From 8b458d4a60b73d0a91c08d158860c30774f7a0a5 Mon Sep 17 00:00:00 2001 From: DemolaCodes Date: Sun, 18 Oct 2026 22:03:08 +0100 Subject: [PATCH 1/6] fix(deps): replace floating latest versions with locked caret ranges (#837) Pin using already-resolved Bun versions, preserving the existing dependency graph. --- apps/web/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/web/package.json b/apps/web/package.json index 6f108b38..837f4208 100644 --- a/apps/web/package.json +++ b/apps/web/package.json @@ -26,7 +26,7 @@ "@tanstack/router-plugin": "^1.132.0", "@workspace/ui": "workspace:*", "lightweight-charts": "^5.2.0", - "nitro": "latest", + "nitro": "^3.0.260610-beta", "react": "^19.2.4", "react-dom": "^19.2.4", "tailwindcss": "^4.1.18", From c42806c9a91c55ee6b69b594752108611bee6cf8 Mon Sep 17 00:00:00 2001 From: DemolaCodes Date: Sun, 18 Oct 2026 22:03:11 +0100 Subject: [PATCH 2/6] fix(deps): replace floating latest versions with locked caret ranges (#837) Pin using already-resolved Bun versions, preserving the existing dependency graph. --- apps/s03-indexer/package.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/apps/s03-indexer/package.json b/apps/s03-indexer/package.json index 28cab644..40bd900b 100644 --- a/apps/s03-indexer/package.json +++ b/apps/s03-indexer/package.json @@ -28,17 +28,17 @@ "dependencies": { "@stellar/stellar-base": "14.1.0", "@stellar/stellar-sdk": "14.6.1", - "@subql/common": "latest", + "@subql/common": "^5.8.2", "@subql/types-core": "^2.2.0", - "@subql/types-stellar": "latest", + "@subql/types-stellar": "^5.2.0", "text-encoding": "^0.7.0" }, "devDependencies": { - "@subql/cli": "latest", - "@subql/testing": "latest", - "@subql/types": "latest", + "@subql/cli": "^6.6.3", + "@subql/testing": "^2.3.1", + "@subql/types": "^3.15.0", "@types/text-encoding": "^0.0.40", - "dotenv": "latest", + "dotenv": "^18.0.8", "tslib": "^2.8.1", "typescript": "5.8.3" } From cd2d7ca1ed806cfaba6e684616737699af2995cb Mon Sep 17 00:00:00 2001 From: DemolaCodes Date: Sun, 18 Oct 2026 22:03:15 +0100 Subject: [PATCH 3/6] fix(deps): replace floating latest versions with locked caret ranges (#837) Pin using already-resolved Bun versions, preserving the existing dependency graph. --- bun.lock | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/bun.lock b/bun.lock index 504510d1..789c6743 100644 --- a/bun.lock +++ b/bun.lock @@ -68,17 +68,17 @@ "dependencies": { "@stellar/stellar-base": "14.1.0", "@stellar/stellar-sdk": "14.6.1", - "@subql/common": "latest", + "@subql/common": "^5.8.2", "@subql/types-core": "^2.2.0", - "@subql/types-stellar": "latest", + "@subql/types-stellar": "^5.2.0", "text-encoding": "^0.7.0", }, "devDependencies": { - "@subql/cli": "latest", - "@subql/testing": "latest", - "@subql/types": "latest", + "@subql/cli": "^6.6.3", + "@subql/testing": "^2.3.1", + "@subql/types": "^3.15.0", "@types/text-encoding": "^0.0.40", - "dotenv": "latest", + "dotenv": "^18.0.8", "tslib": "^2.8.1", "typescript": "5.8.3", }, @@ -100,7 +100,7 @@ "@tanstack/router-plugin": "^1.132.0", "@workspace/ui": "workspace:*", "lightweight-charts": "^5.2.0", - "nitro": "latest", + "nitro": "^3.0.260610-beta", "react": "^19.2.4", "react-dom": "^19.2.4", "tailwindcss": "^4.1.18", From 58d58986846504309e292ade2b77202571dd9da6 Mon Sep 17 00:00:00 2001 From: DemolaCodes Date: Sun, 18 Oct 2026 22:06:22 +0100 Subject: [PATCH 4/6] ci(test): run full contribution gate for issue branch --- .../workflows/contribution-verification.yml | 54 +++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 .github/workflows/contribution-verification.yml diff --git a/.github/workflows/contribution-verification.yml b/.github/workflows/contribution-verification.yml new file mode 100644 index 00000000..03344d11 --- /dev/null +++ b/.github/workflows/contribution-verification.yml @@ -0,0 +1,54 @@ +name: Contribution verification +on: + push: + branches: + - fix/issue-837-pin-dependency-ranges + - ci/issue-838-dependency-security + - fix/issue-846-canonical-brand + - fix/issue-848-referral-chart-labels +jobs: + full-gate: + runs-on: ubuntu-latest + timeout-minutes: 40 + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 + - uses: oven-sh/setup-bun@v2 + with: + bun-version: 1.3.13 + - name: Install exact locked dependencies + run: bun install --frozen-lockfile + - name: Lint + run: bun lint + - name: Typecheck + run: bun typecheck + - name: Design tokens + run: bun run check:tokens + - name: Docs content + run: bun run check:content + - name: Tests + run: bun run test + - name: Coverage + run: bun run test:coverage + - name: Production build + run: bun run build + - name: Indexer generation and build + run: bun run --cwd apps/s03-indexer codegen && bun run --cwd apps/s03-indexer build + - name: Indexer test + run: bun run --cwd apps/s03-indexer test + - name: Indexer local manifest sync + run: SO4_CONTRACTS_REPO="$PWD/apps/s03-indexer/tests/fixtures/contracts-repo" bun run --cwd apps/s03-indexer sync:contracts:local && bash scripts/validate-manifest.sh apps/s03-indexer/config/contracts.local.json + - name: Web typecheck + run: bun run --cwd apps/web typecheck + - name: Web build + run: bun run --cwd apps/web build + audit: + runs-on: ubuntu-latest + timeout-minutes: 15 + steps: + - uses: actions/checkout@v4 + - uses: oven-sh/setup-bun@v2 + with: + bun-version: 1.3.13 + - run: bun audit --audit-level=high From 5d3d468f5db96c8093bfb8501c3c7f24832e2485 Mon Sep 17 00:00:00 2001 From: DemolaCodes Date: Sun, 18 Oct 2026 22:08:45 +0100 Subject: [PATCH 5/6] ci(test): collect independent gate results without masking any failure --- .github/workflows/contribution-verification.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/workflows/contribution-verification.yml b/.github/workflows/contribution-verification.yml index 03344d11..66847423 100644 --- a/.github/workflows/contribution-verification.yml +++ b/.github/workflows/contribution-verification.yml @@ -20,28 +20,40 @@ jobs: - name: Install exact locked dependencies run: bun install --frozen-lockfile - name: Lint + if: ${{ success() || failure() }} run: bun lint - name: Typecheck + if: ${{ success() || failure() }} run: bun typecheck - name: Design tokens + if: ${{ success() || failure() }} run: bun run check:tokens - name: Docs content + if: ${{ success() || failure() }} run: bun run check:content - name: Tests + if: ${{ success() || failure() }} run: bun run test - name: Coverage + if: ${{ success() || failure() }} run: bun run test:coverage - name: Production build + if: ${{ success() || failure() }} run: bun run build - name: Indexer generation and build + if: ${{ success() || failure() }} run: bun run --cwd apps/s03-indexer codegen && bun run --cwd apps/s03-indexer build - name: Indexer test + if: ${{ success() || failure() }} run: bun run --cwd apps/s03-indexer test - name: Indexer local manifest sync + if: ${{ success() || failure() }} run: SO4_CONTRACTS_REPO="$PWD/apps/s03-indexer/tests/fixtures/contracts-repo" bun run --cwd apps/s03-indexer sync:contracts:local && bash scripts/validate-manifest.sh apps/s03-indexer/config/contracts.local.json - name: Web typecheck + if: ${{ success() || failure() }} run: bun run --cwd apps/web typecheck - name: Web build + if: ${{ success() || failure() }} run: bun run --cwd apps/web build audit: runs-on: ubuntu-latest From 1d9e7ede6c643a0fc8efe28a7cdff61de1b349f2 Mon Sep 17 00:00:00 2001 From: DemolaCodes Date: Sun, 18 Oct 2026 22:15:02 +0100 Subject: [PATCH 6/6] chore: remove temporary CI verification workflow before upstream contribution --- .../workflows/contribution-verification.yml | 66 ------------------- 1 file changed, 66 deletions(-) delete mode 100644 .github/workflows/contribution-verification.yml diff --git a/.github/workflows/contribution-verification.yml b/.github/workflows/contribution-verification.yml deleted file mode 100644 index 66847423..00000000 --- a/.github/workflows/contribution-verification.yml +++ /dev/null @@ -1,66 +0,0 @@ -name: Contribution verification -on: - push: - branches: - - fix/issue-837-pin-dependency-ranges - - ci/issue-838-dependency-security - - fix/issue-846-canonical-brand - - fix/issue-848-referral-chart-labels -jobs: - full-gate: - runs-on: ubuntu-latest - timeout-minutes: 40 - steps: - - uses: actions/checkout@v4 - with: - fetch-depth: 0 - - uses: oven-sh/setup-bun@v2 - with: - bun-version: 1.3.13 - - name: Install exact locked dependencies - run: bun install --frozen-lockfile - - name: Lint - if: ${{ success() || failure() }} - run: bun lint - - name: Typecheck - if: ${{ success() || failure() }} - run: bun typecheck - - name: Design tokens - if: ${{ success() || failure() }} - run: bun run check:tokens - - name: Docs content - if: ${{ success() || failure() }} - run: bun run check:content - - name: Tests - if: ${{ success() || failure() }} - run: bun run test - - name: Coverage - if: ${{ success() || failure() }} - run: bun run test:coverage - - name: Production build - if: ${{ success() || failure() }} - run: bun run build - - name: Indexer generation and build - if: ${{ success() || failure() }} - run: bun run --cwd apps/s03-indexer codegen && bun run --cwd apps/s03-indexer build - - name: Indexer test - if: ${{ success() || failure() }} - run: bun run --cwd apps/s03-indexer test - - name: Indexer local manifest sync - if: ${{ success() || failure() }} - run: SO4_CONTRACTS_REPO="$PWD/apps/s03-indexer/tests/fixtures/contracts-repo" bun run --cwd apps/s03-indexer sync:contracts:local && bash scripts/validate-manifest.sh apps/s03-indexer/config/contracts.local.json - - name: Web typecheck - if: ${{ success() || failure() }} - run: bun run --cwd apps/web typecheck - - name: Web build - if: ${{ success() || failure() }} - run: bun run --cwd apps/web build - audit: - runs-on: ubuntu-latest - timeout-minutes: 15 - steps: - - uses: actions/checkout@v4 - - uses: oven-sh/setup-bun@v2 - with: - bun-version: 1.3.13 - - run: bun audit --audit-level=high