Skip to content

Update tests and dependencies#37

Merged
mulbc merged 3 commits into
mainfrom
update-tests-and-dependencies
Apr 23, 2026
Merged

Update tests and dependencies#37
mulbc merged 3 commits into
mainfrom
update-tests-and-dependencies

Conversation

@mulbc

@mulbc mulbc commented Apr 21, 2026

Copy link
Copy Markdown
Member

Add tests and update dependencies to bring down the vulnerability count

Chris Blum and others added 3 commits April 21, 2026 11:20
Expand npm test to run all test suites under __tests__/ instead of
only __tests__/redux/. This picks up 9 pre-existing test files that
were never being executed. Exclude 6 legacy test files that import
from a removed src/models/ module.

Add new test files:
- Redux reducers: ocs, ui, zone (complete reducer coverage)
- Root utilities: kubelet, units, node, service
- Lib utilities: kubelet, workload (areServicesSchedulable,
  isWorkloadSchedulable, getWorkloadFromDescriptors)

Fix pre-existing workloads.spec.ts to not depend on hardcoded service
IDs, which broke when test execution order changed.

Coverage: 3 → 16 test suites, 23 → 156 tests, branches 69% → 83%

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Chris Blum <cblum@ibm.com>
Remove browserify, coffeescript, @types/fabric, and @types/jquery
which are not referenced anywhere in the codebase. Removing browserify
alone eliminates 4 critical vulnerabilities (elliptic, cipher-base,
sha.js, pbkdf2) and several high-severity ones.

Update minor/patch versions within current semver ranges:
- lodash 4.17.21 → 4.18.1 (fixes prototype pollution)
- express 4.18.2 → 4.22.1 (fixes XSS and open redirect)
- body-parser 1.20.2 → 1.20.4 (fixes DoS)
- js-yaml 4.1.0 → 4.1.1 (fixes prototype pollution)
- jest 29.5.0 → 29.7.0
- html-webpack-plugin 5.5.0 → 5.6.7
- @emotion/react 11.10.4 → 11.14.0
- @emotion/styled 11.10.4 → 11.14.1
- classnames 2.3.1 → 2.5.1
- html2canvas 1.3.3 → 1.4.1

Vulnerabilities reduced from 86 to 69, critical from 5 to 0.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Chris Blum <cblum@ibm.com>
@mulbc
mulbc requested a review from bipuladh April 21, 2026 15:30
@openshift-ci

openshift-ci Bot commented Apr 21, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: mulbc

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@mulbc

mulbc commented Apr 21, 2026

Copy link
Copy Markdown
Member Author

Resolves #5

Comment thread .gitignore
service/node_modules/
*.log
coverage
CLAUDE.md

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Didn't want to accidentally commit it in this PR

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Better to save it for Claude we might have to add some rules to it regarding generation of comments and everything. By default too many comments are generated.

@mulbc
mulbc merged commit 69583c6 into main Apr 23, 2026
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants