Sync dev into main#454
Conversation
The migration file was using inline foreign key constraints while Drizzle exports them as separate ALTER TABLE statements. This caused the CI migration check to fail because Atlas detected a schema mismatch. Changes: - Move FK constraints from inline to ALTER TABLE statements - Update FK naming convention to match Drizzle pattern (_fk suffix) - Add USING btree to index definitions - Add explicit DEFAULT null for deleted_at fields - Use table-qualified column names in CHECK constraints Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
fix(db): align apostle_swarm migration with Drizzle schema export format
### Transaction History Enhancements - Add multi-select mode with bulk delete functionality - Enable expandable pending and step1_complete transactions - Fix explorer URL routing for native-to-base transactions - Correct Polkadot.js explorer URL format and blockHash usage - Improve transaction flow visualization ### Testing Infrastructure - Add comprehensive test coverage for Fast Bridge components (353 tests) - Implement shared Vitest configuration with path aliasing - Add new test commands (watch mode, interactive UI, specific files) - Organize tests in __tests__ directories following conventions - Fix mock paths, timers, and CommonJS/ESM compatibility issues ### CI/CD and Developer Experience - Optimize bridge CI workflows with comment-based test execution - Add security fixes for GitHub Actions (code injection prevention) - Implement emoji reactions for test trigger feedback - Streamline manual test workflow - Update dependencies and resolve version conflicts ### Code Quality Improvements - Refactor Hyperlane integration with 67% code reduction - Standardize code formatting across packages - Remove redundant error handling and unused imports - Fix type guards and eliminate type assertions - Add proper error handling with tryAsync pattern ### Key Fixes - Resolve wagmi connector compatibility issues - Fix API disconnect leaks and initialization failures - Correct transaction flow arrow direction - Remove msgId extraction from transaction logs - Guard against empty wallet addresses
* refac(pred-swarm): open verifier v1 * atlas rehash * moving migrations * chore: move judge * verifier deployment * added firecrawl to env * fix: migrations * fix migrations * fix lock * fix openai --------- Co-authored-by: PsicoThePato <jmomcontato@gmail.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
| needs: check-apostle-swarm | ||
| if: github.event_name == 'push' && needs.check-apostle-swarm.outputs.pending == 'true' | ||
| uses: ./.github/workflows/apply-migration-reusable.yml | ||
| with: | ||
| env_name: apostle_swarm | ||
| secrets: | ||
| vault_addr: ${{ secrets.VAULT_ADDR }} | ||
| vault_role_id: ${{ secrets.VAULT_ROLE_ID }} | ||
| vault_secret_id: ${{ secrets.VAULT_SECRET_ID }} | ||
|
|
||
| # Restart webapps after their migrations are applied | ||
| restart-webapps: |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 3 months ago
In general, the fix is to explicitly define a minimal permissions: block so that the GITHUB_TOKEN used by this workflow (and its jobs) has only the privileges it actually needs. The safest, least-disruptive approach is to set restrictive permissions at the workflow root so all jobs inherit them, and only widen permissions on specific jobs if a real need is identified later.
For this file, the best fix without changing existing functionality is to add a workflow-level permissions: block near the top (right after name: or on:). Because the jobs shown do not explicitly require write access to the repository, we can set contents: read as a minimal starting point. This follows GitHub’s own recommendation (contents: read / packages: read) and satisfies the CodeQL requirement that permissions be declared. No additional methods, imports, or definitions are required; we only modify .github/workflows/atlas-migrations.yml to add the permissions block.
| @@ -1,5 +1,8 @@ | ||
| name: Atlas Migrations | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| on: | ||
| pull_request: | ||
| branches: |
No description provided.