chore: Fix audit 2026-03-01#165
Merged
Patrick Lafrance (patricklafrance) merged 4 commits intomainfrom Mar 2, 2026
Merged
Conversation
- Introduced snapshot testing guide in vitest with examples for basic, inline, and file snapshots, including error handling and custom serializers. - Added workleap web configuration documentation covering ESLint, TypeScript, Rsbuild, Rslib, Stylelint, and Browserslist setups. - Created detailed references for ESLint, Rsbuild, Rslib, Stylelint, and TypeScript configurations, including installation, customization, and CLI scripts.
Patrick Lafrance (patricklafrance)
requested a review
from a team
as a code owner
Copilot started reviewing on behalf of
Patrick Lafrance (patricklafrance)
March 2, 2026 18:54
View session
@workleap/common-room
@workleap-telemetry/core
@workleap/honeycomb
@workleap/logrocket
@workleap/mixpanel
@workleap/telemetry
commit: |
Contributor
There was a problem hiding this comment.
Pull request overview
This PR addresses audit findings by updating workspace dependency specifiers to publish as semver ranges (instead of exact pins) and by updating/adding agent skill documentation + lock entries.
Changes:
- Updated internal workspace dependency specifiers from
workspace:*toworkspace:^(including the@workleap/logrocketpeer dependency in@workleap/mixpanel). - Updated
skills-lock.jsonand added/updated skill content (notably Turborepo + Workleap web configs + Vitest references). - Added a changeset to publish patch bumps for affected packages.
Reviewed changes
Copilot reviewed 58 out of 59 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| skills-lock.json | Reformats the lock file and adds the turborepo skill entry / updates hashes. |
| packages/telemetry/package.json | Switches internal workspace dependencies to workspace:^. |
| packages/mixpanel/package.json | Fixes audit finding by switching peer dependency to workspace:^ and aligns internal dependency specifier too. |
| packages/logrocket/package.json | Switches internal workspace dependency to workspace:^. |
| packages/honeycomb/package.json | Switches internal workspace dependency to workspace:^. |
| packages/common-room/package.json | Switches internal workspace dependency to workspace:^. |
| .claude/skills/workleap-web-configs/references/typescript.md | Adds Workleap TypeScript-config reference documentation. |
| .claude/skills/workleap-web-configs/references/stylelint.md | Adds Workleap Stylelint-config reference documentation. |
| .claude/skills/workleap-web-configs/references/rslib.md | Adds Workleap Rslib-config reference documentation. |
| .claude/skills/workleap-web-configs/references/rsbuild.md | Adds Workleap Rsbuild-config reference documentation. |
| .claude/skills/workleap-web-configs/references/eslint.md | Adds Workleap ESLint-config reference documentation. |
| .claude/skills/workleap-web-configs/SKILL.md | Adds a Claude skill descriptor for Workleap web configs. |
| .claude/skills/vitest/references/features-snapshots.md | Adds Vitest snapshot-testing reference documentation. |
| .claude/skills/vitest/references/features-mocking.md | Adds Vitest mocking reference documentation. |
| .claude/skills/vitest/references/features-filtering.md | Adds Vitest test-filtering reference documentation. |
| .claude/skills/vitest/references/features-coverage.md | Adds Vitest coverage reference documentation. |
| .claude/skills/vitest/references/features-context.md | Adds Vitest test-context/fixtures reference documentation. |
| .claude/skills/vitest/references/features-concurrency.md | Adds Vitest concurrency reference documentation. |
| .claude/skills/vitest/references/core-test-api.md | Adds Vitest test API reference documentation. |
| .claude/skills/vitest/references/core-hooks.md | Adds Vitest hooks reference documentation. |
| .claude/skills/vitest/references/core-expect.md | Adds Vitest expect/assertions reference documentation. |
| .claude/skills/vitest/references/core-describe.md | Adds Vitest describe/suite reference documentation. |
| .claude/skills/vitest/references/core-config.md | Adds Vitest configuration reference documentation. |
| .claude/skills/vitest/references/core-cli.md | Adds Vitest CLI reference documentation. |
| .claude/skills/vitest/references/advanced-vi.md | Adds advanced Vitest vi utilities reference documentation. |
| .claude/skills/vitest/references/advanced-type-testing.md | Adds Vitest type-testing reference documentation. |
| .claude/skills/vitest/references/advanced-projects.md | Adds Vitest projects/workspaces reference documentation. |
| .claude/skills/vitest/references/advanced-environments.md | Adds Vitest environment reference documentation. |
| .claude/skills/vitest/SKILL.md | Adds a Claude skill descriptor for Vitest. |
| .claude/skills/vitest/GENERATION.md | Records generation metadata for the Vitest skill content. |
| .changeset/major-hornets-sleep.md | Publishes patch bumps for packages affected by the dependency specifier change. |
| .agents/skills/workleap-web-configs/SKILL.md | Updates the agent skill descriptor content/structure for Workleap web configs. |
| .agents/skills/turborepo/references/watch/RULE.md | Adds Turborepo watch reference documentation. |
| .agents/skills/turborepo/references/filtering/patterns.md | Adds Turborepo filtering patterns reference documentation. |
| .agents/skills/turborepo/references/filtering/RULE.md | Adds Turborepo filtering syntax reference documentation. |
| .agents/skills/turborepo/references/environment/modes.md | Adds Turborepo environment modes reference documentation. |
| .agents/skills/turborepo/references/environment/gotchas.md | Adds Turborepo environment gotchas reference documentation. |
| .agents/skills/turborepo/references/environment/RULE.md | Adds Turborepo environment variable reference documentation. |
| .agents/skills/turborepo/references/configuration/tasks.md | Adds Turborepo task configuration reference documentation. |
| .agents/skills/turborepo/references/configuration/gotchas.md | Adds Turborepo configuration gotchas reference documentation. |
| .agents/skills/turborepo/references/configuration/global-options.md | Adds Turborepo global options reference documentation. |
| .agents/skills/turborepo/references/configuration/RULE.md | Adds Turborepo configuration overview reference documentation. |
| .agents/skills/turborepo/references/cli/commands.md | Adds Turborepo CLI flags reference documentation. |
| .agents/skills/turborepo/references/cli/RULE.md | Adds Turborepo CLI usage guidance reference documentation. |
| .agents/skills/turborepo/references/ci/vercel.md | Adds Turborepo + Vercel CI reference documentation. |
| .agents/skills/turborepo/references/ci/patterns.md | Adds Turborepo CI optimization patterns reference documentation. |
| .agents/skills/turborepo/references/ci/github-actions.md | Adds Turborepo GitHub Actions reference documentation. |
| .agents/skills/turborepo/references/ci/RULE.md | Adds Turborepo CI rules/guidance reference documentation. |
| .agents/skills/turborepo/references/caching/remote-cache.md | Adds Turborepo remote caching reference documentation. |
| .agents/skills/turborepo/references/caching/gotchas.md | Adds Turborepo caching gotchas reference documentation. |
| .agents/skills/turborepo/references/caching/RULE.md | Adds Turborepo caching overview reference documentation. |
| .agents/skills/turborepo/references/boundaries/RULE.md | Adds Turborepo boundaries feature reference documentation. |
| .agents/skills/turborepo/references/best-practices/structure.md | Adds Turborepo repo-structure best practices reference documentation. |
| .agents/skills/turborepo/references/best-practices/packages.md | Adds Turborepo package best practices reference documentation. |
| .agents/skills/turborepo/references/best-practices/dependencies.md | Adds Turborepo dependency management best practices reference documentation. |
| .agents/skills/turborepo/references/best-practices/RULE.md | Adds Turborepo best practices overview reference documentation. |
| .agents/skills/turborepo/command/turborepo.md | Adds the Turborepo skill command entrypoint documentation. |
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+42
to
+47
| ```json | ||
| // tsconfig.json | ||
| { | ||
| "extends": ["@workleap/typescript-configs/web-application.json"], | ||
| "exclude": ["dist", "node_modules"] | ||
| } |
There was a problem hiding this comment.
The tsconfig examples here aren’t valid TypeScript tsconfig.json: extends only accepts a string (not an array), and this code block is tagged as json but includes a // tsconfig.json comment. Suggest switching extends to a string and using jsonc (or removing comments) for these examples (same applies to the other tsconfig snippets in this doc).
Patrick Lafrance (patricklafrance)
deleted the
chore/fix-audit-2026-03-01
branch
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fix #164