release: promocionar develop a main (e5d66ba2) - #769
Merged
Merged
Conversation
sync: enlazar en develop el commit de la promoción #752 (develop..main vacío)
…c/apps re-analice con CodeQL El job `CodeQL SAST` de este workflow es el único que sube el análisis de CodeQL para `refs/heads/main` (categoría `/language:javascript-typescript`, la que gobierna las alertas del tab Security): las corridas de pull request son diff-informed y no mueven las alertas de la rama, y «Code Quality: Push on main» es otra suite. Con el filtro de `push` limitado a `src/sdk/cli/**`, la promoción 19d736d del 2026-09-19 (solo src/packages y src/apps) llegó a main sin análisis: el tab siguió mostrando 10 alertas sobre código que ya no existía hasta un `gh workflow run sdk-cli-ci.yml --ref main` a mano, dos veces en la misma tarde (19d736d, c554711). El filtro pasa a cubrir `src/packages/**` y `src/apps/**`, que es lo que CodeQL escanea. Sigue habiendo filtro: un push que no toque código no gasta la corrida. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
…nftest (EN/ES) La portada decía «no sustituye a ArchUnit, Conftest ni dependency-cruiser; los complementa» sin decir en qué se diferencian. Es lo primero que busca quien evalúa la herramienta, y sin tabla lo rellena con lo que supone. Nueva sección «How it compares» / «Cómo se compara» entre «What is inside» y «What it is not», enlazada en la navegación: nueve filas (qué lee, lenguaje de reglas, dónde viven, qué pasa con una regla que no se evaluó, código de salida, superficies, reglas desde ADRs, alcance de lenguaje, licencia). Cada celda ajena está verificada contra la documentación de la herramienta el 2026-09-19, no recordada: - ArchUnit: `archRule.failOnEmptyShould` activo por defecto — falla una regla cuyo `should` recibe un conjunto vacío (userguide §Configuration). Se le reconoce, porque es el pariente más cercano de nuestro `skipped`. - dependency-cruiser: `severity: ignore` no comprueba la regla; el reporter `err` sale con el número de violaciones `error` (doc/rules-reference.md, doc/cli.md). - Conftest: exit 1 solo con fallos; `--fail-on-warn` → 0/1/2; políticas compartibles con `conftest pull` git/OCI (docs/options.md, docs/sharing.md). La columna de Evolith repite lo que la portada ya afirma (skipped de primera clase, taxonomía 0/1/2/3, cuatro superficies, sin AST, Node/TS para las reglas de dependencias), sin añadir ninguna afirmación nueva. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
…ab afternoon, and why the tab lagged the fixes GT-712 (P0, DONE): of the 95 alerts on the Security tab, 37 were real — a shell line built from `evolith-scaffold` input, filesystem paths taken verbatim from three HTTP bodies, a dot-path config writer reaching Object.prototype, eight polynomial regexes (15 s on 200k slashes) and seven workflows without a read-only default token. Closed in cb2c8a1 (#725), 8920b14 (#737), b200c5c (#748); promoted in #726/#739/#752. CodeQL on c554711: 0 open; Scorecard 0; Dependabot 0; secret-scanning 0. The 58 that were not real are dismissed with a written reason each. GT-713 (P2, DONE in 72aceb7): the analysis the tab is keyed to is uploaded only by the `push` run of sdk-cli-ci.yml, whose filter skipped src/packages and src/apps, so two promotions left main unanalysed until a manual dispatch. Board EN/ES: two rows, a new Last Updated line (same date as GT-711's, so `asOf` and the board date do not move), progress 681/711. Catalog EN/ES: two entries after GT-711. Closure evidence: two records. Reconciliation and executive summary regenerated (guard 46 at a fixed point); guards 08, 07, 04, 66 green; guard 41's five non-zero executions are GT-624/665/677/688's CLI commands, which need the bundled ruleset corpus CI populates. Closes GT-712 Closes GT-713 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
docs(readme): tabla comparativa con ArchUnit, dependency-cruiser y Conftest (EN/ES)
…d-codeql-main-analysis GT-712, GT-713: registrar y cerrar la tarde del tab Security, y que un push a main con código re-analice con CodeQL
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
Contributor
📊 Bilingual Coverage ImpactPR Changes
Repository Coverage
✅ Good: All EN changes have ES counterparts. Generated by GitHub Actions |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Promoción
develop→main, fijada ae5d66ba2. Sigue a #752.Qué sube
#767 — GT-712 y GT-713
pushdesdk-cli-ci.ymlcubresrc/packages/**ysrc/apps/**, así que una promoción de código re-analizamaincon CodeQL sin dispatch manual.mainno lleva nada quedevelopno tenga (develop..mainvacío tras #755); merge limpio.🤖 Generated with Claude Code