chore(ci): bump tester action #2565

DerekRoberts · 2025-12-19T05:39:03Z

Description

Please provide a summary of the change and the issue fixed. Please include relevant context. List dependency changes.

Fixes # (issue)

Type of change

Bug fix (non-breaking change which fixes an issue)
New feature (non-breaking change which adds functionality)
Breaking change (fix or feature that would cause existing functionality to not work as expected)
This change requires a documentation update
Documentation update

How Has This Been Tested?

Checklist

I have read the CONTRIBUTING doc
I have performed a self-review of my own code
I have commented my code, particularly in hard-to-understand areas
I have made corresponding changes to the documentation
My changes generate no new warnings
I have added tests that prove my fix is effective or that my feature works
New and existing unit tests pass locally with my changes
Any dependent changes have already been accepted and merged

Further comments

Thanks for the PR!

Deployments, as required, will be available below:

Please create PRs in draft mode. Mark as ready to enable:

Analysis Workflow

After merge, new images are deployed in:

Merge Workflow

Copilot

Pull request overview

This PR temporarily updates the GitHub Actions workflow to test an upcoming version of the bcgov/action-test-and-analyse action by switching from a pinned commit SHA to a branch reference.

Replaces pinned commit SHA (c20d16c26d9b7e6e486f01702880053ed4ebdc91) with branch reference (copilot/prune-deps-and-exports)
Updates both backend and frontend test jobs to use the test branch

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

.github/workflows/analysis.yml

- Add rimraf to devDependencies (used in scripts) - Remove unused @faker-js/faker, @tanstack/react-router-devtools, history - Create knip.config.ts to handle auto-generated files and Vite aliases - Format SCSS file

- Add knip to frontend devDependencies (required by knip.config.ts) - Add knip to backend devDependencies (required by knip.config.ts) - Fixes runtime errors when knip config files import from 'knip' package

- Update knip from ^6.0.0 to ^5.0.0 in both frontend and backend - Fixes npm ci error: No matching version found for knip@^6.0.0 - knip remains in devDependencies only (not installed in production builds)

- Remove knip from frontend and backend devDependencies - Remove type imports from knip.config.ts files - Config files work as plain objects without requiring knip package - External action (bcgov/action-test-and-analyse) installs knip itself

- Remove @testing-library/user-event (exported but never used) - Add rimraf to devDependencies (used in scripts) - Remove unused userEvent export from test-utils.tsx

socket-security · 2026-01-06T19:22:27Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@types/react-dom@19.2.3
	@tanstack/router-plugin@1.145.2
	@vitest/ui@4.0.16
	eslint-plugin-react@7.37.5
	@tanstack/react-router@1.144.0
	bootstrap-icons@1.13.1
	bootstrap@5.3.8
	react-bootstrap@2.10.10
	@testing-library/jest-dom@6.9.1
	vite-tsconfig-paths@6.0.3
	@testing-library/react@16.3.1
	msw@2.12.7
	sass-embedded@1.97.1
	@vitejs/plugin-react@5.1.2
	eslint-plugin-react-hooks@7.0.1
	jsdom@27.4.0
	sass@1.97.1
	playwright@1.57.0

View full report

socket-security · 2026-01-06T19:22:29Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `bootstrap` is 98.0% likely obfuscated Confidence: 0.98 Location: Package overview From: frontend/package-lock.json → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `entities` is 91.0% likely obfuscated Confidence: 0.91 Location: Package overview From: frontend/package-lock.json → `npm/[email protected]` → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

chore(ci): test upcoming tester action

aa29d65

Copilot AI review requested due to automatic review settings December 19, 2025 05:39

github-project-automation bot added this to DevOps (NR) Dec 19, 2025

github-project-automation bot moved this to New in DevOps (NR) Dec 19, 2025

Copilot started reviewing on behalf of DerekRoberts December 19, 2025 05:39 View session

chore(ci): test upcoming tester action

9c15dc6

Copilot AI reviewed Dec 19, 2025

View reviewed changes

.github/workflows/analysis.yml Outdated Show resolved Hide resolved

.github/workflows/analysis.yml Show resolved Hide resolved

DerekRoberts added 6 commits December 18, 2025 21:56

Trigger jobs

8fe0b58

Bump tester version

38c549f

Fire tester triggers

9ca57bf

fix: clean up unused dependencies and configure Knip for frontend

c7f30bd

- Add rimraf to devDependencies (used in scripts) - Remove unused @faker-js/faker, @tanstack/react-router-devtools, history - Create knip.config.ts to handle auto-generated files and Vite aliases - Format SCSS file

fix: add knip package as devDependency for both frontend and backend

dfdcf67

- Add knip to frontend devDependencies (required by knip.config.ts) - Add knip to backend devDependencies (required by knip.config.ts) - Fixes runtime errors when knip config files import from 'knip' package

chore: add knip.config.ts for backend

73789f6

DerekRoberts changed the title ~~chore(ci): test upcoming tester action~~ chore(ci): bump tester action Dec 19, 2025

DerekRoberts added 5 commits December 18, 2025 23:33

fix: correct knip version to ^5.0.0 (^6.0.0 doesn't exist)

3912fa4

- Update knip from ^6.0.0 to ^5.0.0 in both frontend and backend - Fixes npm ci error: No matching version found for knip@^6.0.0 - knip remains in devDependencies only (not installed in production builds)

chore: remove knip.config.ts files - not needed

f43bdee

chore: remove rimraf from frontend - was added unnecessarily

03b37b4

fix: remove unused @testing-library/user-event and add rimraf back

2a1b241

- Remove @testing-library/user-event (exported but never used) - Add rimraf to devDependencies (used in scripts) - Remove unused userEvent export from test-utils.tsx

DerekRoberts moved this from New to Active in DevOps (NR) Dec 19, 2025

DerekRoberts self-assigned this Dec 19, 2025

DerekRoberts added 2 commits December 20, 2025 01:00

Merge branch 'main' into chore/test-upcoming-action

abffc75

Merge branch 'main' into chore/test-upcoming-action

cdd638b

DerekRoberts added 3 commits January 6, 2026 12:39

Missing codependency

5786a52

Lockfiles

3448d41

Junk commit

969a654

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(ci): bump tester action #2565

chore(ci): bump tester action #2565

Uh oh!

DerekRoberts commented Dec 19, 2025 •

edited by github-actions bot

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

socket-security bot commented Jan 6, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Jan 6, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(ci): bump tester action #2565

Are you sure you want to change the base?

chore(ci): bump tester action #2565

Uh oh!

Conversation

DerekRoberts commented Dec 19, 2025 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Type of change

How Has This Been Tested?

Checklist

Further comments

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

socket-security bot commented Jan 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Jan 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

DerekRoberts commented Dec 19, 2025 •

edited by github-actions bot

Loading

socket-security bot commented Jan 6, 2026 •

edited

Loading

socket-security bot commented Jan 6, 2026 •

edited

Loading