test(core): disable npm audits in the test preload - #47222
Merged
Conversation
1056674754
added a commit
to 1056674754/opencode
that referenced
this pull request
Sep 7, 2026
Upstream v1.18.27 (4b7e19e, merged at 26dff3f) -> v1.18.29 (1674747), 29 commits / 116 files. Merge base is b046973 (default header timeout to five minutes). Staged delta vs pre-merge fork HEAD is identical to the upstream tag-to-tag diff, confirming a clean adoption. Functional changes: - fix(opencode): compare Codex GPT versions by major and minor (anomalyco#47385) and allow integer GPT versions in the Codex model filter (anomalyco#47384) — codex.ts; disjoint from fork snapshot architecture, auto-merged. - feat(copilot): send X-Interaction-Id header with session id (anomalyco#47215) — github-copilot/copilot.ts, 1 line. - chore: bump gitlab-ai-provider to 6.13.0 (anomalyco#46914). - test(core): disable npm audits in the test preload (anomalyco#47222). - console: limits graph, i18n for ar/br/da/de/es/fr/it/ja + others; app: dialog-connect-provider and open-in-app-v2 fixes; go.mdx crawl rules gain the x-opencode-session header bullet (took upstream whole). Conflicts resolved: 29 package.json version bumps (rebranded 1.18.29-sscity; HEAD had moved to the local v1.18.27 merge meanwhile), bun.lock (took upstream, rebranded workspace entries via bun install), go.mdx (took upstream — trivial <br/> placement in the crawl-rules list). Fork deltas verified intact vs v1.18.29: provider ProviderSnapshot architecture, deferred snapshot init, GLM/ZhiPu normalization in transform.ts (+77 lines fork-only), config getFresh/commitFresh. Tests: provider, transform, config, v2, azure plugin, session retry/llm — 1036 pass / 0 fail across 14 files; typecheck clean. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Core's local npm install tests on
devtime out because Arborist starts a public npm security audit and waits for its response, even though the fixture packages are local. Both Linux and Windows CI fail at the 5s deadline in:Npm.add > reifies when package cache directory exists without the package installedNpm.install > respects omit from project .npmrcSet
NPM_CONFIG_AUDIT=falsein the existing Core test preload and add a regression assertion. Both directbun testand the package test command load the setting. No additional filesystem writes, fixture helpers, retries, longer timeouts, or production behavior changes.Verification
From
packages/core, using Bun 1.3.14 as used by this branch's CI:bun test test/npm.test.ts— 2 passed, 2 timed out at 5s. Diagnostic logging showed both tests starting an audit bulk request before hanging.bun test test/npm.test.ts test/preload.test.ts --rerun-each 5— 25 passed, 0 failed in 1.36s.bun run test test/npm.test.ts test/preload.test.ts— 5 passed, 0 failed in 1.15s.strace— 5 passed, with no IPv4/IPv6 connection attempts.GOMEMLIMIT=2GiB GOMAXPROCS=2 bun typecheck, Prettier, andgit diff --check— passed.Physical Windows validation remains blocked by an SSH connection timeout; no local Windows pass is claimed.
Requested by: @rekram1-node (Aiden via Slack)