Skip to content

Add end-to-end integration test to CI pipeline #524

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Lynndabel wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Add end-to-end integration test to CI pipeline #524

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ab4a87f
Add end-to-end integration test to CI pipeline
Lynndabel Jul 30, 2026
1482ebe
Add Dependabot configuration for automated dependency updates
Lynndabel Jul 30, 2026
505e654
Fix e2e-test script to use public testnet RPC instead of local container
0xNinx Aug 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
154 changes: 154 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,154 @@
version: 2
updates:
# ── npm updates for all workspaces ───────────────────────────────────────
- package-ecosystem: "npm"
directory: "/backend"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
open-pull-requests-limit: 10
reviewers:
- "Lynndabel"
groups:
minor-and-patch:
patterns:
- "*"
update-types:
- "minor"
- "patch"
exclude-patterns:
- "*major*"
Comment on lines +13 to +21

@coderabbitai coderabbitai Bot Aug 3, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== file excerpt =="
cat -n .github/dependabot.yml

echo
echo "== schema/options references in repo (if any) =="
rg -n "exclude-patterns|update-types|version-update:semver-major|ignore:" .github/dependabot.yml README.md . 2>/dev/null | head -200

Repository: Stellar-Ecosystem/lodestar

Length of output: 5195

🌐 Web query:

GitHub Dependabot exclude-patterns update-types version-update semver-major ignore version-update:semver-major documentation

💡 Result:

In GitHub Dependabot configuration, you can use the ignore option to selectively exclude specific types of updates, such as major version releases, by using the update-types key with the value version-update:semver-major [1][2][3]. Key Configuration Details: 1. Ignore Configuration: The ignore block allows you to specify dependencies by name (using wildcards like * if needed) and limit the updates Dependabot performs [1][2][4]. 2. SemVer Filtering: By setting update-types to ["version-update:semver-major"], you tell Dependabot to stop proposing updates that involve major version changes [2][3]. 3. Example Configuration: version: 2 updates: - package-ecosystem: "npm" directory: "/" schedule: interval: "weekly" ignore: - dependency-name: "your-dependency-name" update-types: ["version-update:semver-major"] Important Distinctions: - Grouping vs. Ignoring: Note that update-types is also used within the groups configuration [1][5]. While ignore filters out updates globally or for specific packages [2], grouping's update-types filters determine which versions are aggregated into a single pull request for that specific group [1][6]. - Security Updates: The ignore condition applies specifically to version updates [3]. If security updates are enabled, Dependabot may still open pull requests to address security vulnerabilities, even if they involve a major version change [3]. - Troubleshooting: If you are trying to prevent certain packages from being grouped, use exclude-patterns within your groups configuration [1][6][5]. exclude-patterns is used for filtering dependencies out of a defined group, whereas the top-level ignore configuration is used to stop Dependabot from checking for those updates entirely [1][2].

Citations:

🌐 Web query:

Dependabot allow list exclude list groups update-types exclude patterns ignore documentation

💡 Result:

In dependabot.yml, you can control which dependencies are updated using allow lists, ignore lists, and grouping configurations. Allow and Ignore Lists Dependabot processes these by first identifying dependencies based on your allow list (or all dependencies if no allow list is provided), and then filtering out those that match your ignore list [1][2]. Crucially, if a dependency is matched by both an allow rule and an ignore rule, the ignore rule takes precedence and the dependency is ignored [1][3]. Allow List: Defined using the allow key. It restricts which dependencies are maintained. You can use dependency-type (e.g., direct, indirect, all, production, development) or dependency-name [3][4]. You can also use update-types with allow to restrict updates to specific semantic versioning (SemVer) levels [1][3]. Ignore List: Defined using the ignore key. You can filter by: - dependency-name: Supports wildcard matching using '*' [5][6]. - versions: Ignores specific versions or ranges (using your package manager's syntax) [6][7]. - update-types: Ignores specific SemVer levels (version-update:semver-patch, version-update:semver-minor, or version-update:semver-major) [5][2]. Grouping Configuration The groups key allows you to bundle multiple dependencies into a single pull request [5][8]. - Patterns and Exclude Patterns: Use patterns to include dependencies in a group (supports wildcards) and exclude-patterns to remove specific dependencies from that group [9][4]. - Update-types: Within a group, you can use update-types (minor, patch, major) to further filter which updates are included in that specific group [5][9]. - Applies-to: Specifies whether the group rule applies to version-updates, security-updates, or both (defaults to version-updates) [9][8]. - Priority: Dependabot applies groups in the order they are defined in your configuration file; if a dependency update could belong to more than one group, it is assigned to the first matching group [8].

