fix(verdaccio): remove the invisible character failing every branch build - #13
Merged
Merged
Conversation
…uild The Verdaccio job has failed on every branch run at the ReARM action's invisible-character scan: Line 99:27 > U+FE0F VARIATION SELECTOR-16 Category: Variation Selector Risk: May be used to hide or confuse code logic [FAILED] Security issues detected. test-age-filter.js carried an emoji variation selector in a console.log. The visible emoji in the same file are not flagged; only the zero-width selector is. Dropped the selector (the info glyph itself is unchanged). This is the only such character in the repo -- swept for U+FE0F, U+200B, U+00A0, U+2060 and the bidi marks -- and plain ASCII is the house rule regardless. ReARM-Agent: 1420896f-adf5-4843-896f-d863cfcc6528 ReARM-Agentic-Session: 4477ca5a-8dfc-435b-804c-952d39345110
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The failure
The Verdaccio job has failed on every branch run in this repo, deterministically, at the ReARM action's invisible-character scan:
verdaccio/test-age-filter.js:99carried an emoji variation selector in aconsole.log. Note the visible emoji elsewhere in the same file (📊 ✅ ❌ 🧪 🔍 🏁) are not flagged — only the zero-width selector is, which is exactly the point of that scan.The fix
Dropped the selector; the information glyph itself is unchanged. It's the only such character in the repo — I swept for
U+FE0F,U+200B,U+00A0,U+2060and the bidi marks — and plain ASCII is the house rule regardless.Context
This is one of two causes of the permanently-red branch builds here. The other is the ten jobs still on the legacy
relizaio/reliza-docker-actionagainstapp.relizahub.com, whosegetversionstep exits 1 on branch runs with no error text; that one needs a decision (finish the migration torearm-docker-action) rather than a patch.Separately, I have a ready change that stops every push rebuilding all 18 images — a
detectjob with per-directory filters, mirroring the pattern inrelizaio/rearm, with|| github.ref == 'refs/heads/main'so main still rebuilds everything and keeps base images refreshed. I could not push it: the agent's fine-grained PAT lacks the Workflows write permission, so GitHub rejects any push touching.github/workflows/. The patch is ready to apply once that's sorted.🤖 Generated with Claude Code