Skip to content

Conversation

@marrouchi
Copy link
Contributor

@marrouchi marrouchi commented Oct 13, 2025

Motivation

The following PR introduces major updates :

Todo

  • Test mail feature
  • Test Cache and Redis (for both cache and WS)
  • Test Migrations

Type of change:

Please delete options that are not relevant.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

Checklist:

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added unit tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes

@marrouchi marrouchi marked this pull request as draft October 13, 2025 06:33
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Oct 13, 2025

Important

Review skipped

More than 25% of the files skipped due to max files limit. The review is being skipped to prevent a low-quality review.

93 files out of 299 files are above the max files limit of 100. Please upgrade to Pro plan to get higher limits.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dev

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@marrouchi marrouchi changed the title Dev Experimental - major updates Oct 13, 2025
@marrouchi marrouchi changed the title Experimental - major updates Experimental - v3 Oct 15, 2025
@marrouchi marrouchi marked this pull request as ready for review November 19, 2025 15:04
Comment on lines +10 to +53
runs-on: ubuntu-latest
strategy:
matrix:
include:
- package: api
scope: "@hexabot-ai/api"
working-directory: packages/api
- package: cli
scope: "@hexabot-ai/cli"
working-directory: packages/cli
- package: widget
scope: "@hexabot-ai/widget"
working-directory: packages/widget
steps:
- name: Check out repository code
uses: actions/checkout@v4

- name: Setup pnpm
uses: pnpm/action-setup@v4
with:
version: 9.12.0
standalone: true
run_install: false

- name: Set up Node.js
uses: actions/setup-node@v4
with:
node-version: "20"
cache: pnpm
registry-url: "https://registry.npmjs.org/"
env:
NODE_AUTH_TOKEN: ${{ secrets.V3_NPM_TOKEN }}

- name: Install dependencies
run: pnpm install --filter "${{ matrix.scope }}..." --prod=false

- name: Build the package
run: pnpm --filter "${{ matrix.scope }}..." run build

- name: Publish to npm
working-directory: ${{ matrix.working-directory }}
run: npm publish --tag alpha --access public
env:
NODE_AUTH_TOKEN: ${{ secrets.V3_NPM_TOKEN }}

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 3 days ago

The best way to address this issue is to add a permissions block at the root level of the workflow file, specifying the minimal permissions required for this workflow to function. Since none of the jobs appear to modify contents or interact with issues/PRs, only contents: read is necessary. The addition should be made after the name field and before the on: field, applying to all jobs by default.

No code logic, methods, or imports are touched or needed for this fix; it's purely a YAML configuration change.


Suggested changeset 1
.github/workflows/v3-alpha-npm.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/v3-alpha-npm.yml b/.github/workflows/v3-alpha-npm.yml
--- a/.github/workflows/v3-alpha-npm.yml
+++ b/.github/workflows/v3-alpha-npm.yml
@@ -1,4 +1,6 @@
 name: Publish Hexabot V3 Alpha Packages
+permissions:
+  contents: read
 
 on:
   push:
EOF
@@ -1,4 +1,6 @@
name: Publish Hexabot V3 Alpha Packages
permissions:
contents: read

on:
push:
Copilot is powered by AI and may make mistakes. Always verify output.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants