Skip to content

fix(verdaccio): remove the invisible character failing every branch build - #13

Merged
logicflakes merged 1 commit into
mainfrom
2026-07-fix-verdaccio-invisible-char
Aug 1, 2026
Merged

fix(verdaccio): remove the invisible character failing every branch build#13
logicflakes merged 1 commit into
mainfrom
2026-07-fix-verdaccio-invisible-char

Conversation

@logicflakes

Copy link
Copy Markdown
Collaborator

The failure

The Verdaccio job has failed on every branch run in this repo, deterministically, at the ReARM action's invisible-character scan:

│  [WARNING] Confusable Characters
│  Line 99:27  >  U+FE0F  VARIATION SELECTOR-16
│  │  console.log(`ℹ️  INFO: No recent versions found in this package to filter.`)
│  │                ^ invisible character here
│  Category: Variation Selector
│  Risk: May be used to hide or confuse code logic
└─ 1 issue found
[FAILED] Security issues detected. Please review and fix.
##[error]Process completed with exit code 123.

verdaccio/test-age-filter.js:99 carried an emoji variation selector in a console.log. Note the visible emoji elsewhere in the same file (📊 ✅ ❌ 🧪 🔍 🏁) are not flagged — only the zero-width selector is, which is exactly the point of that scan.

The fix

Dropped the selector; the information glyph itself is unchanged. It's the only such character in the repo — I swept for U+FE0F, U+200B, U+00A0, U+2060 and the bidi marks — and plain ASCII is the house rule regardless.

Context

This is one of two causes of the permanently-red branch builds here. The other is the ten jobs still on the legacy relizaio/reliza-docker-action against app.relizahub.com, whose getversion step exits 1 on branch runs with no error text; that one needs a decision (finish the migration to rearm-docker-action) rather than a patch.

Separately, I have a ready change that stops every push rebuilding all 18 images — a detect job with per-directory filters, mirroring the pattern in relizaio/rearm, with || github.ref == 'refs/heads/main' so main still rebuilds everything and keeps base images refreshed. I could not push it: the agent's fine-grained PAT lacks the Workflows write permission, so GitHub rejects any push touching .github/workflows/. The patch is ready to apply once that's sorted.

🤖 Generated with Claude Code

…uild

The Verdaccio job has failed on every branch run at the ReARM action's
invisible-character scan:

  Line 99:27  >  U+FE0F  VARIATION SELECTOR-16
  Category: Variation Selector
  Risk: May be used to hide or confuse code logic
  [FAILED] Security issues detected.

test-age-filter.js carried an emoji variation selector in a console.log. The
visible emoji in the same file are not flagged; only the zero-width selector is.

Dropped the selector (the info glyph itself is unchanged). This is the only such
character in the repo -- swept for U+FE0F, U+200B, U+00A0, U+2060 and the
bidi marks -- and plain ASCII is the house rule regardless.

ReARM-Agent: 1420896f-adf5-4843-896f-d863cfcc6528
ReARM-Agentic-Session: 4477ca5a-8dfc-435b-804c-952d39345110
@logicflakes
logicflakes merged commit 977222d into main Aug 1, 2026
15 of 18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant