Repository navigation
Fix CodeQL findings in browser and coverage test helpers - #5449
Conversation
|
@codex review |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
📦 Client bundle boundary
A server module in a client graph aborts hydration in the browser. New leaks fail CI; known leaks are tracked in |
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
|
@codex review |
|
Codex Review: Didn't find any major issues. You're on a roll. Reviewed commit: ℹ️ About Codex in GitHubCodex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback". |
|
@codex review |
|
Codex Review: Didn't find any major issues. Chef's kiss. Reviewed commit: ℹ️ About Codex in GitHubCodex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback". |
|



The browser helper imports a Playwright
Responsetype under the same name as the DOM constructor used to read process stderr. Alias the Playwright type so static analysis can distinguish the two. The native coverage fixtures now derive their paths fromimport.meta.urlinside fixed JavaScript source, instead of interpolating serialized paths and group data into generated code.Addresses CodeQL alerts 459, 458, and 457. Alert closure requires a successful scan after this reaches the default branch.
Validation on pinned Deno 2.9.7:
codex review --base origin/main: no actionable regressions. The review environment used an older Deno; the pinned typecheck was performed separately.The fast-uri Dependabot repair is carried in #5410, which already owns the proxy lockfile and generated package inventory.