fix db seed - #58
fix db seed#58
Conversation
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
1 Skipped Deployment
|
|
Caution Review failedThe pull request is closed. WalkthroughThis pull request enhances the seeding process by adding error handling during the processing of policy files and refines the data structure of the Policy interface. In the seeding script, a try-catch block is introduced to manage errors in file reading and JSON parsing, ensuring that one faulty file does not halt the entire process. In parallel, the Policy interface is updated by adding a new top-level Changes
Sequence Diagram(s)sequenceDiagram
participant SeedFunction as Seed Function
participant FileSystem as File System
participant Logger as Logger
participant Database as Database
SeedFunction->>FileSystem: Read & parse policy file
alt Parsing is successful
SeedFunction->>Database: Upsert policy data
else Error occurs
SeedFunction->>Logger: Log error with file details
end
Poem
📜 Recent review detailsConfiguration used: CodeRabbit UI 📒 Files selected for processing (2)
✨ Finishing Touches
🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
… (#3412) apps/mcp-server is a standalone npm project (excluded from the bun workspaces). Three open Dependabot alerts, all dev-scope transitives: - #59 (high) + #58 (low): tmp path traversal / symlink write — tmp@0.0.33 via external-editor; patched in tmp>=0.2.6 - #71 (moderate): js-yaml quadratic-complexity DoS — js-yaml@4.1.1 via @eslint/eslintrc; patched in js-yaml>=4.2.0 Add npm overrides (caret-pinned to stay within the safe major): - tmp ^0.2.6 -> resolves 0.2.7 (fileSync API is stable, external-editor works) - js-yaml ^4.2.0 -> resolves 4.3.0 (satisfies eslintrc's ^4.1.1; NOT floated to v5, which would be an unvetted breaking major) Verified: npm audit 0 vulnerabilities; mcp-server build + lint pass. (bun.lock is gitignored and regenerated from package-lock.json at build.) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
# [3.102.0](v3.101.2...v3.102.0) (2026-07-15) ### Bug Fixes * **ci:** pin Syft 1.46.0 in SBOM action (1.42.3 can't parse bun.lock) ([#3415](#3415)) ([5f47024](5f47024)) * **ci:** scan bun.lock via file: input so the SBOM isn't empty ([#3414](#3414)) ([e47e6fd](e47e6fd)) * **deps:** override uuid to ^11.1.1 (Dependabot [#85](#85)) ([#3418](#3418)) ([598ff8c](598ff8c)) * **deps:** patch tmp and js-yaml in mcp-server (Dependabot [#58](https://github.com/trycompai/comp/issues/58)/[#59](https://github.com/trycompai/comp/issues/59)/[#71](https://github.com/trycompai/comp/issues/71)) ([#3412](#3412)) ([59a6b0f](59a6b0f)) * **deps:** remediate dependency security vulnerabilities ([#3403](#3403)) ([7577a37](7577a37)) * **deps:** remediate dependency security vulnerabilities (165→16, 4 critical→0) ([#3406](#3406)) ([d403e9c](d403e9c)) * **device-agent:** implement the installer-cleanup fix ([#3381](#3381)) ([0f7581b](0f7581b)) * **security:** prevent SSRF in task-automation enterprise API calls ([#3411](#3411)) ([dcec288](dcec288)), closes [#116](#116) * **security:** resolve open CodeQL alerts (XSS, sanitization, workflow perms) ([#3419](#3419)) ([32329be](32329be)), closes [#108](#108) [js/xss-throu#dom](https://github.com/js/xss-throu/issues/dom) [#95](#95) [84/#85](#85) ### Features * **framework-editor:** raise requirement description limit to 100,000 chars (FRAME-2) ([67c9f4a](67c9f4a))
Summary by CodeRabbit
Bug Fixes
New Features