Fork sync - #36
Open
mateumiralles wants to merge 1186 commits into
Open
Fork sync#36mateumiralles wants to merge 1186 commits into
mateumiralles wants to merge 1186 commits into
Conversation
* fix: add data-testid attributes for improved testing * feat: move csm tests to additional folder * fix: update node version to 24 in workflow files * feat: move shared services * feat: update yarn command add moved config * feat: added tests for keys * feat: update DashboardPage and RolesSection with new locators and tests * feat: add more tests * feat: added tests for first step * feat: added tests for first step * feat: added tests for second step * chore: update dependencies and add detailed link to welcome section * feat: add NotEligiblePage and related tests for not eligible section * feat: enhance tests for operator steps with detailed checks and Qase integration * feat: implement CreateOperatorStep3Page and associated tests for step 3 functionality * feat: implement Step 4 functionality with UI components and tests for operator creation summary * feat: update error handling in form controls and add tests for operator creation steps * feat: enhance validation tests with Qase integration and improve error handling for keys * feat: integrate Qase reporting into dashboard tests and enhance tooltip verifications * feat: add tests for dashboard stake keys section * feat: navigation tests * feat: add edit metadata link and corresponding test for dashboard navigation * feat: add delete keys card functionality and corresponding tests for navigation * feat: implement metadata management with validation and update functionality in settings * feat: update wallet configuration to use WC_SDK_COMMON_CONFIG and add @noble/hashes resolution * feat: add navigation tests for empty validator with Create Operator visibility * feat: add tests for rewards cliaimer * fix: fixed tests after refactor * fix: fixed tests after refactor * feat: add tooltip test for current rewards claimer info icon * feat: dvt form * feat: added tests for claim blances * fix: validation get/set nested errors * fix: update dvt form status * feat: refactor * test: restructure claim tests — SDK assertions, shared constants, concise names * test: added new tests * fix: correct data-testid references for curated operator form * feat: add tests for splitters bond reward * feat: claim IDVTC * refactor: small refactors * feat: parameters table with 3 columns * feat: update select-operator-type-create modal * fix: pass operator type to create page * fix: file path * feat: keys-cache used internally in sdk * fix: test dulicated-keys * feat: try to add job * fix: update Foundry version to v1.7.1 in tests-fork workflow * fix: update wallet secrets and module references in tests-fork workflow * fix: update wallet secrets and module references in tests-fork workflow * fix: update test command to use yarn in tests-fork workflow * fix: add null check for snapshotId before reverting in multiple test files * fix: add Pinata API credentials to test-cm job in tests-fork workflow * fix: revert group names * fix: dummy qa-config * fix: downgrade sdk * fix: remove artifact upload steps from test workflows * fix: current-stake without external-stake * feat: group name * chore: ci * chore: skip rpc check * fix: update global setup to start node only in CI, refactor global teardown, enhance test fixtures * feat: implement wallet presets and enhance global setup for CI * fix: remove redundant node-version line in setup-node action * fix: improve error handling and logging in presets state management * feat: enhance wallet presets and update test descriptions with tags * fix: remove .only from test.describe in keysBreakdown and groupSummary tests * chore: trigger rebuild * feat: enhance wallet preset handling and improve logging in fork actions * fix: add global timeout for CI and improve error handling in waitForCallback * feat: add withDeposit handler and update wallet presets to include it * feat: add keys generator binary download step in test workflows * fix: reorder and reintroduce Playwright report encryption step in test workflow * feat: update wallet preset definitions and enhance validation checks in tests * fix: added qase ids * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old * feat: remove old --------- Co-authored-by: exromany <exromany@lido.fi>
* feat: use SecGuardReporter to hide sensetive env in pw report * fix: fixed sensetive env array
Sync develop-cm → develop
# Conflicts: # tests/csm-widget/tests/operatorWithValidator/dashboard/bondRewards/latestRewardDistibution.spec.ts
Survey API now requires a server-issued nonce embedded in the SIWE message. Fetch it via GET /auth/nonce before signing, otherwise the hardened backend rejects the client-generated nonce.
feat: siwe nonce handshake for surveys api auth
fix: migrate survey API to lido.tools domains
* feat: add e2e test workflows and setup actions for CSM/CM modules * feat: allow running workflows from the feature branch tests/add-cm-schedule * fix: update navigation paths for inbox, manager, and rewards address tabs * feat: allow running workflows from the feature branch tests/add-cm-schedule * fix: update claim option descriptions to ensure proper punctuation * feat: implement reusable E2E test workflow and refactor existing test workflows * fix: update claim option descriptions for consistency and clarity * fix: update cwd path for WalletStateService and ForkActionsService to use './staking-modules'
|
⏳ Building package for commit A build has been triggered. The install link will appear here when ready. (by tropibot/build) |
Survey API now requires a server-issued nonce embedded in the SIWE message. Fetch it via GET /auth/nonce before signing, otherwise the hardened backend rejects the client-generated nonce.
…oint chore: replace Harbor registry endpoint
* fix: update button names and improve test timeout handling * fix: remove trailing period from tooltip text in stake columns
Update tests in welcome page and latest Reward Distibution files
…-3.3.5 chore(deps): bump svgo from 3.3.4 to 3.3.5
fix: surface invalid custom addresses
…serslist-4.28.9 chore(deps): bump browserslist from 4.28.4 to 4.28.9
…-4.13.7 chore(deps): bump hono from 4.13.2 to 4.13.7
`x-cache-control` is a sentinel, not a real header: it only becomes Cache-Control if a custom server renames it at the socket level. That shim was never ported alongside the config, so CACHE_CONTROL_VALUE was dead and `/` served Next's SSR default no-store. - add server.mjs with the rename shim, start through it - `s-max-age` is not a valid directive (RFC 9111 defines `s-maxage`), so every CDN silently ignored it - cut stale-while-revalidate to 60s: a 2-day-stale shell outlives the build hashes it references and breaks chunk loading after a deploy - cache /api/cl, whose only allowlisted method is a heavy CL validators query that previously sent no Cache-Control at all - stop serving /api/metrics as publicly cacheable for 180s, which flattens counter deltas across scrapes - test the directive spelling and the cross-file sentinel agreement, since invalid directives fail open and leave no trace
Satanizer's masking cost grows faster than linearly with payload size, so an oversized log argument could stall the event loop. Cap strings, keys, depth and total traversal before the mask runs. Traversal itself needs a node budget: a shared subtree is re-expanded once per path reaching it, so the depth and key caps alone don't bound it.
Metric labels come from unvalidated request JSON and prom-client retains every distinct value forever, so an arbitrary `to` or `data` is unbounded cardinality. Validate both shapes and fall back to N/A. `data.slice(0, 10)` on an array returns 10 elements, so the old length check let arbitrary content through — match the selector shape instead. Also collapse per-call warnings into one per batch, and memoize selectors per ABI: keccak over every ABI function ran on every eth_call.
The report body is attacker-controlled: spreading it into the log record lets a caller overwrite pino's own fields, and an unparseable body threw. Nest under `report`, cap the body at 32kb and guard the method.
Custom server.mjs emits real Cache-Control headers (next start dropped them). Module favicons/manifest are served via rewrites instead of build-time copies, so the runtime writable surface shrinks to public/runtime. Bundle analyzer is lazy-loaded: it is a devDependency absent from the image.
fix: use images.loader: custom
develop to main
fix: bump js-yaml to 4.3.2 (GHSA-2883-xcg3-v3hh)
Share one node-base stage, add OCI image labels, honour PORT and a start-period in the healthcheck, and document the emptyDir mount needed under a read-only root filesystem.
Rolling deploys severed open connections: nothing handled SIGTERM, so k8s killed the process mid-request. Close the server on SIGTERM/SIGINT, with a 10s backstop for sockets that never drain. Exec node directly instead of `yarn start` — node must be PID 1 to receive the signal, and both yarn and `node --run` forward it but then exit non-zero, which k8s records as a container error on every clean drain.
Sync: main -> develop
fix: emit real Cache-Control headers for SSR routes and API
fix: harden server-side logging and metric payloads
…zation (#666) * fix: update tests to use Qase reporter for better tracking and organization * fix: update tests to use Qase reporter for improved tracking and organization * feat: implement Qase integration for test cases with structured reporting * feat: add structure to all CM tests * fix: update feature names in dashboard tests for consistency * feat: add structure to all CSM tests * fix: skip bond rewards tests for address blacklist and claim scenarios * fix: update csmSentinel URL to point to the correct repository * fix: rename method and add eslint * fix: rename 'env' to 'environment' in reporter configuration * fix: rename 'env' to 'environment' in reporter configuration
build: slim prod-only image, custom server, Harbor CI
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
7 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fork sync