Skip to content

Enhance version 0.8.8 with new features, testing improvements, and workflows#64

Merged
ric-v merged 10 commits intodev-asterix:mainfrom
ric-v:main
Apr 3, 2026
Merged

Enhance version 0.8.8 with new features, testing improvements, and workflows#64
ric-v merged 10 commits intodev-asterix:mainfrom
ric-v:main

Conversation

@ric-v
Copy link
Copy Markdown
Member

@ric-v ric-v commented Apr 3, 2026

This pull request introduces several improvements to code quality, test coverage, and CI/CD security analysis for the project. The most significant changes include stricter code coverage enforcement, the addition of new security scanning workflows, and enhancements to test reporting and documentation.

Code Coverage and Quality Configuration:

  • Updated .nycrc.json to enforce higher code coverage thresholds (85% lines/statements, 80% functions, 75% branches), specify precise include/exclude patterns, and add coverage watermarks for easier visualization. [1] [2] [3]
  • Added .c8rc.json, .c8rc.phase-handlers.json, and .c8rc.phase-utils.json files to provide granular coverage configuration for different code areas, ensuring coverage checks are applied consistently and strictly. [1] [2] [3]

CI/CD and Security Workflows:

  • Introduced a new CodeQL workflow (.github/workflows/codeql.yml) for advanced static code analysis, covering both JavaScript/TypeScript and GitHub Actions code.
  • Added a Fortify AST scan workflow (.github/workflows/fortify.yml) to automate SAST and open-source dependency scans, integrating results into GitHub Security Code Scanning Alerts.
  • Updated test workflow (.github/workflows/test.yml) to explicitly set permissions and switch the coverage command to npm run coverage:phased for improved phased coverage reporting. [1] [2]

Documentation and Release Notes:

  • Added a new changelog entry for version 0.8.8, highlighting new features (command palette release notes, additional tests, table designer improvements, AI chat safety rules), UI changes, and notebook edit improvements.
  • Updated the project status badge link in README.md to point to the correct GitHub repository.

Minor Workflow Fixes:

  • Fixed a variable reference in the summary workflow to ensure the correct response is used in issue comments.
  • Added an npm-update target to the Makefile for easier dependency management.

These changes collectively strengthen the project's quality gates, security posture, and developer experience.

ric-v and others added 10 commits March 21, 2026 23:07
…ration, improved sidebar layout, and enhanced notebook editing with transaction safety.
…ings, and improve test command structure for better reporting and coverage metrics.
…better testing

- Updated the `vscode` mock to include more comprehensive interfaces and methods for `workspace`, `window`, and `commands`.
- Added support for notebook-related functionalities, including `NotebookDocument`, `NotebookCell`, and `NotebookController`.
- Introduced new utility functions for handling coverage analysis, including `analyze-coverage.js`, `compute-coverage.js`, `debug-coverage.js`, `find-uncovered.js`, and `parse-lcov.js`.
- Added tests for additional error handling branches in `QueryHandlers`, ensuring robust coverage for various scenarios.
- Created a type declaration for `chai-as-promised` to enhance testing capabilities.
This workflow integrates Fortify Application Security Testing into GitHub workflows, enabling SAST and SCA scans.
@ric-v ric-v merged commit 8f51945 into dev-asterix:main Apr 3, 2026
3 of 16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant