Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump prettier to 3.3.3 and eslint-plugin-prettier to 5.2.1 #8685

Closed

Conversation

rjwebb
Copy link
Collaborator

@rjwebb rjwebb commented Jul 31, 2024

We're using the satisfies keyword in #8537. The current version of Prettier that we are using (2.7.1) does not support this - support was added in version 2.8.1. I also had to upgrade eslint-plugin-prettier since version 4.x is incompatible with prettier 3.x.

@jnaviask
Copy link
Collaborator

@rjwebb please merge your branch against master so we can get CI passing and merge this PR

@jnaviask
Copy link
Collaborator

jnaviask commented Aug 12, 2024

Must have ETH_ALCHEMY_API_KEY env var set in packages/commonwealth/.env to migrate

Interesting, I wonder if having the PR coming in from another repo is causing trouble here. Also not sure what the unit test issue is...

@rjwebb
Copy link
Collaborator Author

rjwebb commented Aug 15, 2024

Yep I think that's the reason. PRs from external repos cannot access the source repo's secrets, otherwise an untrustworthy outsider like me could write a malicious pull request that exfiltrates the secret. So in this case the template value ${{ secrets.ETH_ALCHEMY_API_KEY }} in .github/workflows/CI.yml is not provided which then causes the migration test to fail.

https://stackoverflow.com/a/76975532

https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

@jnaviask
Copy link
Collaborator

jnaviask commented Aug 15, 2024

@rjwebb do you have permission to push a branch to our repo and re-point your PR that way? If not, I can do it, or I can add you.

@rjwebb
Copy link
Collaborator Author

rjwebb commented Aug 15, 2024

Looks like I still have permission, I've created a PR here #8861

@rjwebb rjwebb closed this Aug 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants