chore: bump deps, update CI artifacts, and clean up Claude Code settings#45
chore: bump deps, update CI artifacts, and clean up Claude Code settings#45michellepace merged 7 commits intomainfrom
Conversation
Dependencies: - next 16.2.1 → 16.2.2, @clerk/nextjs 7.0.7 → 7.0.8, @clerk/ui 1.2.4 → 1.3.0, @clerk/testing 2.0.7 → 2.0.8 - @playwright/test 1.58.2 → 1.59.1, lefthook 2.1.4 → 2.1.5 - dotenv 17.3.1 → 17.4.1, baseline-browser-mapping 2.10.13 → 2.10.16 - Pin tailwindcss range to ^4.2.2, bump @types/node to 25.5.2 CI: - Upgrade actions/upload-artifact from v6 to v7 in both E2E workflows Config: - Update CLAUDE.md tech stack versions to match installed - Collapse vitest.config.ts resolve block to single line Routine dependency refresh and CI action bump. No functional changes. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Permissions: - Fix glob syntax from colon separator to space (e.g. "Bash(git diff:*)" → "Bash(git diff *)") - Sort allow list alphabetically - Add npm ci, npm ls, npm outdated permissions - Reorder sections: deny/ask before allow Housekeeping: - Add JSON schema reference - Remove enabledPlugins and extraKnownMarketplaces sections Corrects permission matching syntax and removes unused plugin configuration. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 14 minutes and 8 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Pro Run ID: 📒 Files selected for processing (1)
WalkthroughAdds a JSON schema and restructures Claude settings (permissions and plugins), bumps multiple dependency versions, updates GitHub Actions upload-artifact steps and job timeouts, adds a markdownlint ignore rule, minor Vitest config formatting, updates CLAUDE.md version strings, and deletes three Changes
Estimated code review effort🎯 4 (Complex) | ⏱️ ~40 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In @.claude/settings.json:
- Around line 39-51: The allowlist entries "Bash(sed *)" and "Bash(xargs *)" are
overly broad and permit dangerous in-place edits or arbitrary command execution;
update .claude/settings.json by removing or narrowing these entries—either
remove "Bash(sed *)" and "Bash(xargs *)" entirely or replace them with specific,
safe subcommands (e.g., explicit arguments or fixed help/version invocations)
and/or add a config comment documenting the risk so reviewers know the change is
intentional; target the exact entries "Bash(sed *)" and "Bash(xargs *)" in the
array when making the change.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Pro
Run ID: 19d0e683-a16a-4d18-b4c9-f3e32b873c2d
⛔ Files ignored due to path filters (1)
package-lock.jsonis excluded by!**/package-lock.json
📒 Files selected for processing (7)
.claude/CLAUDE.md.claude/settings.json.github/workflows/test-e2e-vercel.yml.github/workflows/test-e2e.yml.markdownlint-cli2.yamlpackage.jsonvitest.config.ts
Remove Bash(sed *), Bash(xargs *), and Bash(npx vercel *) from the Claude Code allowlist — sed and xargs permit arbitrary file edits and command execution, and the broad npx vercel glob exposes destructive commands (rm, env rm) beyond the specific read-only vercel entries already listed. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Dependencies: - @clerk/nextjs 7.0.8 → 7.0.12, @clerk/ui 1.3.0 → 1.5.0 - next 16.2.2 → 16.2.3, react/react-dom 19.2.4 → 19.2.5 Dev dependencies: - @clerk/testing 2.0.8 → 2.0.12, jsdom 29.0.1 → 29.0.2 - shadcn 4.1.2 → 4.2.0, vitest 4.1.2 → 4.1.3 Routine patch and minor version bumps across the stack. All updates are within existing semver ranges. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Removed commands: - commit.md, merge-cleanup.md, coderabbit.md — now provided by git-utils plugin from my-claude-marketplace Settings: - Register my-claude-marketplace and enable git-utils plugin - Reformat permissions block (no functional change) Centralises shared git commands in a marketplace plugin so they are maintained once across projects rather than duplicated per repo. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Playwright browser install via apt-get can exceed 10 minutes on slow GitHub Actions runners, causing the job to be cancelled before tests run. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The dev-browser-sync handshake redirect is slow on GitHub Actions WebKit runners, causing the 5s default timeout to expire before the user menu button becomes visible. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 participant
Summary
actions/upload-artifactfrom v6 to v7 in both E2E workflows.npm ci/ls/outdatedpermissions, remove unusedenabledPluginsandextraKnownMarketplacessections.No functional changes.
Test plan
🤖 Generated with Claude Code