Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
197 commits
Select commit Hold shift + click to select a range
7913a68
[npm]: Bump @types/node from 22.13.0 to 22.13.13
dependabot[bot] Mar 24, 2025
230544c
[npm]: Bump minimongo from 6.19.0 to 7.0.0
dependabot[bot] Mar 24, 2025
5707745
1.2.23
gearbox4026 Mar 24, 2025
ede1e6c
1.2.23
gearbox4026 Mar 24, 2025
d8a099e
Add Jest to recommended extensions
renatodellosso Mar 24, 2025
fae8cec
Add public pit reports
renatodellosso Mar 24, 2025
d1d53f1
Merge branch 'main' into public-pit-reports
renatodellosso Mar 24, 2025
6c3a195
1.2.24
gearbox4026 Mar 24, 2025
cad2790
Add pitReports to stats dependency array
renatodellosso Mar 24, 2025
44b0426
Merge branch 'public-pit-reports' of github.com:Decatur-Robotics/Gear…
renatodellosso Mar 24, 2025
044c48a
Remove unnecessary useCallback dependency in resync in stats
renatodellosso Mar 24, 2025
fcbc481
Merge branch 'main' into dependabot/npm_and_yarn/minimongo-7.0.0
renatodellosso Mar 24, 2025
1c47667
Merge pull request #484 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Mar 24, 2025
5356e6a
Merge branch 'main' into dependabot/npm_and_yarn/minimongo-7.0.0
renatodellosso Mar 24, 2025
9a87352
Merge branch 'main' into public-pit-reports
renatodellosso Mar 24, 2025
349c305
Merge pull request #489 from Decatur-Robotics/public-pit-reports
renatodellosso Mar 24, 2025
7c0c568
Merge pull request #485 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Mar 24, 2025
674e1c7
Added initial tag.
BanEvading Mar 27, 2025
184c577
Updating wording and stying
BanEvading Mar 27, 2025
578e404
Updating styling
BanEvading Mar 27, 2025
1d6a49f
Formatting
BanEvading Mar 27, 2025
67ea9b9
1.2.25
gearbox4026 Mar 27, 2025
6d311e4
Shuffles scouters.
BanEvading Mar 27, 2025
02447c3
Merge pull request #491 from Decatur-Robotics/signin-method-warning
renatodellosso Mar 27, 2025
64f6a66
1.2.25
gearbox4026 Mar 27, 2025
43dffca
Fixes Formatting
BanEvading Mar 27, 2025
7bf66b9
Merge pull request #492 from Decatur-Robotics/randomize-scouters
renatodellosso Mar 27, 2025
5198097
Initted Playwright
renatodellosso Mar 29, 2025
f53844e
Move old tests into tests/unit
renatodellosso Mar 29, 2025
a222904
Config web server for playwright
renatodellosso Mar 29, 2025
7898a8f
Add tests for index page
renatodellosso Mar 29, 2025
766450d
1.2.26
gearbox4026 Mar 29, 2025
c153ece
Update Jest configuration and CI workflows for Playwright tests
renatodellosso Mar 29, 2025
aa1a0af
Merge branch 'e2e-testing' of github.com:Decatur-Robotics/Gearbox int…
renatodellosso Mar 29, 2025
1691b78
Fix package.json formatting
renatodellosso Mar 29, 2025
1a34bce
Don't error if ROLLBAR_TOKEN isn't set
renatodellosso Mar 29, 2025
ae8a167
Update environment configuration and CI workflows for Playwright tests
renatodellosso Mar 29, 2025
a761475
Set up sign in function for e2e tests
renatodellosso Mar 30, 2025
b66169e
Use mongodb in e2e tests
renatodellosso Mar 30, 2025
5aebd52
No more Resend errors when API key is missing
renatodellosso Mar 30, 2025
aa4cf8c
Fewer Rollbar errors, no request helper constructor logs
renatodellosso Mar 30, 2025
a488833
Add API key check in request method and safeguard user ID assignment …
renatodellosso Mar 30, 2025
e510aec
Fix error in allCompetitionsToPairings when TBA is disabled
renatodellosso Mar 30, 2025
bfadfff
Add NextAuth vars to .env.test
renatodellosso Mar 30, 2025
59541de
[npm]: Bump jose from 6.0.8 to 6.0.10
dependabot[bot] Mar 31, 2025
513082d
[npm]: Bump react-icons from 5.4.0 to 5.5.0
dependabot[bot] Mar 31, 2025
8b3bd8b
1.2.26
gearbox4026 Mar 31, 2025
50d8704
1.2.26
gearbox4026 Mar 31, 2025
76d246a
Merge pull request #494 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Mar 31, 2025
18d7a1e
Merge pull request #495 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Mar 31, 2025
0403029
Merge branch 'main' into e2e-testing
renatodellosso Mar 31, 2025
c4410ed
Log Mongo connection string
renatodellosso Mar 31, 2025
3d612e6
Merge branch 'e2e-testing' of github.com:Decatur-Robotics/Gearbox int…
renatodellosso Mar 31, 2025
2b10cb1
Log on mongo connection
renatodellosso Mar 31, 2025
5b57044
Clean up uri determination
renatodellosso Mar 31, 2025
1057545
Changing
BanEvading Mar 31, 2025
76402d2
Making paragraph hidden
BanEvading Mar 31, 2025
008acf3
Fix sign in
renatodellosso Mar 31, 2025
6a38380
Tried to add an xs style, realized one shouldn't exist, not sure what…
BanEvading Mar 31, 2025
1e023b3
Removes the text on xs devices.
BanEvading Mar 31, 2025
cfa49d1
Adds break and makes the thing work
BanEvading Mar 31, 2025
6e7f841
Fixed some profile tests
renatodellosso Mar 31, 2025
f690bf6
Increase retries and workers for CI in Playwright configuration
renatodellosso Mar 31, 2025
9234dd2
almost got it working.
BanEvading Mar 31, 2025
bab7bae
export Reeefscape namespace
BanEvading Mar 31, 2025
3122e3b
got it /functional/ still lots of work to do
BanEvading Mar 31, 2025
eae7332
adding getMaximum
BanEvading Mar 31, 2025
ca22b80
fixing the math in GetMinimum
BanEvading Mar 31, 2025
ee987e3
switch from hardcode to parameter for determining calculated stat
BanEvading Mar 31, 2025
3ccbbe1
Add comments explaining what the functions do.
BanEvading Mar 31, 2025
fab5527
Change GetMaximum variable name from minimum to maximum
BanEvading Mar 31, 2025
e506998
Move labels below.
BanEvading Apr 1, 2025
e481a18
commit
BanEvading Apr 1, 2025
a5953b9
Don't add BASE_URL twice
renatodellosso Apr 1, 2025
3a42155
Add more stats
BanEvading Apr 1, 2025
a571a31
Shard playwright CI tests
renatodellosso Apr 1, 2025
cdb45f2
Remove hardcode in GetMax
BanEvading Apr 1, 2025
65e6b13
Change hardcode in check to based on stat
BanEvading Apr 1, 2025
a78dc1f
Update Playwright test command to use npm script
renatodellosso Apr 1, 2025
fe77851
Complete min/max coverage for auto
BanEvading Apr 1, 2025
e3924a9
Remove faulty stat
BanEvading Apr 1, 2025
36389f9
Update CI workflow to set permissions and modify Playwright test command
renatodellosso Apr 1, 2025
51c018d
Bump version to 1.3.0, add note about requiring individual shard in G…
renatodellosso Apr 1, 2025
e2bf7e6
Complete coverage for teleop.
BanEvading Apr 1, 2025
71f1ea5
Fix Breaking Typos
BanEvading Apr 1, 2025
8754455
Remove invalid stat
BanEvading Apr 1, 2025
bfcd395
Repeat tests in CI
renatodellosso Apr 1, 2025
53f7fdf
Change processor value to be more accurate.
BanEvading Apr 1, 2025
8dc29ae
1.2.27
gearbox4026 Apr 1, 2025
a73b9f9
Changing Types
BanEvading Apr 1, 2025
a3d1f38
Merge branch 'minimums-and-maximums-on-stat-page' of https://github.c…
BanEvading Apr 1, 2025
46fb7da
Remove export from Reefscape namespace
BanEvading Apr 1, 2025
418ff47
Remove import of now non-exported namespace
BanEvading Apr 1, 2025
be6bf80
Merge pull request #496 from Decatur-Robotics/minimums-and-maximums-o…
renatodellosso Apr 1, 2025
7e7324d
Merge branch 'main' into e2e-testing
renatodellosso Apr 1, 2025
0812bce
Fix signUp and signIn being flaky
renatodellosso Apr 1, 2025
3f845bf
Merge branch 'e2e-testing' of github.com:Decatur-Robotics/Gearbox int…
renatodellosso Apr 1, 2025
bcac56f
Tweak line breaks
renatodellosso Apr 1, 2025
563cc8e
Merge pull request #493 from Decatur-Robotics/e2e-testing
renatodellosso Apr 1, 2025
74dbe65
[npm]: Bump next from 15.2.3 to 15.2.4 in the npm_and_yarn group
dependabot[bot] Apr 2, 2025
a9dc744
1.3.1
gearbox4026 Apr 2, 2025
e17052e
Merge pull request #497 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 3, 2025
b086a3d
Add better API error logging
renatodellosso Apr 3, 2025
7e35f6d
Even better API error logging
renatodellosso Apr 3, 2025
9808034
Add avatar editing functionality
renatodellosso Apr 3, 2025
5526712
Ctrl + S
renatodellosso Apr 3, 2025
5aeba61
Add e2e test for avatar editing functionality
renatodellosso Apr 4, 2025
e79b2e6
Ctrl + S & added Title attribute to card
renatodellosso Apr 4, 2025
e1660bb
Add altText prop to Avatar component and add remaining e2e tests for …
renatodellosso Apr 4, 2025
cc3fa30
getAttribute -> toHaveAttribute
renatodellosso Apr 4, 2025
b1cfdb7
Level no longer displays above top bar
renatodellosso Apr 4, 2025
c062c78
Ctrl + S
renatodellosso Apr 4, 2025
3cecea6
Add ViewMatchesModal component and integrate it into CompHeaderCard
renatodellosso Apr 4, 2025
83b438a
Add key prop to ViewMatchCard in ViewMatchesModal
renatodellosso Apr 4, 2025
0baab92
Add export schedule as CSV, style my matches modal
renatodellosso Apr 4, 2025
9dbd7af
[npm]: Bump @eslint/js from 9.18.0 to 9.24.0
dependabot[bot] Apr 7, 2025
a6ae069
1.3.2
gearbox4026 Apr 7, 2025
860d331
[npm]: Bump resend from 4.1.2 to 4.2.0
dependabot[bot] Apr 7, 2025
58946df
1.3.2
gearbox4026 Apr 7, 2025
7c4a9aa
[npm]: Bump eslint-config-next from 15.2.2 to 15.2.4
dependabot[bot] Apr 7, 2025
fa719f0
1.3.2
gearbox4026 Apr 7, 2025
7995a3f
[npm]: Bump @serwist/next from 9.0.11 to 9.0.13
dependabot[bot] Apr 7, 2025
6bbd1f8
1.3.2
gearbox4026 Apr 7, 2025
cd9677b
Merge pull request #499 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 7, 2025
e96aab5
Merge pull request #500 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 7, 2025
9ae0c43
Merge pull request #501 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 7, 2025
132d65b
Merge pull request #502 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 7, 2025
32cad93
Add comment to adapter and fix? Slack profile callback
renatodellosso Apr 10, 2025
fdbf54c
Fix "Profile id is missing in Slack OAuth profile response"
renatodellosso Apr 10, 2025
140a5a2
Conform auth adapter to mongo adapter
renatodellosso Apr 10, 2025
721ffb5
Fix unit tests
renatodellosso Apr 11, 2025
d2e624c
1.3.3
gearbox4026 Apr 11, 2025
9793ab0
Fix sign in
renatodellosso Apr 11, 2025
fc529b3
Merge branch 'conform-auth-adapter-to-mongo-adapter' of github.com:De…
renatodellosso Apr 11, 2025
776abe8
Increase E2E retries in CI
renatodellosso Apr 13, 2025
d554ff1
Decreate CI E2E retries
renatodellosso Apr 13, 2025
c4c0406
[npm]: Bump dotenv from 16.4.7 to 16.5.0
dependabot[bot] Apr 14, 2025
80f0a99
[npm]: Bump prettier from 3.5.0 to 3.5.3
dependabot[bot] Apr 14, 2025
4d6f011
1.3.3
gearbox4026 Apr 14, 2025
c9fd083
1.3.3
gearbox4026 Apr 14, 2025
5c9390a
[npm]: Bump react-chartjs-2 from 5.2.0 to 5.3.0
dependabot[bot] Apr 14, 2025
4129384
1.3.3
gearbox4026 Apr 14, 2025
cb32644
[npm]: Bump typescript from 5.7.3 to 5.8.3
dependabot[bot] Apr 14, 2025
3f4984d
1.3.3
gearbox4026 Apr 14, 2025
79abaaa
Merge pull request #506 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 14, 2025
ff7078d
Merge pull request #507 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 14, 2025
abd0c73
Merge pull request #510 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 14, 2025
ccc440d
Merge branch 'main' into dependabot/npm_and_yarn/react-chartjs-2-5.3.0
renatodellosso Apr 14, 2025
2bd82bb
Merge pull request #509 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 15, 2025
2191041
Merge branch 'main' into conform-auth-adapter-to-mongo-adapter
renatodellosso Apr 17, 2025
286dcc9
Update createTeam.tsx
BanEvading Apr 21, 2025
d3be09a
1.3.4
gearbox4026 Apr 21, 2025
c4ac12c
[npm]: Bump resend from 4.2.0 to 4.3.0
dependabot[bot] Apr 21, 2025
a1f2554
1.3.4
gearbox4026 Apr 21, 2025
94a9723
[npm]: Bump bootstrap from 5.3.3 to 5.3.5
dependabot[bot] Apr 21, 2025
b38333e
1.3.4
gearbox4026 Apr 21, 2025
a5cdb0c
[npm]: Bump @playwright/test from 1.51.1 to 1.52.0
dependabot[bot] Apr 21, 2025
5dbcdc1
1.3.4
gearbox4026 Apr 21, 2025
03091c6
[npm]: Bump formidable from 3.5.2 to 3.5.4 in the npm_and_yarn group
dependabot[bot] Apr 29, 2025
9807dac
1.3.4
gearbox4026 Apr 29, 2025
58210c3
Merge pull request #519 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 29, 2025
e2fdf1c
Merge pull request #517 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 29, 2025
788cd9f
Merge pull request #515 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 29, 2025
d49bbdb
Merge pull request #513 from Decatur-Robotics/dependabot/npm_and_yarn…
renatodellosso Apr 29, 2025
b87ad00
Merge branch 'main' into Minor-Visual-Change
renatodellosso Apr 29, 2025
2b9840a
Fix formatting
renatodellosso Apr 29, 2025
73a7c6d
Merge branch 'main' into conform-auth-adapter-to-mongo-adapter
renatodellosso Apr 29, 2025
08240d2
Improve README
renatodellosso Apr 29, 2025
80c792d
Merge pull request #512 from Decatur-Robotics/Minor-Visual-Change
renatodellosso Apr 29, 2025
801e659
Expand README, remove unneeded extensions
renatodellosso May 1, 2025
e6d1bae
Add history section to README
renatodellosso May 1, 2025
cee908f
Merge branch 'main' into conform-auth-adapter-to-mongo-adapter
renatodellosso May 1, 2025
a000f4c
Merge pull request #504 from Decatur-Robotics/conform-auth-adapter-to…
renatodellosso May 1, 2025
d8a48dc
Revert "Conform auth adapter to Mongo adapter"
renatodellosso May 1, 2025
ed2ae4e
Merge pull request #520 from Decatur-Robotics/revert-504-conform-auth…
renatodellosso May 1, 2025
c4f9f52
Change Dependabot assignee to Colin
renatodellosso May 15, 2025
944e6bb
Started with Decode quantData
Tr01ler Oct 14, 2025
28b3861
Quantdata done + Started on Enums
Tr01ler Oct 14, 2025
83367fa
PitData
Tr01ler Oct 14, 2025
13e303e
pitReportLayout
Tr01ler Oct 16, 2025
44f34ae
Set up th rest of the parts needed for the game and started quant rep…
Tr01ler Oct 16, 2025
b52f7be
Finished quantdata layout
Tr01ler Oct 16, 2025
c3fa9c1
Stats layout done
Tr01ler Nov 6, 2025
611fc48
Added more pit stats!
Tr01ler Nov 19, 2025
dfeb5b9
getBadges and pitStatsLayout finished
Tr01ler Nov 19, 2025
1968a99
getAvgPoints and the inclusion of the depot
Tr01ler Nov 20, 2025
aa05b89
Updates
Tr01ler Dec 9, 2025
8ae7998
Random updates that don't fix the larger issue
Tr01ler Jan 2, 2026
8fc11da
Ruined the post match screen???
Tr01ler Jan 12, 2026
81b7608
Reorganized quantdata
Tr01ler Jan 13, 2026
94d508b
Fixed post match page, added field images
Tr01ler Jan 14, 2026
b74b0d3
1.3.5
gearbox4026 Jan 14, 2026
75715b2
Prettier
Tr01ler Jan 14, 2026
3f79507
Merge branch 'ftc-decode' of https://github.com/Decatur-Robotics/Gear…
Tr01ler Jan 14, 2026
f7efa2d
Made all of the fake users named after numbers since the website we w…
Tr01ler Jan 16, 2026
615915c
Prettier claims to have changed 176 files despite having only actuall…
Tr01ler Jan 16, 2026
8914767
Merge pull request #528 from Decatur-Robotics/ftc-decode
Tr01ler Jan 24, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion .env.production
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,6 @@
NEXT_PUBLIC_API_URL=/api/
NEXT_PUBLIC_SLACK_CLIENT_ID=10831824934.7404945710466
NEXT_PUBLIC_GOOGLE_ANALYTICS_ID=G-1BFJYBDC76
NEXT_PUBLIC_RECAPTCHA_KEY=6Le63OUqAAAAABxxDrbaU9OywDLLHqutVwbw7a9d
NEXT_PUBLIC_RECAPTCHA_KEY=6Le63OUqAAAAABxxDrbaU9OywDLLHqutVwbw7a9d

ENV_FILE=.env.production
17 changes: 15 additions & 2 deletions .env.test
Original file line number Diff line number Diff line change
@@ -1,9 +1,22 @@
NEXT_PUBLIC_API_URL=http://localhost:3000/api
NEXTAUTH_URL=http://localhost:3000/api/
NEXTAUTH_SECRET=testsecret

NEXT_PUBLIC_API_URL=/api/

DEVELOPER_EMAILS=["test@gmail.com"]

TOA_URL=https://example.com
TOA_APP_ID=123
TOA_KEY=456

DEFAULT_IMAGE=https://example.com/default.jpg
API_URL=/api/
API_KEY=gearboxiscool

DEFAULT_IMAGE=https://example.com/default.jpg

BASE_URL_FOR_PLAYWRIGHT=http://localhost:3000/
ENABLE_TEST_SIGNIN_ROUTE=true
FALLBACK_MONGODB_URI=mongodb://127.0.0.1:27017/?directConnection=true&serverSelectionTimeoutMS=2000&appName=mongosh+2.5.10
ENV_FILE=.env.test

DB=playwright_tests
2 changes: 1 addition & 1 deletion .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ version: 2
updates:
- package-ecosystem: "npm" # See documentation for possible values
directory: "/" # Location of package manifests
assignees: ["renatodellosso", "BanEvading"]
assignees: ["Tr01ler"]
schedule:
day: "monday"
interval: "weekly"
Expand Down
6 changes: 6 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -66,3 +66,9 @@ jobs:

- name: Lint
run: npm run lint

e2e_test:
uses: ./.github/workflows/e2e_test.yml
permissions:
contents: read
pull-requests: write
71 changes: 71 additions & 0 deletions .github/workflows/e2e_test.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,71 @@
name: Playwright Tests
on: [workflow_dispatch, workflow_call]
jobs:
e2e_tests:
timeout-minutes: 60
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
# Make sure to require each shard in GitHub!
shardIndex: [1, 2, 3, 4]
shardTotal: [4]
steps:
- uses: actions/checkout@v4

- uses: actions/setup-node@v4
with:
node-version: lts/*

- name: Install dependencies
run: npm ci

- name: Install Playwright browsers
run: npx playwright install --with-deps

- name: Start MongoDB
uses: supercharge/mongodb-github-action@1.12.0
with:
mongodb-version: "8.0"

- name: Run Playwright tests
run: npx cross-env NODE_ENV=test playwright test --shard=${{ matrix.shardIndex }}/${{ matrix.shardTotal }}

- name: Upload blob report to GitHub Actions Artifacts
if: ${{ !cancelled() }}
uses: actions/upload-artifact@v4
with:
name: blob-report-${{ matrix.shardIndex }}
path: blob-report
retention-days: 1

merge_reports:
Comment on lines +5 to +42

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 4 days ago

In general, this issue is fixed by explicitly setting the permissions for the GITHUB_TOKEN at the workflow or job level, instead of relying on organization/repository defaults. For test workflows like this one, contents: read is typically sufficient, as the workflow only checks out code and uses artifacts, and does not need to write to the repository, issues, or pull requests.

The best fix here, without changing existing functionality, is to add a permissions block at the top level of .github/workflows/e2e_test.yml, just below name: (or immediately after on:). This root-level permissions configuration will apply to all jobs (e2e_tests and merge_reports) since neither defines its own permissions. The minimal safe starting point per CodeQL’s suggestion is contents: read, which allows actions/checkout@v4 to function while avoiding unnecessary write access. No additional imports or methods are needed; only the YAML configuration is updated.

Concretely: in .github/workflows/e2e_test.yml, insert:

permissions:
  contents: read

near the top of the file (e.g., after line 2), keeping indentation aligned with name: and on: keys.

Suggested changeset 1
.github/workflows/e2e_test.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/e2e_test.yml b/.github/workflows/e2e_test.yml
--- a/.github/workflows/e2e_test.yml
+++ b/.github/workflows/e2e_test.yml
@@ -1,5 +1,7 @@
 name: Playwright Tests
 on: [workflow_dispatch, workflow_call]
+permissions:
+  contents: read
 jobs:
   e2e_tests:
     timeout-minutes: 60
EOF
@@ -1,5 +1,7 @@
name: Playwright Tests
on: [workflow_dispatch, workflow_call]
permissions:
contents: read
jobs:
e2e_tests:
timeout-minutes: 60
Copilot is powered by AI and may make mistakes. Always verify output.
# Merge reports after playwright-tests, even if some shards have failed
if: ${{ !cancelled() }}
needs: [e2e_tests]

runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with:
node-version: lts/*
- name: Install dependencies
run: npm ci

- name: Download blob reports from GitHub Actions Artifacts
uses: actions/download-artifact@v4
with:
path: all-blob-reports
pattern: blob-report-*
merge-multiple: true

- name: Merge into HTML Report
run: npx playwright merge-reports --reporter html ./all-blob-reports

- name: Upload HTML report
uses: actions/upload-artifact@v4
with:
name: html-report--attempt-${{ github.run_attempt }}
path: playwright-report
retention-days: 14
Comment on lines +44 to +71

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 4 days ago

In general, the fix is to explicitly declare a permissions block in the workflow so that the GITHUB_TOKEN used by jobs has only the minimal scopes required. For this workflow, the jobs check out the code (actions/checkout) and interact with artifacts (actions/upload-artifact, actions/download-artifact). These operations only require contents: read plus the default access that Actions grants for artifacts; no repository write or administrative permissions are needed.

The best minimal fix without changing functionality is to add a top-level permissions block so it applies to all jobs (e2e_tests and merge_reports). This should be placed near the top of .github/workflows/e2e_test.yml, after the on: block, and set contents: read. No other permission scopes appear necessary from the provided snippet. No imports or additional methods are needed; we only modify the YAML workflow definition.

Specifically: edit .github/workflows/e2e_test.yml to insert:

permissions:
  contents: read

between the existing on: [workflow_dispatch, workflow_call] line and the jobs: line. This constrains the GITHUB_TOKEN for all jobs in this workflow while preserving existing behavior.

Suggested changeset 1
.github/workflows/e2e_test.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/e2e_test.yml b/.github/workflows/e2e_test.yml
--- a/.github/workflows/e2e_test.yml
+++ b/.github/workflows/e2e_test.yml
@@ -1,5 +1,7 @@
 name: Playwright Tests
 on: [workflow_dispatch, workflow_call]
+permissions:
+  contents: read
 jobs:
   e2e_tests:
     timeout-minutes: 60
EOF
@@ -1,5 +1,7 @@
name: Playwright Tests
on: [workflow_dispatch, workflow_call]
permissions:
contents: read
jobs:
e2e_tests:
timeout-minutes: 60
Copilot is powered by AI and may make mistakes. Always verify output.
2 changes: 1 addition & 1 deletion .github/workflows/increment_version.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ on:
jobs:
increment:
runs-on: ubuntu-latest
if:
if:
steps:
- name: Checkout
uses: actions/checkout@v4
Expand Down
9 changes: 8 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -41,4 +41,11 @@ next-env.d.ts

# PWA
public/sw.js
public/swe-worker*
public/swe-worker*

# Playwright
node_modules/
/test-results/
/playwright-report/
/blob-report/
/playwright/.cache/
3 changes: 0 additions & 3 deletions .vscode/extensions.json
Original file line number Diff line number Diff line change
@@ -1,10 +1,7 @@
{
"recommendations": [
"ms-azuretools.vscode-docker",
"formulahendry.docker-explorer",
"esbenp.prettier-vscode",
"github.vscode-github-actions",
"mongodb.mongodb-vscode",
"pmneo.tsimporter",
"austenc.tailwind-docs",
"bradlc.vscode-tailwindcss"
Expand Down
Loading