Skip to content

SQSCANGHA-138 Update dist and add ci test#233

Merged
claire-villard-sonarsource merged 2 commits into
masterfrom
avi/update-dist-and-ci
Apr 23, 2026
Merged

SQSCANGHA-138 Update dist and add ci test#233
claire-villard-sonarsource merged 2 commits into
masterfrom
avi/update-dist-and-ci

Conversation

@antoine-vinot-sonarsource

Copy link
Copy Markdown
Contributor

No description provided.

@hashicorp-vault-sonar-prod hashicorp-vault-sonar-prod Bot changed the title Update dist and add ci test SQSCANGHA-138 Update dist and add ci test Apr 21, 2026
@hashicorp-vault-sonar-prod

hashicorp-vault-sonar-prod Bot commented Apr 21, 2026

Copy link
Copy Markdown

SQSCANGHA-138

@sonar-review-alpha

sonar-review-alpha Bot commented Apr 21, 2026

Copy link
Copy Markdown

Summary

This PR adds CI checks to the unit-tests workflow to ensure the dist/ folder remains up-to-date with the source code.

Changes:

  • Adds a Build step that runs npm run build to compile the distribution files
  • Adds a Check dist/ is up-to-date step that fails if there are uncommitted changes in dist/, preventing stale builds from being merged

Why: Keeps the distributed code synchronized with source changes and ensures developers don't forget to rebuild before committing.

What reviewers should know

What to check:

  • Verify the git diff check correctly catches both staged and unstaged changes in dist/ (uses git diff --exit-code and git status --porcelain)
  • The error message is clear for developers on how to fix the failure (npm run build + commit)
  • The check runs after npm ci so dependencies are available

Context: SQSCANGHA-138 is addressed by catching dist staleness before merge, not allowing out-of-date distributions into the codebase.


  • Generate Walkthrough
  • Generate Diagram

🗣️ Give feedback

sonar-review-alpha[bot]

This comment was marked as resolved.

sonar-review-alpha[bot]

This comment was marked as outdated.

sonar-review-alpha[bot]

This comment was marked as outdated.

@sonarqubecloud

Copy link
Copy Markdown

@sonar-review-alpha sonar-review-alpha Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! ✅

The implementation is correct. The two-check combination (git diff --exit-code for tracked file modifications + git status --porcelain for untracked new files) provides complete coverage of all ways dist/ can be stale after a build. Step ordering is correct and the error message is actionable.

🗣️ Give feedback

@potiuk

potiuk commented Apr 21, 2026

Copy link
Copy Markdown
Contributor

LGTM !

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

@claire-villard-sonarsource claire-villard-sonarsource merged commit 30dbe5c into master Apr 23, 2026
74 checks passed
@claire-villard-sonarsource claire-villard-sonarsource deleted the avi/update-dist-and-ci branch April 23, 2026 12:20
luketainton pushed a commit to luketainton/repos_epage-go that referenced this pull request Apr 28, 2026
…(#8)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action) | action | minor | `v7.1.0` → `v7.2` |

---

### Release Notes

<details>
<summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary>

### [`v7.2`](SonarSource/sonarqube-scan-action@v7.2.0...v7.2.0)

[Compare Source](SonarSource/sonarqube-scan-action@v7.2.0...v7.2.0)

### [`v7.2.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v7.2.0)

[Compare Source](SonarSource/sonarqube-scan-action@v7.1.0...v7.2.0)

#### What's Changed

- SQSCANGHA-133 Upgrade the Node version used in UTs + contribution guide by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;226](SonarSource/sonarqube-scan-action#226)
- SC-45750 Migrate to dateless license headers by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;229](SonarSource/sonarqube-scan-action#229)
- SQSCANGHA-134 Upgrade the libraries to latest version by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;227](SonarSource/sonarqube-scan-action#227)
- SQSCANGHA-138 Update dist and add ci test by [@&#8203;antoine-vinot-sonarsource](https://github.com/antoine-vinot-sonarsource) in [#&#8203;233](SonarSource/sonarqube-scan-action#233)
- SQSCANGHA-140 Add OpenPGP signature verification for scanner downloads by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;235](SonarSource/sonarqube-scan-action#235)

**Full Changelog**: <SonarSource/sonarqube-scan-action@v7...v7.2.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: https://git.tainton.uk/repos/epage-go/pulls/8
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton pushed a commit to luketainton/repos_pypilot that referenced this pull request Apr 28, 2026
…(#440)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action) | action | minor | `v7.1.0` → `v7.2` |

---

### Release Notes

<details>
<summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary>

### [`v7.2`](SonarSource/sonarqube-scan-action@v7.2.0...v7.2.0)

[Compare Source](SonarSource/sonarqube-scan-action@v7.2.0...v7.2.0)

### [`v7.2.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v7.2.0)

[Compare Source](SonarSource/sonarqube-scan-action@v7.1.0...v7.2.0)

#### What's Changed

- SQSCANGHA-133 Upgrade the Node version used in UTs + contribution guide by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;226](SonarSource/sonarqube-scan-action#226)
- SC-45750 Migrate to dateless license headers by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;229](SonarSource/sonarqube-scan-action#229)
- SQSCANGHA-134 Upgrade the libraries to latest version by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;227](SonarSource/sonarqube-scan-action#227)
- SQSCANGHA-138 Update dist and add ci test by [@&#8203;antoine-vinot-sonarsource](https://github.com/antoine-vinot-sonarsource) in [#&#8203;233](SonarSource/sonarqube-scan-action#233)
- SQSCANGHA-140 Add OpenPGP signature verification for scanner downloads by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;235](SonarSource/sonarqube-scan-action#235)

**Full Changelog**: <SonarSource/sonarqube-scan-action@v7...v7.2.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: https://git.tainton.uk/repos/pypilot/pulls/440
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton pushed a commit to luketainton/repos_roboluke that referenced this pull request Apr 28, 2026
…(#445)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action) | action | minor | `v7.1.0` → `v7.2` |

---

### Release Notes

<details>
<summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary>

### [`v7.2`](SonarSource/sonarqube-scan-action@v7.2.0...v7.2.0)

[Compare Source](SonarSource/sonarqube-scan-action@v7.2.0...v7.2.0)

### [`v7.2.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v7.2.0)

[Compare Source](SonarSource/sonarqube-scan-action@v7.1.0...v7.2.0)

#### What's Changed

- SQSCANGHA-133 Upgrade the Node version used in UTs + contribution guide by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;226](SonarSource/sonarqube-scan-action#226)
- SC-45750 Migrate to dateless license headers by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;229](SonarSource/sonarqube-scan-action#229)
- SQSCANGHA-134 Upgrade the libraries to latest version by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;227](SonarSource/sonarqube-scan-action#227)
- SQSCANGHA-138 Update dist and add ci test by [@&#8203;antoine-vinot-sonarsource](https://github.com/antoine-vinot-sonarsource) in [#&#8203;233](SonarSource/sonarqube-scan-action#233)
- SQSCANGHA-140 Add OpenPGP signature verification for scanner downloads by [@&#8203;claire-villard-sonarsource](https://github.com/claire-villard-sonarsource) in [#&#8203;235](SonarSource/sonarqube-scan-action#235)

**Full Changelog**: <SonarSource/sonarqube-scan-action@v7...v7.2.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: https://git.tainton.uk/repos/roboluke/pulls/445
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants