Skip to content

chore(deps): bump bpmn-visualization from 0.44.0 to 0.48.0#51

Merged
tbouffard merged 3 commits into
mainfrom
chore/bump_bpmn-visualization_0.48.0
Jun 30, 2026
Merged

chore(deps): bump bpmn-visualization from 0.44.0 to 0.48.0#51
tbouffard merged 3 commits into
mainfrom
chore/bump_bpmn-visualization_0.48.0

Conversation

@tbouffard

Copy link
Copy Markdown
Member

What

Bump bpmn-visualization from 0.44.0 to 0.48.0 in bpmn-rendering-miwg-test-suite, and adapt the surrounding code and CI.

Changes

  • main.ts: switch from promise chains to async/await for clearer, linear control flow. The fetch and the response.ok check are split so only the fetch is wrapped in try/catch, which avoids a "throw of exception caught locally" warning while preserving the original error behavior.
  • CI: add a build workflow that runs on push to main and on PRs, path-filtered to the subproject so unrelated changes don't trigger it.
  • Supply chain: pin all third-party GitHub Actions to full commit SHAs (with version comments). bonitasoft/* actions are external here since the repo lives under the process-analytics org, so they are pinned too.

Verification

npm run build (tsc && vite build) passes in the subproject.

Bump bpmn-visualization to 0.48.0 in bpmn-rendering-miwg-test-suite and adapt the surrounding code and CI.

- main.ts: switch from promise chains to async/await for clearer, linear control flow. The fetch and the
  response.ok check are split so only the fetch is wrapped in try/catch, avoiding a 'throw caught locally'
  warning while preserving the original error behavior.
- Add a build workflow that runs on push to main and on PRs, path-filtered to the subproject.
- Pin all third-party GitHub Actions to full commit SHAs (with version comments) to harden the supply chain;
  bonitasoft/* actions are external here since the repo lives under the process-analytics org.
@tbouffard tbouffard added dependencies Pull requests that update a dependency (dev or runtime) javascript Pull requests that update javascript code labels Jun 30, 2026
npm ci hung for over 20 minutes in the playwright-chromium postinstall, which downloads a full Chromium
binary. The build job only runs tsc && vite build, which needs the playwright npm package but not the
browser, so skip the download with PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1. The browser is only required by the
generate-screenshots script, which this workflow does not run.
Replace PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD with npm ci --ignore-scripts to prevent the playwright-chromium
postinstall (Chromium download) from hanging the build job. --ignore-scripts is independent of playwright's
env-var naming, which has changed across releases, so it keeps working across future playwright upgrades.
The build only runs tsc && vite build, which needs no install scripts (fsevents is darwin-only).
@tbouffard
tbouffard merged commit 6ae5131 into main Jun 30, 2026
2 checks passed
@tbouffard
tbouffard deleted the chore/bump_bpmn-visualization_0.48.0 branch June 30, 2026 09:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency (dev or runtime) javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant