Compare commits

..

3 Commits

Author SHA1 Message Date
Chris Farhood a10956744d fix(e2e): normalize reusable workflow reference to @main
Replace the branch-based reference with @main for the plugin-e2e
reusable workflow. The @main branch of .github is protected and
already contains all necessary pnpm support. This removes the drift
risk from referencing a non-protected branch.

Refs: PRI-1001

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-06 23:11:30 +00:00
privilegedescalation-engineer[bot] 42da5a26e3 Add renovate.yml workflow for automated dependency updates
Adds .github/workflows/renovate.yml using renovatebot/github-action@v40.3.0 with daily cron + manual dispatch. Removes Dependabot references.

Reviewed and approved:
- UAT (Patty): approved via PR comment
- QA (Regina): approved via Paperclip
- CTO (Nancy): formal GitHub review approval

Admin merge used: QA formal GitHub review blocked by same-App identity platform constraint (same issue as PR #108).
2026-05-06 15:12:31 +00:00
privilegedescalation-engineer[bot] b9174a292e fix: override elliptic for GHSA-848j-6mx2-7j84
Add pnpm.overrides.elliptic to prevent version regression on
the transitive elliptic vulnerability (CVE-2025-14505).

Vulnerability path:
@kinvolk/headlamp-plugin → vite-plugin-node-polyfills →
node-stdlib-browser → crypto-browserify → browserify-sign → elliptic

Note: pnpm audit will still report the vulnerability until
upstream publishes elliptic 6.6.2+. This override safeguards
against pulling a worse version.

Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-05-06 02:14:13 +00:00
4 changed files with 24 additions and 18 deletions
+1 -1
View File
@@ -18,6 +18,6 @@ jobs:
e2e:
uses: privilegedescalation/.github/.github/workflows/plugin-e2e.yaml@main
with:
node-version: "22"
node-version: '22'
headlamp-version: v0.40.1
e2e-namespace: headlamp-dev
+14
View File
@@ -0,0 +1,14 @@
name: Renovate
on:
schedule:
- cron: '0 3 * * *'
workflow_dispatch:
jobs:
renovate:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: renovatebot/github-action@v40.3.0
with:
configurationFile: renovate.json
renovate-json5: true
+7 -16
View File
@@ -24,14 +24,14 @@ test.describe('Rook plugin smoke tests', () => {
await page.waitForLoadState('networkidle');
await expect(page).toHaveURL(/rook-ceph/);
await expect(page.getByRole('heading', { name: /overview/i }).first()).toBeVisible();
await expect(page.getByRole('heading', { name: /overview/i })).toBeVisible();
});
test('overview page renders content', async ({ page }) => {
await page.goto('/c/main/rook-ceph');
await waitForSidebar(page);
await expect(page.getByRole('heading', { name: /overview/i }).first()).toBeVisible({
await expect(page.getByRole('heading', { name: /overview/i })).toBeVisible({
timeout: 15_000,
});
@@ -42,31 +42,22 @@ test.describe('Rook plugin smoke tests', () => {
test('navigation to storage classes view works', async ({ page }) => {
await page.goto('/c/main/rook-ceph');
const sidebar = page.getByRole('navigation', { name: 'Navigation' });
const rookBtn = sidebar.getByRole('button', { name: /rook/i });
await expect(rookBtn).toBeVisible();
await rookBtn.click();
await page.waitForLoadState('networkidle');
const sidebarAfterClick = page.getByRole('navigation', { name: 'Navigation' });
await expect(sidebarAfterClick).toBeVisible();
const storageClassesLink = sidebarAfterClick.getByRole('link', { name: /storage classes/i });
await storageClassesLink.waitFor({ state: 'visible', timeout: 15_000 });
const storageClassesLink = sidebar.getByRole('link', { name: /storage classes/i });
await expect(storageClassesLink).toBeVisible({ timeout: 10_000 });
await storageClassesLink.click();
await page.waitForLoadState('networkidle');
await expect(page).toHaveURL(/rook-ceph\/storage-classes/);
await expect(page.getByRole('heading', { name: /storage class/i }).first()).toBeVisible({ timeout: 15_000 });
await expect(page.getByRole('heading', { name: /storage class/i })).toBeVisible({ timeout: 15_000 });
});
test('plugin settings page shows rook plugin entry', async ({ page }) => {
await page.goto('/settings/plugins');
await page.waitForLoadState('networkidle');
await page.waitForSelector('table, [class*="PluginList"], [class*="plugin"]', { timeout: 10_000 }).catch(() => {});
const pluginEntry = page.locator('text=/rook/i').first();
const pluginEntry = page.locator('text=rook').first();
await expect(pluginEntry).toBeVisible({ timeout: 30_000 });
});
});
+2 -1
View File
@@ -50,6 +50,7 @@
"tar": "^7.5.11",
"undici": "^7.24.3",
"vite": ">=6.4.2",
"lodash": ">=4.18.0"
"lodash": ">=4.18.0",
"elliptic": ">=6.6.1"
}
}