Skip to content

fix(stackiq): clear the reds the development run found - #1408

Merged
rubenvdlinde merged 1 commit into
developmentfrom
fix/stackiq-dev-run-debt
Nov 3, 2026
Merged

rubenvdlinde merged 1 commit into
developmentfrom
fix/stackiq-dev-run-debt

Conversation

@rubenvdlinde

Copy link
Copy Markdown
Contributor

One full run on development bf97b14 (after #1387, #1388, #1390 to #1394 and #1402 merged) found these reds. This PR fixes them.

What changed

  • composer.lock: symfony/mime 7.4.12 to 7.4.22, for CVE-2026-45070 (gate 4, composer-audit). Lock only; composer audit --locked is clean.
  • src/manifest.json: the Reports menu entry moves from section settings to footer, as ADR-112 and ADR-114 ask (gates 104 and 107).
  • @SPEC tags: 15 tags and one tasks.md link pointed at the old REQ-RCC-002 heading, renamed in 1b348ee. They now point at the current heading (gate 46).
  • prettier: npm run format failed on 7 files from the GEMMA plate and data quality work. Formatting only.
  • Test stubs: the ObjectEntity stub declares jsonSerialize(): array like OpenRegister does, which removes the one PHPUnit deprecation (one test double updated to match). A copy of OpenRegister's UserProfileUpdatedEvent lets its four listener tests run under the unit bootstrap instead of skipping.

Verified locally (exit codes)

  • PHPUnit, full unit suite under pcov with --fail-on-risky: exit 0, 1556 tests, 0 risky, 0 deprecations. Skips went from 63 to 20. 39 of the 43 came back because OpenRegister (development) was mounted next to the app, the same way CI provides it; 4 came back through the new stub.
  • vitest 872/872, jest 215/215, npm run lint 0 errors, npm run format exit 0, npm run check:manifest exit 0.
  • development itself: composer check:strict ALL CHECKS PASSED.
  • hydra gates full scope (--full): 82 of 82 applicable gates ran. Gates 4, 46, 104 and 107 now pass. Gates 22 and 53 still fail locally because the vendored package (v1.18.0) carries manifest schema 2.33.0. The manifest passes the schema on .github main (2.171.0, .github#896), which is what CI uses.

Left open

20 tests stay skipped as stale: StackiqEventListenerTest (12), OrganisationUserWorkflowTest (6) and ContactPersonHandlerTest (2). They cover user and group assignment for contact persons, so rewriting them belongs in a separate REVIEW PR.

This PR was prepared with help from Claude Code (AI). The changes were checked with the runs listed above.

- composer.lock: symfony/mime 7.4.12 -> 7.4.22 (CVE-2026-45070, gate 4).
- manifest: the Reports menu entry sits in the footer section (gates 104, 107).
- @SPEC tags point at the renamed REQ-RCC-002 heading (gate 46).
- prettier on the seven files format --check rejected.
- Test stubs: ObjectEntity::jsonSerialize() returns array like OpenRegister's
  (the one PHPUnit deprecation), and a UserProfileUpdatedEvent copy so its
  four listener tests run under the unit bootstrap.

Assisted-by: ClaudeCode:claude-opus-5-5
@rubenvdlinde
rubenvdlinde merged commit ea0dcc2 into development Nov 3, 2026
8 checks passed
@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

Quality Report — ConductionNL/stackiq @ 2a9c1a1

Check PHP Vue Security License Tests
lint ✅
phpcs ✅
phpmd ✅
psalm ✅
phpstan ✅
phpmetrics ✅
eslint ✅
stylelint ✅
build ✅
check-manifest ✅
check-vue-demi ✅
test-l10n ✅
format ✅
check-schema-l10n ❌
check-l10n-js ✅
composer ✅ ✅ 127/127
npm ❌ ✅ 807/807
app:check-code ⏭️
info.xml ✅
REUSE ❌
lockfile sync ✅
PHPUnit ❌ 1542/1548 · 24 skipped
Newman ⏭️
Playwright ⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it locally with npx playwright test, or from the Actions tab on a branch with no open pull request into development.
Hydra gates ❌

Quality workflow — 2026-11-03 19:44 UTC

Download the full PDF report from the workflow artifacts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant