chore(deps): bump ora from 5.4.1 to 9.4.0#4
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
CodingKylo
added a commit
that referenced
this pull request
May 17, 2026
Adds a 7th `doctor` check that warns when the git-remote-inferred repo
isn't in the team's recently-assessed set. Catches the failure mode that
wasted ~2 hours of debug time over the past two days: a stale `git
remote` (e.g. after an org rename) makes every CLI call return
SCOPE_VIOLATION with no obvious clue that `git remote -v` is the culprit.
Mechanism: derives monitored-repo set from `list_recent_assessments`
(cheap DB read, no LLM). Compares against `readRemoteOriginUrl()`'s
output after canonicalising both sides via `normaliseRepoSlug` (strip
trailing `.git`, lowercase, trim). Always returns `skip` or `warn`,
never `fail` — doctor is informational, not a gate.
Other hardening from gate iteration:
- `.gitignore` now excludes `*.tgz` so `npm pack` artefacts don't get
accidentally committed.
- Backend lookup catches ALL errors and degrades to `skip` so a
transient backend issue can't make `doctor` exit non-zero in CI.
- The swallow logs the error CLASS (`err.constructor.name`) to stderr,
never `err.message`, in case upstream errors ever embed request
context that includes the Authorization header.
- Format contract documented inline so a future maintainer doesn't
silently break the `owner/repo` comparison.
16 jest tests cover every status branch + the normalisation case
(`Owner/Repo.git` mixed-case+suffix against backend's `owner/repo`).
GATE OVERRIDE: pre_commit_check scored 74/high/safe=false at commit
time, above the team's 60 auto-block threshold. Override authorised by
operator (explicit decision). The remaining gate findings are
design-philosophy meta-concerns (cross-vendor URL parsing robustness,
extra MCP call latency on a diagnostic command, observability
tradeoffs); none flag actual incorrect behaviour. Reasoning:
- Manually verified end-to-end from both monitored and non-monitored
cwd — produces correct `ok` and `warn` outputs with actionable copy.
- 16/16 unit tests pass including normalisation drift case.
- The doctor command is run ad-hoc, not in a CI hot loop — the extra
MCP call (~300ms p50) is not a latency concern in its actual use.
- The original issue (CLI Finding #4 — stale git remote causing
silent SCOPE_VIOLATION) is preventatively closed; the hardening
finds the problem before users do.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/ora-9.4.0
branch
from
8adf0ae to
a38ae41
Compare
Bumps [ora](https://github.com/sindresorhus/ora) from 5.4.1 to 9.4.0. - [Release notes](https://github.com/sindresorhus/ora/releases) - [Commits](sindresorhus/ora@v5.4.1...v9.4.0) --- updated-dependencies: - dependency-name: ora dependency-version: 9.4.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/ora-9.4.0
branch
from
a38ae41 to
f2492bb
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps ora from 5.4.1 to 9.4.0.
Release notes
Sourced from ora's releases.
... (truncated)
Commits
46a67039.4.03d2e0a9AddsuccessSymbolandfailSymboloptions tooraPromisef70f613Test tweaks7cf29a7Validate some options better44963629.3.02ab4f76Reduce flicker in rendering8d17b13Add FAQ item4cf47fcAdd more tests fordiscardStdin9763e60Document Ctrl+C behavior for discardStdin5408a1e9.2.0