Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Oct 23, 2025

Problem

The CLI version checker workflow had two limitations:

  1. Limited npm registry access - only registry.npmjs.org was allowed, preventing access to other npm-related domains
  2. No explicit enforcement that issues must be created when version changes are detected

Solution

1. Comprehensive NPM Domain Access

Changed network permissions from a single npm domain to the node ecosystem identifier:

network: 
-   allowed: [defaults, "registry.npmjs.org", "api.github.com", "ghcr.io"]
+   allowed: [defaults, node, "api.github.com", "ghcr.io"]

This expands access to all 16 node ecosystem domains including:

  • All npmjs domains: npmjs.org, npmjs.com, registry.npmjs.com, registry.npmjs.org, skimdb.npmjs.com
  • Package managers: npm.pkg.github.com, yarnpkg.com, get.pnpm.io
  • Runtimes: nodejs.org, bun.sh, deno.land
  • APIs: api.npms.io
  • Build tools: deb.nodesource.com, registry.bower.io

2. Mandatory Issue Creation

Added explicit requirements in two locations to ensure issues are always created when version changes are detected:

In the Process section:

**CRITICAL**: If ANY version changes are detected, you MUST create an issue using 
safe-outputs.create-issue. Do not skip issue creation even for minor updates.

In the Update Process section:

4. **REQUIRED**: Create issue via safe-outputs with detailed analysis (do NOT skip this step)

Testing

  • ✅ All unit tests pass
  • ✅ Workflow compiles successfully with no errors or warnings
  • ✅ Verified lock file contains expanded domain list (16 node ecosystem domains)
  • ✅ Ecosystem domain expansion validated against existing tests

Impact

The workflow can now:

  • Fetch package metadata from any npm-related domain without restrictions
  • Access alternative registries and package managers
  • Enforces consistent issue tracking for all version updates
Original prompt

Update cli version helper agentic workflow:

  • allow web fetch access to npmjs domains.
  • insist on creating an issue if a version change is detected.

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

…issue requirement

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title [WIP] Update CLI version helper agentic workflow Update cli-version-checker workflow: add node ecosystem and enforce issue creation Oct 23, 2025
Copilot AI requested a review from pelikhan October 23, 2025 14:30
@pelikhan pelikhan marked this pull request as ready for review October 23, 2025 14:37
@pelikhan pelikhan merged commit 7582ccf into main Oct 23, 2025
8 checks passed
@pelikhan pelikhan deleted the copilot/update-cli-version-helper-workflow branch October 23, 2025 14:37
@github-actions
Copy link
Contributor

Agentic Changeset Generator triggered by this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants