This run took 30 seconds.
$ date
--- stdout ---
Sat May 24 05:41:13 UTC 2025
--- end ---
$ git clone file:///srv/git/mediawiki-tools-api-testing.git repo --depth=1 -b master
--- stderr ---
Cloning into 'repo'...
--- stdout ---
--- end ---
$ git config user.name libraryupgrader
--- stdout ---
--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---
--- end ---
$ git submodule update --init
--- stdout ---
--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.
--- end ---
$ git show-ref refs/heads/master
--- stdout ---
27c2bdf625e41727320b1c0a3b719b653bafef06 refs/heads/master
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"formidable": {
"name": "formidable",
"severity": "low",
"isDirect": false,
"via": [
{
"source": 1104171,
"name": "formidable",
"dependency": "formidable",
"title": "Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content",
"url": "https://github.com/advisories/GHSA-75v8-2h7p-7m2m",
"severity": "low",
"cwe": [
"CWE-338"
],
"cvss": {
"score": 3.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"
},
"range": ">=3.1.1-canary.20211030 <3.5.3"
}
],
"effects": [],
"range": "3.1.1-canary.20211030 - 3.5.2",
"nodes": [
"node_modules/formidable"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 1,
"moderate": 0,
"high": 0,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 45,
"dev": 343,
"optional": 2,
"peer": 1,
"peerOptional": 0,
"total": 387
}
}
}
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"formidable": {
"name": "formidable",
"severity": "low",
"isDirect": false,
"via": [
{
"source": 1104171,
"name": "formidable",
"dependency": "formidable",
"title": "Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content",
"url": "https://github.com/advisories/GHSA-75v8-2h7p-7m2m",
"severity": "low",
"cwe": [
"CWE-338"
],
"cvss": {
"score": 3.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"
},
"range": ">=3.1.1-canary.20211030 <3.5.3"
}
],
"effects": [],
"range": "3.1.1-canary.20211030 - 3.5.2",
"nodes": [
"node_modules/formidable"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 1,
"moderate": 0,
"high": 0,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 45,
"dev": 343,
"optional": 2,
"peer": 1,
"peerOptional": 0,
"total": 387
}
}
}
--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
{
"added": 388,
"removed": 0,
"changed": 0,
"audited": 389,
"funding": 93,
"audit": {
"auditReportVersion": 2,
"vulnerabilities": {
"formidable": {
"name": "formidable",
"severity": "low",
"isDirect": false,
"via": [
{
"source": 1104171,
"name": "formidable",
"dependency": "formidable",
"title": "Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content",
"url": "https://github.com/advisories/GHSA-75v8-2h7p-7m2m",
"severity": "low",
"cwe": [
"CWE-338"
],
"cvss": {
"score": 3.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"
},
"range": ">=3.1.1-canary.20211030 <3.5.3"
}
],
"effects": [],
"range": "3.1.1-canary.20211030 - 3.5.2",
"nodes": [
""
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 1,
"moderate": 0,
"high": 0,
"critical": 0,
"total": 1
},
"dependencies": {
"prod": 46,
"dev": 343,
"optional": 2,
"peer": 1,
"peerOptional": 0,
"total": 388
}
}
}
}
--- end ---
{"added": 388, "removed": 0, "changed": 0, "audited": 389, "funding": 93, "audit": {"auditReportVersion": 2, "vulnerabilities": {"formidable": {"name": "formidable", "severity": "low", "isDirect": false, "via": [{"source": 1104171, "name": "formidable", "dependency": "formidable", "title": "Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content", "url": "https://github.com/advisories/GHSA-75v8-2h7p-7m2m", "severity": "low", "cwe": ["CWE-338"], "cvss": {"score": 3.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"}, "range": ">=3.1.1-canary.20211030 <3.5.3"}], "effects": [], "range": "3.1.1-canary.20211030 - 3.5.2", "nodes": [""], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 1, "moderate": 0, "high": 0, "critical": 0, "total": 1}, "dependencies": {"prod": 46, "dev": 343, "optional": 2, "peer": 1, "peerOptional": 0, "total": 388}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
added 387 packages, and audited 388 packages in 4s
93 packages are looking for funding
run `npm fund` for details
found 0 vulnerabilities
--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stdout ---
added 387 packages, and audited 388 packages in 4s
93 packages are looking for funding
run `npm fund` for details
found 0 vulnerabilities
--- end ---
$ /usr/bin/npm test
--- stdout ---
> api-testing@1.7.1 test
> npm run lint && mocha --parallel
> api-testing@1.7.1 lint
> eslint --cache .
/src/repo/lib/action_clients.js
60:1 warning Missing JSDoc @param "tag" type jsdoc/require-param-type
/src/repo/lib/config.js
17:8 warning Found existsSync from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
20:9 warning Found existsSync from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
28:8 warning Found existsSync from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
33:9 warning Found non-literal argument in require security/detect-non-literal-require
/src/repo/test/Config.js
6:1 warning Unused eslint-disable directive (no problems were reported from 'n/no-unsupported-features/node-builtins')
19:8 warning Found mkdir from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
20:8 warning Found mkdir from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
22:17 warning Found writeFile from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
30:33 warning Found readdir from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
31:53 warning Found unlink from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
33:31 warning Found readdir from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
36:4 warning Found rmdir from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
37:4 warning Found unlink from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
41:8 warning Found rmdir from package "fs" with non literal argument at index 0 security/detect-non-literal-fs-filename
85:5 warning Found rename from package "fs" with non literal argument at index 0,1 security/detect-non-literal-fs-filename
✖ 16 problems (0 errors, 16 warnings)
0 errors and 1 warning potentially fixable with the `--fix` option.
1) Uncaught error outside test suite
0 passing (529ms)
1 failing
1) Uncaught error outside test suite:
Uncaught Error: Missing local config! Please create a .api-testing.config.json config
at module.exports (lib/config.js:29:10)
at Object.<anonymous> (lib/actionapi.js:6:35)
at Module._compile (node:internal/modules/cjs/loader:1356:14)
at Module._extensions..js (node:internal/modules/cjs/loader:1414:10)
at Module.load (node:internal/modules/cjs/loader:1197:32)
at Module._load (node:internal/modules/cjs/loader:1013:12)
at Module.require (node:internal/modules/cjs/loader:1225:19)
at require (node:internal/modules/helpers:177:18)
at Object.<anonymous> (lib/action_clients.js:4:16)
at Module._compile (node:internal/modules/cjs/loader:1356:14)
2) Uncaught error outside test suite
3) Uncaught error outside test suite
--- end ---
Traceback (most recent call last):
File "/venv/lib/python3.11/site-packages/runner-0.1.0-py3.11.egg/runner/__init__.py", line 2026, in main
libup.run(args.repo, args.output, args.branch)
File "/venv/lib/python3.11/site-packages/runner-0.1.0-py3.11.egg/runner/__init__.py", line 1968, in run
self.npm_audit_fix(new_npm_audit)
File "/venv/lib/python3.11/site-packages/runner-0.1.0-py3.11.egg/runner/__init__.py", line 275, in npm_audit_fix
self.npm_test()
File "/venv/lib/python3.11/site-packages/runner-0.1.0-py3.11.egg/runner/__init__.py", line 325, in npm_test
self.check_call(["npm", "test"])
File "/venv/lib/python3.11/site-packages/runner-0.1.0-py3.11.egg/runner/shell2.py", line 59, in check_call
res.check_returncode()
File "/usr/lib/python3.11/subprocess.py", line 502, in check_returncode
raise CalledProcessError(self.returncode, self.args, self.stdout,
subprocess.CalledProcessError: Command '['/usr/bin/npm', 'test']' returned non-zero exit status 3.