Citations:

Exclude semantic major updates with ignore.

exclude-patterns only removes dependencies from a group; it does not block major update pull requests. Use ignore with update-types: ["version-update:semver-major"] in each update entry to prevent major updates from being proposed.

📍 Affects 1 file
  • .github/dependabot.yml#L13-L21 (this comment)
  • .github/dependabot.yml#L38-L46
  • .github/dependabot.yml#L63-L71
  • .github/dependabot.yml#L89-L97
  • .github/dependabot.yml#L114-L122
  • .github/dependabot.yml#L140-L148
🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/dependabot.yml around lines 13 - 21, Replace the ineffective
exclude-patterns major-update filtering with an ignore rule using update-types:
["version-update:semver-major"] in every update entry at .github/dependabot.yml
lines 13-21, 38-46, 63-71, 89-97, 114-122, and 140-148; preserve the existing
minor-and-patch grouping.

labels:
- "dependencies"
- "javascript"
commit-message:
prefix: "chore"
include: "scope"

- package-ecosystem: "npm"
directory: "/frontend"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
open-pull-requests-limit: 10
reviewers:
- "Lynndabel"
groups:
minor-and-patch:
patterns:
- "*"
update-types:
- "minor"
- "patch"
exclude-patterns:
- "*major*"
labels:
- "dependencies"
- "javascript"
commit-message:
prefix: "chore"
include: "scope"

- package-ecosystem: "npm"
directory: "/agent"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
open-pull-requests-limit: 10
reviewers:
- "Lynndabel"
groups:
minor-and-patch:
patterns:
- "*"
update-types:
- "minor"
- "patch"
exclude-patterns:
- "*major*"
labels:
- "dependencies"
- "javascript"
commit-message:
prefix: "chore"
include: "scope"

# ── Cargo updates for contracts ───────────────────────────────────────────
- package-ecosystem: "cargo"
directory: "/contract"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
open-pull-requests-limit: 10
reviewers:
- "Lynndabel"
groups:
minor-and-patch:
patterns:
- "*"
update-types:
- "minor"
- "patch"
exclude-patterns:
- "*major*"
labels:
- "dependencies"
- "rust"
commit-message:
prefix: "chore"
include: "scope"

- package-ecosystem: "cargo"
directory: "/contract/agents"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
open-pull-requests-limit: 10
reviewers:
- "Lynndabel"
groups:
minor-and-patch:
patterns:
- "*"
update-types:
- "minor"
- "patch"
exclude-patterns:
- "*major*"
labels:
- "dependencies"
- "rust"
commit-message:
prefix: "chore"
include: "scope"

# ── GitHub Actions updates ───────────────────────────────────────────────
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
open-pull-requests-limit: 10
reviewers:
- "Lynndabel"
groups:
minor-and-patch:
patterns:
- "*"
update-types:
- "minor"
- "patch"
exclude-patterns:
- "*major*"
labels:
- "dependencies"
- "github-actions"
commit-message:
prefix: "chore"
include: "scope"
41 changes: 41 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -147,3 +147,44 @@ jobs:
- name: Run tests
working-directory: agent
run: npm test

# ── End-to-end integration test ───────────────────────────────────────────
e2e-test:
name: End-to-end integration test
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- uses: actions/checkout@v4
with:
persist-credentials: false

- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable
with:
targets: wasm32-unknown-unknown,wasm32v1-none
components: rustfmt

- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: '22'

- name: Install system dependencies for stellar-cli
run: sudo apt-get update && sudo apt-get install -y libdbus-1-dev libssl-dev libudev-dev

- name: Install Stellar CLI
run: cargo install --locked stellar-cli

- name: Build contracts
run: |
cd contract
rustup target add wasm32v1-none
stellar contract build
cd agents
rustup target add wasm32v1-none
stellar contract build

- name: Run end-to-end integration test
run: ./scripts/e2e-test.sh
env:
STELLAR_RPC_URL: https://soroban-testnet.stellar.org
Loading
Loading