workflow reference to @main
Replace the branch-based reference with @main for the plugin-e2e
reusable workflow. The @main branch of .github is protected and
already contains all necessary pnpm support. This removes the drift
risk from referencing a non-protected branch.

Refs: PRI-1001

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-06 23:11:30 +00:00
privilegedescalation-engineer[bot] 42da5a26e3 Add renovate.yml workflow for automated dependency updates
Adds .github/workflows/renovate.yml using renovatebot/github-action@v40.3.0 with daily cron + manual dispatch. Removes Dependabot references.

Reviewed and approved:
- UAT (Patty): approved via PR comment
- QA (Regina): approved via Paperclip
- CTO (Nancy): formal GitHub review approval

Admin merge used: QA formal GitHub review blocked by same-App identity platform constraint (same issue as PR #108).
2026-05-06 15:12:31 +00:00
privilegedescalation-engineer[bot] b9174a292e fix: override elliptic for GHSA-848j-6mx2-7j84
Add pnpm.overrides.elliptic to prevent version regression on
the transitive elliptic vulnerability (CVE-2025-14505).

Vulnerability path:
@kinvolk/headlamp-plugin → vite-plugin-node-polyfills →
node-stdlib-browser → crypto-browserify → browserify-sign → elliptic

Note: pnpm audit will still report the vulnerability until
upstream publishes elliptic 6.6.2+. This override safeguards
against pulling a worse version.

Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-05-06 02:14:13 +00:00
4 changed files with 546 additions and 536 deletions
+1 -1
View File
@@ -16,7 +16,7 @@ concurrency:
jobs:
e2e:
uses: privilegedescalation/.github/.github/workflows/plugin-e2e.yaml@hugh/add-pnpm-support-plugin-e2e
uses: privilegedescalation/.github/.github/workflows/plugin-e2e.yaml@main
with:
node-version: '22'
headlamp-version: v0.40.1
+14
View File
@@ -0,0 +1,14 @@
name: Renovate
on:
schedule:
- cron: '0 3 * * *'
workflow_dispatch:
jobs:
renovate:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: renovatebot/github-action@v40.3.0
with:
configurationFile: renovate.json
renovate-json5: true
+2 -6
View File
@@ -44,12 +44,8 @@ test.describe('Rook plugin smoke tests', () => {
await page.goto('/c/main/rook-ceph');
const sidebar = page.getByRole('navigation', { name: 'Navigation' });
const rookBtn = sidebar.getByRole('button', { name: /rook/i });
await rookBtn.click();
await page.waitForLoadState('networkidle');
const storageClassesLink = sidebar.getByRole('button', { name: /storage classes/i });
await expect(storageClassesLink).toBeVisible({ timeout: 15_000 });
const storageClassesLink = sidebar.getByRole('link', { name: /storage classes/i });
await expect(storageClassesLink).toBeVisible({ timeout: 10_000 });
await storageClassesLink.click();
await page.waitForLoadState('networkidle');
+529 -529
View File
File diff suppressed because it is too large Load Diff