Repository navigation
chore(deps): bump undici, @release-it/conventional-changelog and release-it - #71
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
…ase-it Bumps [undici](https://github.com/nodejs/undici) to 6.21.2 and updates ancestor dependencies [undici](https://github.com/nodejs/undici), [@release-it/conventional-changelog](https://github.com/release-it/conventional-changelog) and [release-it](https://github.com/release-it/release-it). These dependencies need to be updated together. Updates `undici` from 6.21.1 to 6.21.2 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.21.1...v6.21.2) Updates `@release-it/conventional-changelog` from 10.0.0 to 10.0.1 - [Release notes](https://github.com/release-it/conventional-changelog/releases) - [Commits](release-it/conventional-changelog@10.0.0...10.0.1) Updates `release-it` from 18.1.2 to 19.0.2 - [Release notes](https://github.com/release-it/release-it/releases) - [Changelog](https://github.com/release-it/release-it/blob/main/CHANGELOG.md) - [Commits](release-it/release-it@18.1.2...19.0.2) --- updated-dependencies: - dependency-name: undici dependency-version: 6.21.2 dependency-type: indirect - dependency-name: "@release-it/conventional-changelog" dependency-version: 10.0.1 dependency-type: direct:development - dependency-name: release-it dependency-version: 19.0.2 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/multi-23177d5d9d
branch
from
May 22, 2025 10:15
00a80b7 to
3a965b0
Compare
|
Contributor
Author
|
Superseded by #108. |
HendrikThePendric
added a commit
that referenced
this pull request
Oct 22, 2026
…98) * fix: open apps outside the global shell and log in via the auth API Since DHIS2 2.42 the legacy app paths the scrape instructions point to (dhis-web-data-visualizer, dhis-web-maps, api/apps/line-listing, dhis-web-event-visualizer, dhis-web-event-reports) are redirected to /apps/<name>, where the global shell loads the app in an iframe. The scraper only searches the top-level document, so every item timed out (E2201) and no dashboard could be converted on 2.42+. Every goto step now opens <app>/index.html with redirect=false, the bypass the global shell itself uses for its iframe (GlobalShellFilter in dhis2-core). On 2.41 there is no shell and the parameter is ignored. The admin login clicked the login button and returned immediately, while the login app's POST /api/auth/login was still in flight. Work that arrived in that window (right after a service start, a worker replacement or a re-login) failed impersonation with a 401 (E2301). The worker now posts to /api/auth/login itself and only continues once loginStatus is SUCCESS. This endpoint exists since 2.41.0 and no longer depends on the login app's markup. Verified with a local Docker stack per version (2.41.10, 2.42.6, 2.43.2 and master) using the Sierra Leone e2e dump. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * refactor: resolve SonarCloud findings in the scraper and authenticator Run scrape steps through a promise chain instead of awaiting inside a loop, mark fields that are only set in the constructor as readonly, return the empty result directly from the async convert method, and use node: imports and Number.parseInt. No behaviour change. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix: request translated dashboard names with translate=true The dashboard details are fetched as the service account with the recipient's locale as a query parameter. Since DHIS2 2.42 the locale parameter only takes effect together with translate=true (UserContextInterceptor, introduced with DHIS2-18061 / DHIS2-18044), while 2.41 translated by default. Without it the dashboard title and item headings were rendered in the service account's language instead of the recipient's. Verified on 2.42.6 (nb recipient now gets the Norwegian dashboard and item names) and on 2.41.10 (unchanged). AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * refactor: mark RequestHandler fields that are only set in the constructor as readonly Resolves the SonarCloud finding on the file touched by the translate fix. No behaviour change. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * refactor: restore the step loop and explain the same-origin page in the login Address review feedback: go back to the sequential for...of loop for the scrape steps (the reduce-based version only existed to satisfy SonarCloud S9382, the steps must run in order) and explain why the login first opens /api/ping on the DHIS2 origin. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * refactor: run the scrape steps as a promise chain Go back to the reduce-based sequential promise chain for the scrape steps. SonarCloud S9382 flags awaits inside a for...of loop, but the steps must run strictly in order, which a promise chain expresses without the per-iteration awaits. Agreed in review as the preferred shape over accepting the findings. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * refactor: set redirect=false inline instead of in a helper Address review feedback: the global shell filter skips the redirect for both directory-root and index.html paths when redirect=false is in the query string, so rewriting the path to index.html is unnecessary. That leaves two lines, which now live inline in the goto step, and removes the toStandaloneAppUrl helper and its tests. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix: click scrape step targets through the DOM Puppeteer's page.click dispatches a mouse event at the element's centre coordinates and leaves the mouse there. On the next conversion a worker could load a pivot table with its Period chip under that stale mouse position, so the chip's tooltip opened on top of the "HTML (.html)" menu item. The click then landed on the tooltip, no download tab opened and waitForTarget timed out after 30s (E2201). Calling element.click() in the page clicks the intended element regardless of overlays and never moves the mouse. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore: run the e2e suite across DHIS2 versions and fix setup decay (#92) * chore: run the e2e suite across DHIS2 versions and fix setup decay The nightly e2e run has failed since January 2026: analytics tables were only generated for the last year, and the dump's data ends in 2025, so no analytics table was created and the generation script still reported success. The dump also cannot be upgraded past 2.41, the DHIS2 health check relies on curl which the 2.44 image no longer ships, and two cluster integration tests count a worker message that can arrive after the response. - Generate analytics from ANALYTICS_FIRST_YEAR (default 2025) onwards and fail when DHIS2 reports an error - Replace the DHIS2 container health check with a wait script in the post-install container - Run the nightly suite for core-dev 2.41, 2.42, 2.43 and master, building the service image from the checked out code - Wait for trailing worker messages in the single and parallel request integration tests, as the worker exit test already does - Document the corrected dump in DB.md (limited service account, fixed periods, receivers group, null org unit cleanup) AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore: resolve SonarCloud findings in the nightly workflow and setup scripts Pin the third-party actions in the nightly workflow to full commit SHAs and use [[ ]] for the retry checks in the setup scripts. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore: add a script that creates the e2e database dump Address review feedback that producing a new dump was manual, finicky work. scripts/create-e2e-db-dump.sh starts DHIS2 on the stock Sierra Leone database and applies every change the e2e suite relies on: the service account, test users and their user groups, the "One of everything" dashboard, Norwegian translations and locale, fixed periods in DATA_YEAR, email and push analytics settings, no HTTP caching, and the push analytics jobs. It then dumps the database without analytics tables. DB.md documents the script and what it changes. The new dump is published on the 1.0.4 release as dump-2.41-2025.sql.gz and .env.e2e points at it. ANALYTICS_FIRST_YEAR moves into .env.e2e so it stays in step with the dump's data year. The fixtures are regenerated from this dump for dhis2/core:2.41 and for core-dev 2.41, 2.42, 2.43 and master. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore: take the push analytics URL template from the e2e environment Resolve SonarCloud S5332 (clear-text protocol) in the dump script: the URL template is now built in docker/e2e-db/docker-compose.yml from HOST and PORT in .env.e2e instead of being a literal in the script. The resulting system setting is unchanged. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> * fix: reload the app page after a user switch or a failed conversion A worker kept the previously loaded app document when it switched the impersonated user or when a conversion failed, because subsequent goto steps only change the hash. A stuck app then failed every later item on that worker. Navigating to about:blank first forces a full page load; the codebase had no existing helper for forcing a document reload. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix: retry a failed app conversion once When several workers open Data Visualizer for the same new user at the same time, each one tries to create the user's analytics userDataStore keys. All but one get a 409, DV throws an uncaught error and the item times out. A single retry starts from a full page load, by which time the keys exist, so the app loads normally. The codebase has no shared retry helper, so the retry stays local to the scraper. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix: log the underlying error when the admin login fails The login path now throws an AuthenticationError carrying the DHIS2 loginStatus, but establishNonExpiringAdminSession caught it and rethrew a generic message, so the actual cause never reached the logs. Log the caught error first. Carried over from #90, whose form-login change no longer applies now that login goes through /api/auth/login. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * test: let each integration test cluster listen on a free port All integration test files bound the mock cluster to port 1337, and node --test runs files in parallel, so three of the four binds failed. supertest 7.1 masked this by silently re-listening the failed server on a random port; supertest 7.3 records the late EADDRINUSE and fails the request with it. Listening on port 0 gives every file its own port. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore(deps): update dependencies within their current major versions Brings every dependency to its latest release within the current major, plus the dev-only majors nock 15 and globals 17, and refreshes the lockfile with npm update and npm audit fix (84 -> 48 audit findings). Supersedes dependabot PRs #69, #76, #82, #83, #84, #85, #87, #88, #89. Puppeteer now types the pageerror payload as Error | unknown, so logPageEvents reads the message only from an Error instance. Kept out as larger changes: release-it 19+ (#71), puppeteer 25, typescript 7, eslint 10, commitlint 21, lint-staged 17, dotenv 18 and @types/node 26. AI Assisted Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: Hendrik de Graaf <HendrikThePendric@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps undici to 6.21.2 and updates ancestor dependencies undici, @release-it/conventional-changelog and release-it. These dependencies need to be updated together.
Updates
undicifrom 6.21.1 to 6.21.2Release notes
Sourced from undici's releases.
Commits
b63d939Bumped v6.21.2de1e4b8[v6.x] fix wpts on windows (#4093)4e07ddatest: fix windows wpt (#4050)1333871Removed clients with unrecoverable errors from the Pool (#4088)a0e76c7fix(types): add missing DNS interceptor (#4024)Updates
@release-it/conventional-changelogfrom 10.0.0 to 10.0.1Release notes
Sourced from
@release-it/conventional-changelog's releases.Commits
f91e44fRelease 10.0.13e9f528Add dummy config file in testa2f5059Support release v19587be05Add note aboutconventional-changelog-conventionalcommitsoverride (#110)bf27526docs: Show that whatBump accepts a function for recommending the new version ...Updates
release-itfrom 18.1.2 to 19.0.2Release notes
Sourced from release-it's releases.
... (truncated)
Changelog
Sourced from release-it's changelog.
... (truncated)
Commits
a7869c9Release 19.0.2ebfc5a2Update dependenciesa012da6Bumpengines.nodefrom 20.9 → 20.12 (resolves #1219)5ac9ebcRelease 19.0.12cb4a7eDon't throw if no config file is foundb787318Release 19.0.041dfaaeHousekeeping6f8150av18 → v19cbe2fa6Update dependencies1ef2e54Release 19.0.0-next.5You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.