Check / check (pull_request) Successful in 3m24s
`TestHandleWebhookProcessesValidWebhook` waited for the background deployment with a 100 ms sleep, so its temp directory could be removed while the deployment was still writing its log there, and the test failed now and then. It now waits with the webhook service's `WaitForDeployments`, the fix already applied to the webhook service tests for #198. The test context keeps the webhook service it already built. No other handlers test can start a deployment. No production code change. Model: opus-5-5
4.1 KiB
4.1 KiB
Workflow
- branch (from
main) - do the work in Next Step
- move Next Step to the top of Completed Steps
- move the top item of Future Steps into Next Step
- commit (
TODO.mdchanges in the same commit as the work) - merge to
mainif the branch is not protected, otherwise open a PR - push
Status
1.0+. Tagged 1.0.0 on 2026-02-26; 8 commits on main since. make check is green
as of the golangci-lint v2.12.2 update.
Next Step
Confirm .gitea/workflows/check.yml gates merges on make check so main cannot
regress.
Completed Steps
- 2026-09-23: Fixed the flaky
t.TempDircleanup race ininternal/handlers(the one fixed ininternal/service/webhookby #198):TestHandleWebhookProcessesValidWebhooknow waits with the webhook service'sWaitForDeploymentsinstead of sleeping (#211). - 2026-09-22: Vendored the canonical prettier/format toolchain from the
sneak/promptsscaffold: added.prettierrc(tabWidth 4, proseWrap always), pinnedpackage.json+yarn.lock(prettier 3.8.1), taughtscript/bootstrapto install a pinned node/yarn via a hash-verified nvm archive, and switchedscript/fmtto the pinned prettier reading.prettierrc(no inline flags) overstatic/js/*.jsand**/*.md. Reflowed all markdown to house style;alpine.min.jsstays byte-identical (#203). - 2026-09-22: Fixed the flaky
t.TempDircleanup race ininternal/service/webhookby tracking the async deployment goroutine in async.WaitGroupand exposingWaitForDeployments; tests now synchronize on completion instead of sleeping (#198). - 2026-09-22: Linting now runs only in Docker. Added
Dockerfile.lint(pinned golangci-lint v2.12.2, cache-busted via aGATE_RUNbuild arg so the linter always executes), reducedscript/lintto building it, dropped the golangci-lint install fromscript/bootstrap, and switched theDockerfilelint stage to invokegolangci-lintdirectly instead ofmake lintto avoid docker-in-docker (#188). - 2026-09-22: Added
.prettierignoresomake fmtno longer rewrites the vendoredstatic/js/alpine.min.jsbundle (#185). - 2026-09-22: Fixed the gosec G703 path-traversal finding in the deploy log download handler by verifying the resolved path stays within the deploy log directory before serving, returning 404 on escape (#177).
- 2026-09-22:
script/bootstrapnow installs a pinnedgoimports(golang.org/x/toolsv0.49.0) into/usr/local/bin, somake fmtsucceeds on a fresh machine aftermake bootstrap(#184). - 2026-09-09: Fixed four deployability blockers found by QA: CSRF origin check
over plain HTTP (
UPAAS_PLAINTEXT_HTTP, #189), pulling the git image when absent (#190), the env-var editor CSRF token lookup (#191), and the port-mapping delete form's CSRF field (#192). - 2026-08-07: Updated golangci-lint to v2.12.2 (canonical
.golangci.yml,Dockerfilelint stage pin,script/bootstraprelease-archive pins) and fixed all resulting lint findings (noctx, gosec, goconst, lll, dupl, nolintlint);make checkgreen. - 2026-07-07 Adopted scripts-to-rule-them-all:
script/entrypoints, Makefile shims, README Entrypoints section - 2026-03-11: Monolithic env var editing with bulk save (#158).
- 2026-03-10: Webhook event history UI page (#164); added missing Makefile docker and hooks targets plus test timeout (#159); notification settings passed from create form (#160).
- 2026-03-03: REPO_POLICIES compliance file set added (#155).
- 2026-03-01: Module path changed to sneak.berlin/go/upaas (#143); Dockerfile split into lint and build stages with forced lint execution (#152, #154).
- 2026-02-26: 1.0.0 tagged; dashboard CSRFField crash fixed (#146).
- 1.0 audit bug fixes (#120-#125): deferred rollback on commit error, deployment log size cap, error path rendering, docker-compose bind mount, domain type refactor.
- CI simplified to docker build only (#130).
- 2025-12-29 onward: core PaaS built out: deploys with real-time build log streaming, container start/stop/restart and logs, TCP/UDP port mapping, Alpine.js UI, Slack notifications, ULID app IDs, session handling.
Future Steps
- Resume feature work only after main is green.