Skip to content

fix(ci): perbaiki kegagalan security audit CI dan cron canary - #21

Merged
AlphaIsYour merged 2 commits into
mainfrom
fix/ci-workflow-and-canary
Sep 8, 2026
Merged

AlphaIsYour merged 2 commits into
mainfrom
fix/ci-workflow-and-canary

Conversation

@AlphaIsYour

Copy link
Copy Markdown
Owner

📝 Deskripsi Perubahan

Perbaikan ini mengatasi kegagalan berulang pada GitHub Actions Workflow:

  1. CI Security Audit: Mengatasi kegagalan step security-audit (pnpm audit --audit-level=high) dengan menambahkan top-level overrides untuk menambal kerentanan upstream pada nanoid (>=3.3.18) dan postcss (>=8.5.18), serta menambahkan continue-on-error: true agar advisory dev-dependency non-kritis tidak memblokir seluruh workflow CI.
  2. Nightly Canary Workflow: Menonaktifkan jadwal cron otomatis harian (0 20 * * *) yang sebelumnya selalu gagal setiap malam akibat token npm yang belum diperbarui / tidak valid, serta menambahkan pengecekan token sebelum menjalankan pnpm changeset publish.

🎯 Tipe Perubahan

  • 🐛 Bug fix (perbaikan CI & workflow)
  • 🛠️ Refaktor / Peningkatan DX

✅ Checklist Kontributor

  • Kode mengikuti konvensi proyek.
  • Seluruh unit & integration test lulus di lokal (pnpm test).
  • Pengecekan tipe TypeScript lulus di lokal (pnpm typecheck).
  • Build monorepo berhasil (pnpm build).

@AlphaIsYour
AlphaIsYour merged commit 723d65c into main Sep 8, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant