Merge branch 'main' into add-tracker

Author: ValentaTomas

.cursor/BUGBOT.md

@@ -0,0 +1,23 @@
+# BugBot configuration
+
+This file contains the configuration for the BugBot.
+
+## PR description
+
+- Don't list all the changes by files/change types, just very briefly summarize what is the PR trying to accomplish.
+- Don't list the changes files/dirs.
+- Don't use sections, or lists, ideally just one short paragraph.
+- Don't use emojis.
+
+## PR review
+
+Please review this pull request and provide feedback on:
+
+- Potential bugs or issues
+- Performance considerations
+- Important security concerns
+
+Be constructive and helpful in your feedback and be **very conscise**.
+Skip general recommendations, skip summarizing the changes, and don't make any recommendations on code style.
+Also skip any summarization about why the PR was done well, focus only on the code changes and the potential issues.
+Don't output final summaries, or final lists of action items.

.github/workflows/claude-code-review.yml

@@ -0,0 +1,63 @@
+name: Claude Code Review
+
+on:
+  pull_request:
+    types: [opened]
+
+jobs:
+  claude-review:
+    name: Claude Code Review
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude Code Review
+        id: claude-review
+        uses: anthropics/claude-code-action@v1
+        with:
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          prompt: |
+            REPO: ${{ github.repository }}
+            PR NUMBER: ${{ github.event.pull_request.number }}
+
+            Please review this pull request and provide feedback on:
+            - Potential bugs or issues
+            - Performance considerations
+            - Important security concerns
+
+            Be constructive and helpful in your feedback and be **very conscise**.
+            Skip general recommendations, skip summarizing the changes, and don't make any recommendations on code style.
+            Also skip any summarization about why the PR was done well, focus only on the code changes and the potential issues.
+            Don't output final summaries, or final lists of action items.
+            Reduce false positives—try to validate if the issue is really a valid problem in the changes.
+
+            When you find a *specific issue* in the code (bug, performance concern, security risk, etc.),
+            leave an **inline comment** on that exact file and line.  
+            If no issues are found, do not post anything.
+
+            To comment inline, use this format exactly:
+
+            ```bash
+            gh api \
+              --method POST \
+              -H "Accept: application/vnd.github+json" \
+              -H "X-GitHub-Api-Version: 2022-11-28" \
+              /repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/comments \
+              -f body='${BODY}' \
+              -f commit_id="${{ github.event.pull_request.head.sha }}" \
+              -f path='${PATH}' \
+              -F line=${LINE} \
+              -f side='RIGHT'
+            ```
+
+          claude_args: '--allowed-tools "Bash(gh api:*), Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"'

.github/workflows/lint.yml

@@ -4,8 +4,6 @@ on: [workflow_call]
 
 permissions:
   contents: read
-env:
-  GOLANGCI_LINT_VERSION: v2.4.0
 
 jobs:
   detect-modules:
@@ -30,8 +28,12 @@ jobs:
         uses: ./.github/actions/go-setup-cache
         with:
           job_key: lint-${{ matrix.modules }}
+
+      - name: Parse .tool-versions
+        uses: wistia/parse-tool-versions@v2.1.1
+
       - name: golangci-lint ${{ matrix.modules }}
         uses: golangci/golangci-lint-action@v8
         with:
-          version: ${{ env.GOLANGCI_LINT_VERSION }}
+          version: "v${{ env.GOLANGCI_LINT }}"
           working-directory: ${{ matrix.modules }}

.github/workflows/periodic-test.yml

@@ -56,17 +56,37 @@ jobs:
             name: "pause and resume sandbox"
           - command: "tests/periodic-test/internet-works.ts"
             name: "internet connectivity inside of sandbox"
-          # - command: "tests/periodic-test/cli-logs.ts"
-          #   name: "cli logs"
 
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Install deno
-        uses: denoland/setup-deno@v2
+      - name: Parse .tool-versions
+        uses: wistia/parse-tool-versions@v2.1.1
         with:
-          cache: true
+          filename: ".tool-versions"
+          uppercase: "true"
+          prefix: "tool_version_"
+
+      - name: Install Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "${{ env.TOOL_VERSION_BUN }}"
+
+      - name: Cache Bun dependencies (periodic-test)
+        id: bun-cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.bun/install/cache
+            tests/periodic-test/node_modules
+          key: ${{ runner.os }}-bun-periodic-${{ hashFiles('tests/periodic-test/bun.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-bun-periodic-
+
+      - name: Install dependencies (tests/periodic-test)
+        working-directory: tests/periodic-test
+        run: bun install --frozen-lockfile
 
       - name: Set env variables from secrets
         if: always()
@@ -75,7 +95,7 @@ jobs:
           echo "E2B_ACCESS_TOKEN=${{ secrets[format('{0}', matrix.access_token)] }}" >> $GITHUB_ENV
 
       - name: ${{ matrix.test-command.name }}
-        run: deno run --allow-all ${{ matrix.test-command.command }}
+        run: bun run ${{ matrix.test-command.command }}
         working-directory: ${{ matrix.test-command.dir }}
         env:
           E2B_API_KEY: ${{ env.E2B_API_KEY }}

.github/workflows/pull-request.yml

@@ -21,7 +21,7 @@ jobs:
   unit-tests:
     uses: ./.github/workflows/pr-tests.yml
   integration-tests:
-    needs: [ lint, out-of-order-migrations ]
+    needs: [out-of-order-migrations]
     uses: ./.github/workflows/integration_tests.yml
   publish-test-results:
     needs:
@@ -46,5 +46,5 @@ jobs:
         if: always()
         with:
           comment_mode: off
-          fail_on: 'errors'
+          fail_on: "errors"
           files: "artifacts/**/*.xml"

.tool-versions

@@ -3,3 +3,4 @@ golang 1.24.7
 golangci-lint 2.4.0
 packer 1.13.1
 terraform 1.5.7
+bun 1.3.2