ci: coverage, dependabot, stale bot, PR size labeler, ESLint, Semgrep SAST, and Gremlin custom provider#23
Open
silvertakana wants to merge 10 commits into
Open
ci: coverage, dependabot, stale bot, PR size labeler, ESLint, Semgrep SAST, and Gremlin custom provider#23silvertakana wants to merge 10 commits into
silvertakana wants to merge 10 commits into
Conversation
…WS_AUTH mode
- Added authBypassed flag to track whether authentication was established via
SKIP_WS_AUTH bypass (no real JWT verification)
- When authBypassed is true, auth messages are accepted for post-welcome JWT
verification but the connection is never closed on failure
- Valid JWT in bypass mode logs 'Auth verified post-welcome for userId: {sub}'
and upgrades authBypassed to false
- Invalid JWT in bypass mode logs warning and keeps connection open
- Normal mode (SKIP_WS_AUTH=false) behavior unchanged
- Added websocket-skip-auth.spec.ts with 5 tests covering:
- Immediate welcome without auth in SKIP_WS_AUTH mode
- Valid JWT auth post-welcome (logs verified, stays open)
- Invalid JWT auth post-welcome (logs warning, stays open)
- Subscribe without auth in SKIP_WS_AUTH mode
- Re-auth forbidden after JWT upgrade
- All 29 tests pass (4 test files) - TypeScript build succeeds with no errors
- Switch model from deepseek/deepseek-v4-flash to litellm/deepseek-v4-flash - Replace DEEPSEEK_API_KEY with OPENAI_API_KEY (same LITELLM_API_KEY secret) - Add OPENCODE_CONFIG_CONTENT defining litellm provider routing through https://llm2.worldwideview.dev/v1
silvertakana
changed the title
Welcome to Codecov 🎉Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests. ℹ️ You can also turn on project coverage checks and project coverage reporting on Pull Request comment Thanks for integrating Codecov - We've got you covered ☂️ |
silvertakana
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds Tier 2 CI improvements (coverage, dependabot, stale bot, PR size labeler), ESLint + Semgrep static analysis tooling, and fixes the Gremlin OpenCode fix workflow to use a custom LiteLLM provider via OPENCODE_CONFIG_CONTENT.
Changes
Coverage Reporting
Dependency Management
Stale Bot
PR Size Labeler
ESLint Flat Config
Semgrep SAST
Gremlin Custom Provider (existing, updated)
Housekeeping