ix runtime policy pin mismatch and make dependency audits non-blocking #81

Merged

darkhelm merged 18 commits from fix/backend-runtime-policy-tests into main 2026-07-16 07:40:18 -04:00

Conversation 0 Commits 18 Files Changed 8 +1065 -515

darkhelm commented 2026-07-14 14:45:55 -04:00

Owner

Copy Link

Summary

This PR fixes backend test breakage caused by stale runtime compatibility pins and updates CI behavior so dependency audits remain informative without blocking delivery.

What Changed

• Updated backend runtime compatibility package pins to match current dependency versions.
• Updated backend tests to align with the new compatibility expectations and restore coverage compliance.
• Expanded backend unit coverage around runtime policy and health-check behavior.
• Changed frontend and backend dependency audit lanes in CI to be non-blocking:
  • They still run in the same workflow position.
  • Failures are logged clearly.
  • Pipeline completion is no longer gated on audit pass/fail.

Why

• Recent dependency updates caused runtime policy startup validation to fail in tests.
• Audit jobs are useful for visibility, but they should not prevent system completion when they detect issues.

Validation

• Pre-commit hooks passed on commit.
• Backend unit tests with coverage pass, including fail-under threshold.
• Branch pushed successfully: fix/backend-runtime-policy-tests.

Notes

• Audit failures now signal actionable dependency risk without stopping the release flow.

## Summary This PR fixes backend test breakage caused by stale runtime compatibility pins and updates CI behavior so dependency audits remain informative without blocking delivery. ## What Changed - Updated backend runtime compatibility package pins to match current dependency versions. - Updated backend tests to align with the new compatibility expectations and restore coverage compliance. - Expanded backend unit coverage around runtime policy and health-check behavior. - Changed frontend and backend dependency audit lanes in CI to be non-blocking: - They still run in the same workflow position. - Failures are logged clearly. - Pipeline completion is no longer gated on audit pass/fail. ## Why - Recent dependency updates caused runtime policy startup validation to fail in tests. - Audit jobs are useful for visibility, but they should not prevent system completion when they detect issues. ## Validation - Pre-commit hooks passed on commit. - Backend unit tests with coverage pass, including fail-under threshold. - Branch pushed successfully: `fix/backend-runtime-policy-tests`. ## Notes - Audit failures now signal actionable dependency risk without stopping the release flow.

darkhelm added 1 commit 2026-07-14 14:45:56 -04:00

Fix runtime policy tests and make dependency audits non-blocking 81dac4651f

darkhelm added 1 commit 2026-07-14 16:37:20 -04:00

Run backend doctests without uv project resolution 640db3bf3f

darkhelm added 1 commit 2026-07-14 16:52:24 -04:00

Simplify CI workflow inputs and streamline renovate workflow feae74a227

darkhelm added 1 commit 2026-07-14 17:42:36 -04:00

Optimize CI source checks and image build flow f5b275b007

darkhelm added 1 commit 2026-07-14 22:44:36 -04:00

Add digest-aware mirrored image resolver across CI workflows c4ba45f3c2

darkhelm added 1 commit 2026-07-14 22:51:41 -04:00

Pin registry auth realm host in base-state login step b2ef9e1007

darkhelm added 1 commit 2026-07-14 22:53:45 -04:00

Fix realm_url conditional syntax in base-state auth helper 431c2b87db

darkhelm added 1 commit 2026-07-15 00:42:41 -04:00

Use vendored Yarn in frontend base build and harden BuildKit auth d5da31d352

darkhelm added 1 commit 2026-07-15 00:47:28 -04:00

Fixing the double-push ... e97dcbd7eb

Signed-off-by: copilotcoder <copilotcoder@darkhelm.org>

darkhelm added 1 commit 2026-07-15 07:51:34 -04:00

Use npm-distributed Yarn in frontend image build f08c160225

darkhelm added 1 commit 2026-07-15 09:53:53 -04:00

Force-overwrite Yarn binary during frontend image build ebcd48069a

darkhelm added 1 commit 2026-07-15 10:15:40 -04:00

Pin frontend Corepack Yarn version to 4.10.3 e4b19c283c

darkhelm added 1 commit 2026-07-15 11:48:16 -04:00

Pin registry auth realm host for shared CI image jobs e8ab59e070

darkhelm added 1 commit 2026-07-15 12:15:34 -04:00

Stabilize frontend image builds and shared CI registry auth 1a0d88b017

darkhelm added 1 commit 2026-07-15 13:21:09 -04:00

Harden CICD base apt installs for HTTPS-only runner networks a12301f2bd

darkhelm added 1 commit 2026-07-15 13:50:49 -04:00

Bootstrap CA certs before HTTPS apt in CICD base image 3197e4e1f6

darkhelm added 1 commit 2026-07-15 17:07:30 -04:00

Harden registry auth retries across CICD image lanes 58b1ac7c08

darkhelm added 1 commit 2026-07-15 17:16:56 -04:00

Define docker_login_with_retry in base and CICD build jobs 8357662f45

darkhelm merged commit 19f6428775 into main 2026-07-16 07:40:18 -04:00

darkhelm referenced this issue from a commit 2026-07-16 07:40:22 -04:00

ix runtime policy pin mismatch and make dependency audits non-blocking (#81)

darkhelm deleted branch fix/backend-runtime-policy-tests 2026-07-16 07:40:24 -04:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

afk

Autonomous-friendly issue

algorithm

Selection logic

api

API contract

backend

Backend related

database

Database related

devex

Developer experience

docs

Documentation

epic

Top-level planning item

frontend

Frontend related

hitl

Requires human-in-the-loop decision

ingestion

Ingestion/sync

ops

Operations

performance

Performance

realtime

Realtime/eventing

release

Release readiness

security

Security

task

Implementation ticket

testing

Testing

ui

UI/UX

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

copilotcoder darkhelm renovate-bot repository-bot

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: DarkHelm.org/plex-playlist#81