Skip to content
This repository has been archived by the owner on Sep 19, 2024. It is now read-only.

Feat/security update august 2023 #661

Merged
merged 86 commits into from
Aug 23, 2023
Merged

Conversation

0x4007
Copy link
Member

@0x4007 0x4007 commented Aug 23, 2023

Related #622

Cosmetic hotfix for 622 should be merged in next: #636

I had a merge conflict with src/adapters/supabase/helpers/client.ts around line 170-180. I accepted all incoming but I hope it didn't break anything. This should be double checked.

I'm extremely tired but its urgent and here's some context that might be helpful from some diffs.

image

wannacfuture and others added 30 commits July 10, 2023 21:28
Co-authored-by: アレクサンダー.eth <[email protected]>
Co-authored-by: アレクサンダー.eth <[email protected]>
Co-authored-by: アレクサンダー.eth <[email protected]>
Co-authored-by: アレクサンダー.eth <[email protected]>
Co-authored-by: アレクサンダー.eth <[email protected]>
@netlify
Copy link

netlify bot commented Aug 23, 2023

Deploy Preview for ubiquibot-staging ready!

Name Link
🔨 Latest commit a3001a9
🔍 Latest deploy log https://app.netlify.com/sites/ubiquibot-staging/deploys/64e6139940dbe6000847cfe5
😎 Deploy Preview https://deploy-preview-661--ubiquibot-staging.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@0x4007 0x4007 changed the base branch from development to main August 23, 2023 14:12
@netlify
Copy link

netlify bot commented Aug 23, 2023

Deploy Preview for ubiquibot-production ready!

Name Link
🔨 Latest commit 237686b
🔍 Latest deploy log https://app.netlify.com/sites/ubiquibot-production/deploys/64e61cbaa7a66f0008af0510
😎 Deploy Preview https://deploy-preview-661--ubiquibot-production.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@@ -46,3 +57,8 @@ export const pricingLabelLogic = async (): Promise<void> => {
logger.info(`Skipping action...`);
}
};

export const isParentIssue = (body: string) => {
const parentPattern = /-\s+\[( |x)\]\s+#\d+/;
Copy link
Member Author

@0x4007 0x4007 Aug 23, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is just checking for a checklist? This should look for the UI element when GitHub shows that it is a "tracking issue" of other issues?

@wannacfuture bfee1dd rfc

Copy link
Contributor

@wannacfuture wannacfuture Aug 23, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, usually parent issue conatins this string:
- [ ] #issue_number.
and it is checking it via regexp

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like this achieved the specification. I was concerned about this UI element but perhaps it isn't necessary to implement.


return res.status === 204;
} catch (e: unknown) {
logger.error(`Checking if user permisson for repo failed!, reason: ${e}`);
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@0x4007 0x4007 requested a review from 0xcodercrane August 23, 2023 14:55
@0x4007 0x4007 marked this pull request as ready for review August 23, 2023 14:55
@0x4007
Copy link
Member Author

0x4007 commented Aug 23, 2023

Because this is urgent, and because the commits already passed pull request reviews, I'll merge now. If a fatal issue is found please do not hesitate to revert this @0xcodercrane

Retroactive review required

@0x4007 0x4007 merged commit 309022c into main Aug 23, 2023
@0x4007 0x4007 deleted the feat/security-update-august-2023 branch August 23, 2023 14:57
@0xcodercrane
Copy link
Contributor

Because this is urgent, and because the commits already passed pull request reviews, I'll merge now. If a fatal issue is found please do not hesitate to revert this @0xcodercrane

Retroactive review required

I will have a couple of action items against production bot in ubiquibot/production repo.

@0xcodercrane
Copy link
Contributor

These changes have been merged into the development branch as well? or @pavlovcik did a cherry-pick?

@0x4007
Copy link
Member Author

0x4007 commented Aug 24, 2023

I basically just merged from development to main

But I technically did it from my fork. So I branched from development into feat/security-update... and then merged that into this main branch.

@0xcodercrane
Copy link
Contributor

makes sense. you're right.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants