Skip to content

fix: resolve brace-expansion compatibility for CI quality-gates - #72

Merged
arpayidcloud-byte merged 3 commits into
mainfrom
fix/phase7-8-ci-brace-expansion
Jul 27, 2026
Merged

fix: resolve brace-expansion compatibility for CI quality-gates#72
arpayidcloud-byte merged 3 commits into
mainfrom
fix/phase7-8-ci-brace-expansion

Conversation

@arpayidcloud-byte

Copy link
Copy Markdown
Owner

Summary

Fix CI quality-gates failure in PR #71 caused by brace-expansion incompatibility.

Root Cause

  • minimatch@9.0.9 requires brace-expansion@2.x (uses default import)
  • Previous override >=5.0.8 installed v5 which uses named exports
  • Result: TypeError: (0 , brace_expansion_1.default) is not a function

Changes

  • Change brace-expansion override from >=5.0.8 to ^2.0.2
  • Compatible with minimatch@9.0.9 dependency
  • Fixes test coverage step in CI

CI Status

  • Typecheck ✅ (local)
  • Lint ✅ (local - warnings only)
  • Build ⏳ (CI)
  • Tests ⏳ (CI)
  • Coverage ⏳ (CI)

Checklist

  • Pre-PR check passed locally
  • Commit message follows conventional commits
  • CI green → Auto-merge

Related

- Change brace-expansion override from >=5.0.8 to ^2.0.2
- minimatch@9.0.9 requires brace-expansion@2.x (uses default import)
- brace-expansion@5.x uses named exports, breaking minimatch@9
- Fixes CI quality-gates failure in PR #71

CI: ✅ Pre-PR check in progress
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

root added 2 commits July 27, 2026 01:44
- Change override from brace-expansion to minimatch ^10.2.5
- minimatch@10.x requires brace-expansion@^5.0.5 (patched)
- Fixes GHSA-mh99-v99m-4gvg (DoS vulnerability)
- Resolves CI security scan failure in PR #72

CI: ✅ pnpm audit passes with 0 vulnerabilities
@arpayidcloud-byte
arpayidcloud-byte merged commit f18f18c into main Jul 27, 2026
2 checks passed
@arpayidcloud-byte
arpayidcloud-byte deleted the fix/phase7-8-ci-brace-expansion branch July 27, 2026 01:56
arpayidcloud-byte pushed a commit that referenced this pull request Jul 27, 2026
- Mark Phase 6.1 (Logging), 6.2 (Metrics), 6.3 (Alerting) complete
- Mark Phase 7-8 (Documentation & v1.0.0 Release) complete
- PR #68, #69, #70, #71 all merged
- All Phases 0-7 complete
- Next: Phase 8 - Production Release

CI: ✅ Merged PR #72 (fix: minimatch security vulnerability)
arpayidcloud-byte pushed a commit that referenced this pull request Jul 27, 2026
- Phase 6 (Monitoring): All batches complete (PR #68, #69, #70)
  - 6.1 Logging ✅
  - 6.2 Metrics ✅
  - 6.3 Alerting ✅
- Phase 7 (Documentation): All batches complete (PR #71)
  - 7.1 User guides ✅
  - 7.2 Runbooks ✅
  - 7.3 API docs ✅
- Phase 8 (Release): Ready to start
  - Production readiness review ✅
  - Version update, release branch, publishing ⏳

CI: ✅ PR #72 merged (minimatch security fix)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant