Skip to content

Security release preparation - #1197

Merged
RafaelGSS merged 4 commits into
mainfrom
security-release-preparation
Sep 23, 2026
Merged

RafaelGSS merged 4 commits into
mainfrom
security-release-preparation

Conversation

@RafaelGSS

Copy link
Copy Markdown
Member

This is an initial step toward an MCP integration I’m planning for the security release workflow.

Extract draft preparation and local persistence into non-interactive helpers that the CLI and a future MCP adapter can share

Also fetch all pages of triaged HackerOne reports, reuse the candidate list throughout selection, preserve existing release branches and prevent overwriting an existing draft

@codecov

codecov Bot commented Sep 23, 2026 •

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 97.23077% with 9 lines in your changes missing coverage. Please review.
✅ Project coverage is 61.34%. Comparing base (c38c713) to head (937e488).

Files with missing lines Patch % Lines
lib/prepare_security.js 87.50% 7 Missing ⚠️
lib/security-release/preparation.js 98.80% 2 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1197      +/-   ##
==========================================
+ Coverage   58.78%   61.34%   +2.56%     
==========================================
  Files          53       55       +2     
  Lines       10437    10646     +209     
==========================================
+ Hits         6135     6531     +396     
+ Misses       4302     4115     -187     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Follow HackerOne pagination and deduplicate overlapping reports. Reject
failed pages and invalid pagination links instead of returning a partial
candidate list.
Expose candidate retrieval and draft preparation without prompts or
publication. Reuse one candidate snapshot in the CLI and normalize dates
and release-line maps while preserving incomplete metadata for review.
Check out existing release branches without resetting them and reuse
remote-tracking branches when available. Reject unrelated staged files
before adding release changes to the index.
Expose local draft persistence with an explicit repository path and
exclusive file creation. Prepare data before changing branches and check
for an existing draft again after checkout.
@RafaelGSS
RafaelGSS force-pushed the security-release-preparation branch from 665063d to 937e488 Compare September 23, 2026 14:18
@RafaelGSS
RafaelGSS merged commit 27fd6ee into main Sep 23, 2026
11 checks passed
@RafaelGSS
RafaelGSS deleted the security-release-preparation branch September 23, 2026 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants