Skip to content

merge queue: embarking main (3b10fe1), #789 and #787 together#792

Closed
mergify[bot] wants to merge 4 commits intomainfrom
mergify/merge-queue/fe1c2dcf91
Closed

merge queue: embarking main (3b10fe1), #789 and #787 together#792
mergify[bot] wants to merge 4 commits intomainfrom
mergify/merge-queue/fe1c2dcf91

Conversation

@mergify
Copy link

@mergify mergify bot commented Mar 26, 2026 •
edited
Loading

🎉 This pull request has been checked successfully and will be merged soon. 🎉

Branch main (3b10fe1), #789 and #787 are embarked together for merge.

This pull request has been created by Mergify to speculatively check the mergeability of #787.
You don't need to do anything. Mergify will close this pull request automatically when it is complete.

Required conditions of queue rule default for merge:

Required conditions to stay in the queue:

---
checking_base_sha: f328b697599a6ef3c703332cd84b906d5eac716f
previous_failed_batches: []
pull_requests:
  - number: 787
    scopes: []
scopes: []
...

@vercel
Copy link

vercel bot commented Mar 26, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
doxynix Ignored Ignored Open in v0 Mar 26, 2026 9:51pm

@github-actions
Copy link

github-actions bot commented Mar 26, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 3 package(s) with unknown licenses.
  • ⚠️ 1 packages with OpenSSF Scorecard issues.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 46e0ff1.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

pnpm-lock.yaml

PackageVersionLicenseIssue Type
@trpc/client11.15.1NullUnknown License
@trpc/react-query11.15.1NullUnknown License
@trpc/server11.15.1NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
actions/pnpm/action-setup 738f428026a1f5a72398de22aeed83d859c4a660 🟢 5.7
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 96 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 9
Code-Review🟢 7Found 22/30 approved changesets -- score normalized to 7
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@posthog/types 1.363.6 🟢 7
Details
CheckScoreReason
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 9binaries present in source code
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
Fuzzing🟢 10project is fuzzed
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
SAST🟢 9SAST tool detected but not run on all commits
npm/@trpc/client 11.15.1 UnknownUnknown
npm/@trpc/react-query 11.15.1 UnknownUnknown
npm/@trpc/server 11.15.1 UnknownUnknown
npm/@vitest/coverage-v8 4.1.2 UnknownUnknown
npm/@vitest/expect 4.1.2 UnknownUnknown
npm/@vitest/mocker 4.1.2 UnknownUnknown
npm/@vitest/pretty-format 4.1.2 UnknownUnknown
npm/@vitest/runner 4.1.2 UnknownUnknown
npm/@vitest/snapshot 4.1.2 UnknownUnknown
npm/@vitest/spy 4.1.2 UnknownUnknown
npm/@vitest/utils 4.1.2 UnknownUnknown
npm/knip 6.0.6 UnknownUnknown
npm/lucide-react 1.7.0 ⚠️ 2.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 4Found 12/30 approved changesets -- score normalized to 4
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Security-Policy⚠️ 0security policy file not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/posthog-js 1.363.6 🟢 7
Details
CheckScoreReason
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 9binaries present in source code
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
Fuzzing🟢 10project is fuzzed
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
SAST🟢 9SAST tool detected but not run on all commits
npm/posthog-node 5.28.6 🟢 7
Details
CheckScoreReason
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 9binaries present in source code
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
Fuzzing🟢 10project is fuzzed
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
SAST🟢 9SAST tool detected but not run on all commits
npm/vitest 4.1.2 UnknownUnknown

Scanned Files

  • .github/workflows/release.yml
  • pnpm-lock.yaml

@mergify mergify bot mentioned this pull request Mar 26, 2026
Merged
1 task
@sentry
Copy link

sentry bot commented Mar 26, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@mergify mergify bot closed this Mar 26, 2026
@mergify mergify bot deleted the mergify/merge-queue/fe1c2dcf91 branch March 26, 2026 22:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

configs

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants