Repository navigation
Conversation
The rule engine used process-local Date methods and the test fixtures used zone-less date strings, so pnpm test failed under any negative UTC offset. Rules are now expanded in Europe/Stockholm wall-clock time through a small Intl-based helper that resolves DST gaps and overlaps the same way V8 does for a process running in that zone, so a server with TZ=Europe/Stockholm behaves exactly as before. The fixtures carry explicit offsets, and the frontend out-of-range picker fixture uses instants that fall outside the picker range at any UTC offset. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
follow-redirects and joi move to their patched releases within the ranges axios and express-openid-connect already declare. The glob and minimatch advisories are only reachable through archiver-utils in the testcontainers tooling for the e2e suite and have no patched release within its ranges, so they are ignored like the existing braces one. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
pnpm test failed with 12 failures under any negative UTC offset (for example TZ=America/Chicago) because the rule engine used process-local Date methods while its fixtures were built from zone-less date strings, and the frontend out-of-range picker test used an instant that is in range in such zones. The rule engine now expands rules in Europe/Stockholm wall-clock time through a small Intl-based helper that resolves DST gaps and overlaps the same way V8 does for a process running in that zone, so production behaviour on a server with TZ=Europe/Stockholm is unchanged (checked with a differential sweep of the old and new code). The fixtures now use explicit offsets and instants outside the picker range at any offset, and the suite passes under TZ=UTC, Europe/Stockholm, America/Chicago, Pacific/Kiritimati and with TZ unset, with no TZ pin in the vitest config.
The second commit resolves the four dependency advisories that made the CI audit step fail for any PR opened now: follow-redirects and joi are bumped to their patched releases in the lockfile, and the dev-only glob and minimatch advisories reachable through testcontainers are ignored the same way as the existing braces one.
🤖 Generated with Claude Code