Skip to content

Claude/address report issues 011 c uhf98bf eq kig avwpfy xk#395

Merged
Jamie-BitFlight merged 2 commits intomainfrom
claude/address-report-issues-011CUhf98bfEqKigAvwpfyXK
Nov 1, 2025
Merged

Claude/address report issues 011 c uhf98bf eq kig avwpfy xk#395
Jamie-BitFlight merged 2 commits intomainfrom
claude/address-report-issues-011CUhf98bfEqKigAvwpfyXK

Conversation

@Jamie-BitFlight
Copy link
Contributor

@Jamie-BitFlight Jamie-BitFlight commented Nov 1, 2025

Summary by CodeRabbit

  • Chores
    • Updated build configuration to enable direct execution of generated scripts as Node.js programs.

Fixes #280

The CLI executable was missing the #!/usr/bin/env node shebang,
causing the shell to interpret the JavaScript code directly. This
resulted in the error: "syntax error near unexpected token 'async'"

The fix adds the shebang to the ESM_REQUIRE_SHIM in esbuild.mjs,
ensuring the CLI runs correctly on Node 20+.

Validated by:
- Replicating the error with the broken version
- Applying the fix and rebuilding
- Confirming --help and --version commands work
- Verifying no async syntax errors
@coderabbitai
Copy link

coderabbitai bot commented Nov 1, 2025

Caution

Review failed

The pull request is closed.

Walkthrough

A shebang line (#!/usr/bin/env node) has been prepended to the ESM_REQUIRE_SHIM constant in scripts/esbuild.mjs, enabling the generated bundled output to be directly executable as a Node.js script.

Changes

Cohort / File(s) Summary
Shebang addition to esbuild banner
scripts/esbuild.mjs
Added #!/usr/bin/env node\n\n prefix to the ESM_REQUIRE_SHIM constant, which is used as the banner in esbuild configuration

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch claude/address-report-issues-011CUhf98bfEqKigAvwpfyXK

📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between f822bc2 and cb3f04f.

⛔ Files ignored due to path filters (7)
  • dist/bin/index.js is excluded by !**/dist/**, !dist/**
  • dist/mjs/inputs.js is excluded by !**/dist/**, !dist/**
  • dist/mjs/inputs.js.map is excluded by !**/dist/**, !**/*.map, !dist/**
  • dist/mjs/readme-generator.d.ts is excluded by !**/dist/**, !dist/**
  • dist/mjs/readme-generator.js is excluded by !**/dist/**, !dist/**
  • dist/mjs/readme-generator.js.map is excluded by !**/dist/**, !**/*.map, !dist/**
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • scripts/esbuild.mjs (1 hunks)

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 1, 2025

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 72.11% 2092 / 2901
🔵 Statements 72.11% 2092 / 2901
🔵 Functions 76.13% 67 / 88
🔵 Branches 82.96% 190 / 229
File CoverageNo changed files found.
Generated in workflow #145 for commit cb3f04f by the Vitest Coverage Report Action

@Jamie-BitFlight Jamie-BitFlight merged commit 1873ed8 into main Nov 1, 2025
5 checks passed
@Jamie-BitFlight Jamie-BitFlight deleted the claude/address-report-issues-011CUhf98bfEqKigAvwpfyXK branch November 1, 2025 18:58
Jamie-BitFlight pushed a commit that referenced this pull request Nov 1, 2025
Addresses 26 security vulnerabilities reported by npm audit:
- Fixed all 6 high severity vulnerabilities
- Fixed all 13 moderate severity vulnerabilities
- 5 low severity issues remain (in dev-only commit tooling)

Major updates:
- esbuild: 0.19.5 → 0.25.11 (fixes dev server vulnerability)
- vitest: 0.34.6 → 4.0.6 (major version update)
- @vitest/coverage-v8: 0.34.6 → 4.0.6
- @commitlint/prompt: 18.2.0 → 20.1.0
- commitizen: 4.3.0 → 4.3.1

Security fixes include:
- Babel RegExp complexity (moderate)
- Octokit ReDoS vulnerabilities (moderate)
- brace-expansion ReDoS (moderate)
- braces resource consumption (high)
- cross-spawn ReDoS (high)
- rollup DOM clobbering (high)
- nanoid predictability (moderate)
- undici fetch issues (moderate)

All tests passed:
- Build completes successfully
- CLI runs without errors
- Shebang fix from PR #395 remains intact
Jamie-BitFlight pushed a commit that referenced this pull request Nov 1, 2025
This commit addresses multiple issues:

1. Security vulnerabilities (26 → 5 remaining, all low severity)
   - Fixed all 6 high severity vulnerabilities
   - Fixed all 13 moderate severity vulnerabilities
   - Remaining 5 are low severity in dev-only commit tooling

2. Fixed critical bug preventing CLI from working (issue #335)
   - Bug: repositoryFinder only checked environment variables
   - Impact: --owner and --repo CLI arguments were ignored
   - Fix: Now checks config (which includes CLI args) before env vars
   - Verified: README generation now works correctly

3. Dependency updates:
   - esbuild: 0.19.5 → 0.25.11 (fixes dev server vulnerability)
   - vitest: 0.34.6 → 4.0.6
   - @vitest/coverage-v8: 0.34.6 → 4.0.6
   - @commitlint/prompt: 18.2.0 → 20.1.0
   - commitizen: 4.3.0 → 4.3.1

4. Security fixes include:
   - Babel RegExp complexity (moderate)
   - Octokit ReDoS vulnerabilities (moderate)
   - brace-expansion ReDoS (moderate)
   - braces resource consumption (high)
   - cross-spawn ReDoS (high)
   - rollup DOM clobbering (high)
   - nanoid predictability (moderate)
   - undici fetch issues (moderate)

Tested and verified:
- Build completes successfully
- CLI runs with --owner/--repo arguments
- README generation works end-to-end
- Shebang fix from PR #395 remains intact
Jamie-BitFlight pushed a commit that referenced this pull request Nov 1, 2025
This commit addresses multiple issues:

1. Security vulnerabilities (26 → 5 remaining, all low severity)
   - Fixed all 6 high severity vulnerabilities
   - Fixed all 13 moderate severity vulnerabilities
   - Remaining 5 are low severity in dev-only commit tooling

2. Fixed critical bug preventing CLI from working (issue #335)
   - Bug: repositoryFinder only checked environment variables
   - Impact: --owner and --repo CLI arguments were ignored
   - Fix: Now checks config (which includes CLI args) before env vars
   - Verified: README generation now works correctly

3. Dependency updates:
   - esbuild: 0.19.5 → 0.25.11 (fixes dev server vulnerability)
   - vitest: 0.34.6 → 4.0.6
   - @vitest/coverage-v8: 0.34.6 → 4.0.6
   - @commitlint/prompt: 18.2.0 → 20.1.0
   - commitizen: 4.3.0 → 4.3.1

4. Security fixes include:
   - Babel RegExp complexity (moderate)
   - Octokit ReDoS vulnerabilities (moderate)
   - brace-expansion ReDoS (moderate)
   - braces resource consumption (high)
   - cross-spawn ReDoS (high)
   - rollup DOM clobbering (high)
   - nanoid predictability (moderate)
   - undici fetch issues (moderate)

Tested and verified:
- Build completes successfully
- CLI runs with --owner/--repo arguments
- README generation works end-to-end
- Shebang fix from PR #395 remains intact
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants