build(deps): bump github/codeql-action/init from 4.37.7 to 4.37.9 - #517
build(deps): bump github/codeql-action/init from 4.37.7 to 4.37.9#517dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.7 to 4.37.9. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...cdf488f) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
E2E — mocked backend🎭 E2E Tests✅ All green — 342 passed · 0 failed · 0 skipped, across 28 spec files in 7m 49s. By spec file
All 342 tests — click to expand
Slowest 10 — what the shard counts should be tuned against
📼 Download the HTML report, videos and traces — see the Generated by run 34031085177 from |
E2E — real Fineract🎭 E2E Tests✅ All green — 77 passed · 0 failed · 0 skipped · 1 flaky, across 23 spec files in 7m 19s.
|
| Spec | ✅ | ❌ | ⏭️ | Time |
|---|---|---|---|---|
| backend.setup.ts | 3 | 0 | 0 | 5.8s |
| batch-api-operations.spec.ts | 5 | 0 | 0 | 29.2s |
| center-servicing.spec.ts | 2 | 0 | 0 | 17.1s |
| client-transfer.spec.ts | 4 | 0 | 0 | 41.8s |
| deposit-account-servicing.spec.ts | 3 | 0 | 0 | 23.8s |
| deposit-product-configuration.spec.ts | 3 | 0 | 0 | 14.2s |
| group-membership.spec.ts | 3 | 0 | 0 | 45.5s |
| loan-account-actions.spec.ts | 3 | 0 | 0 | 21.4s |
| loan-charge-off.spec.ts | 2 | 0 | 0 | 17.2s |
| loan-product-accounting.spec.ts | 1 | 0 | 0 | 34.3s |
| loan-servicing.spec.ts | 2 | 0 | 0 | 20.5s |
| login.spec.ts | 4 | 0 | 0 | 5.9s |
| parity-screens.spec.ts | 8 | 0 | 0 | 44.0s |
| rbac-backend-restricted-user.spec.ts | 7 | 0 | 0 | 35.3s |
| rbac-multi-permission.spec.ts | 9 | 0 | 0 | 57.0s |
| full-demo.spec.ts | 1 | 0 | 0 | 1m 7s |
| loan-lifecycle.spec.ts | 4 | 0 | 0 | 2m 6s |
| loan-schedule-type.spec.ts | 3 | 0 | 0 | 36.5s |
| report-parameter-backend.spec.ts | 4 | 0 | 0 | 22.8s |
| savings-transaction-correction.spec.ts | 1 | 0 | 0 | 6.7s |
| share-account-servicing.spec.ts | 2 | 0 | 0 | 19.0s |
| share-product-accounting.spec.ts | 1 | 0 | 0 | 23.9s |
| teller-cash-management.spec.ts | 2 | 0 | 0 | 37.4s |
All 77 tests — click to expand
backend.setup.ts
- ✅ seed backend reference data —
1.9s - ✅ seed backend reference data —
1.9s - ✅ seed backend reference data —
2.1s
batch-api-operations.spec.ts
- ✅ Batch API Operations against Fineract › runs the sample batch scenario — create client, create loan, add and read back a charge —
5.1s - ✅ Batch API Operations against Fineract › shows a parse error instead of submitting when the batch input is not valid JSON —
6.6s - ✅ Batch API enclosingTransaction semantics against Fineract › rolls back the earlier steps when enclosingTransaction is true and a later step fails —
4.7s - ✅ Batch API enclosingTransaction semantics against Fineract › does not roll back the earlier steps when enclosingTransaction is false and a later step fails —
4.5s - ✅ Batch API Operations on a mobile viewport against Fineract › the sample batch scenario is reachable and works by touch at mobile width —
8.3s(retried 1×)
center-servicing.spec.ts
- ✅ Center servicing › a center is activated, staffed and given a group —
12.1s - ✅ Center servicing › notes are recorded against the center —
5.1s
client-transfer.spec.ts
- ✅ Client transfer between offices › a proposed transfer is held until the destination accepts, and then the client moves —
10.2s - ✅ Client transfer between offices › a rejected transfer leaves the client on hold, and withdrawing is the way back —
12.3s - ✅ Client transfer between offices › a client can be transferred in one step when the user may act for both offices —
9.5s - ✅ Client staff assignment › an officer can be assigned and then removed —
9.7s
deposit-account-servicing.spec.ts
- ✅ Term deposit account servicing › an account is approved, activated and closed before maturity —
10.1s - ✅ Term deposit account servicing › a deposit is recorded, listed, and reversed without leaving the list —
7.7s - ✅ Term deposit account servicing › an application can be rejected instead of approved —
6.0s
deposit-product-configuration.spec.ts
- ✅ Deposit product configuration › a fixed deposit product survives being edited —
4.3s - ✅ Deposit product configuration › a recurring deposit product can be created at all —
4.8s - ✅ Deposit product configuration › a savings product carries its accounting configuration —
5.1s
group-membership.spec.ts
- ✅ Group membership and lifecycle › a group is activated, staffed, given members and a committee, then emptied —
19.0s - ✅ Group membership and lifecycle › notes are recorded against the group and can be removed again —
8.2s - ✅ Group membership and lifecycle › an empty group is closed with a reason, and a group with members is refused —
18.3s
loan-account-actions.spec.ts
- ✅ Loan account lifecycle actions › new action menu items appear only for active loans —
6.9s - ✅ Loan account lifecycle actions › undo disbursal shows a confirm dialog and reverts the loan to Approved —
7.2s - ✅ Loan account lifecycle actions › write off requires confirmation and moves the loan out of Active status —
7.3s
loan-charge-off.spec.ts
- ✅ Loan servicing commands › charges a loan off through the UI and reverses it —
9.4s - ✅ Loan servicing commands › records a goodwill credit through the shared transaction form —
7.8s
loan-product-accounting.spec.ts
- ✅ Loan product accounting › a cash-accounting product is configured, round-trips on edit, and posts to the ledger —
34.3s
loan-servicing.spec.ts
- ✅ Loan servicing: notes and transaction adjustment › notes can be added and removed, with a confirm dialog on delete —
9.3s - ✅ Loan servicing: notes and transaction adjustment › a repayment transaction can be viewed and adjusted with a corrected amount —
11.2s
login.spec.ts
- ✅ Login › login page displays correctly —
1.4s - ✅ Login › login form has required fields —
1.4s - ✅ Login › submit button is disabled when form is empty —
1.4s - ✅ Login › submit button is enabled when form is filled —
1.7s
parity-screens.spec.ts
- ✅ Screens added for platform parity › a manual journal entry can be read whole and reversed —
6.3s - ✅ Screens added for platform parity › an entry that is already reversed is not offered again —
4.7s - ✅ Screens added for platform parity › a report definition can be created, edited and deleted; a core one cannot —
5.2s - ✅ Screens added for platform parity › a core report opens read-only with only its in-use setting —
5.1s - ✅ Screens added for platform parity › a pending loan is approved from the queue, in a batch —
5.8s - ✅ Screens added for platform parity › a fixed deposit is listed as a deposit, not as a savings account —
5.7s - ✅ Screens added for platform parity › an office has a screen, and it carries its custom fields —
4.4s - ✅ Screens added for platform parity › a savings account carries notes, and the note survives a reload —
6.8s
rbac-backend-restricted-user.spec.ts
- ✅ a genuinely restricted Fineract user › holds exactly the permissions their role was granted —
224ms - ✅ a genuinely restricted Fineract user › reaches the screen their permission covers —
4.4s - ✅ a genuinely restricted Fineract user › is refused a screen their permission does not cover, by URL and by the backend —
5.2s - ✅ a genuinely restricted Fineract user › is refused a write screen they can read the list for, and the write itself —
6.2s - ✅ a genuinely restricted Fineract user › is not offered the actions it would be refused for —
4.6s - ✅ a genuinely restricted Fineract user › is shown an action it cannot take, disabled and saying what it needs —
5.7s - ✅ a genuinely restricted Fineract user › the superuser the rest of the suite uses is unaffected —
9.0s
rbac-multi-permission.spec.ts
- ✅ a route declaring more than one permission code (OR semantics) › is admitted by either declared code alone —
4.4s - ✅ a route declaring more than one permission code (OR semantics) › is admitted by the other declared code alone —
5.4s - ✅ a route declaring more than one permission code (OR semantics) › is refused when holding neither declared code, by the router and by the backend —
4.3s - ✅ ALL_FUNCTIONS_READ, against the real Fineract permission catalogue › reaches read screens across modules it holds no specific code for —
9.3s - ✅ ALL_FUNCTIONS_READ, against the real Fineract permission catalogue › is refused every write screen, and the writes themselves —
7.5s - ✅ a restricted session across a real page reload › keeps the same permission boundary after reloading, not just after a fresh login —
10.1s - ✅ a second real action-level gate, distinct from loan repayment › is shown the Approve action disabled and naming what it needs, refused by the backend too —
5.4s - ✅ Security module writes (users, roles), against the real backend › reaches the list screens but is refused the write screens —
10.1s - ✅ Security module writes (users, roles), against the real backend › is refused creating a user and modifying a role, by the backend itself —
315ms
full-demo.spec.ts
- ✅ Full feature demo recording › walk through loan schedule type, lifecycle, custom fields, collateral, and disbursement —
1m 7s
loan-lifecycle.spec.ts
- ✅ Loan lifecycle: creation, approval, disbursement › create, approve, and disburse a Cumulative loan —
33.0s - ✅ Loan lifecycle: creation, approval, disbursement › create, approve, and disburse a Progressive loan —
33.7s - ✅ Loan lifecycle: creation, approval, disbursement › an approved loan can be returned to pending approval —
30.1s - ✅ Loan lifecycle: creation, approval, disbursement › the delinquency tab reads a real loan, and the empty data tabs stay hidden —
29.3s
loan-schedule-type.spec.ts
- ✅ Loan Schedule Type (Cumulative vs Progressive) › loan products list shows a schedule type chip per product —
9.5s - ✅ Loan Schedule Type (Cumulative vs Progressive) › create a Progressive loan product end-to-end and verify it round-trips —
15.9s - ✅ Loan Schedule Type (Cumulative vs Progressive) › loan creation shows the schedule type badge for a Progressive product —
11.0s
report-parameter-backend.spec.ts
- ✅ Dynamic report parameters against Fineract › keeps the parameter form available when a report has cascading lookups —
4.8s - ✅ Dynamic report parameters against Fineract › changing Office changes the Client Listing row set —
6.3s - ✅ Cascading report parameters against Fineract › sends the parent value to the child lookup and clears the child when it changes —
7.5s - ✅ Chart reports against Fineract › renders a chart report as a chart rather than a table —
4.3s
savings-transaction-correction.spec.ts
- ✅ Savings transaction correction › a deposit is reversed and a hold is released —
6.7s
share-account-servicing.spec.ts
- ✅ Share account servicing › an account is approved, activated, traded and closed —
12.9s - ✅ Share account servicing › an application can be rejected —
6.2s
share-product-accounting.spec.ts
- ✅ Share product accounting › a share product is mapped to equity and round-trips on edit —
23.9s
teller-cash-management.spec.ts
- ✅ Teller cash management › a cashier is listed, receives an allocation, and settles cash back —
25.7s - ✅ Teller cash management › settling more than the cashier holds is refused and the form stays usable —
11.8s
Slowest 10 — what the shard counts should be tuned against
| Test | Spec | Time |
|---|---|---|
| Full feature demo recording › walk through loan schedule type, lifecycle, custom fields, collateral, and disbursement | full-demo.spec.ts |
1m 7s |
| Loan product accounting › a cash-accounting product is configured, round-trips on edit, and posts to the ledger | loan-product-accounting.spec.ts |
34.3s |
| Loan lifecycle: creation, approval, disbursement › create, approve, and disburse a Progressive loan | loan-lifecycle.spec.ts |
33.7s |
| Loan lifecycle: creation, approval, disbursement › create, approve, and disburse a Cumulative loan | loan-lifecycle.spec.ts |
33.0s |
| Loan lifecycle: creation, approval, disbursement › an approved loan can be returned to pending approval | loan-lifecycle.spec.ts |
30.1s |
| Loan lifecycle: creation, approval, disbursement › the delinquency tab reads a real loan, and the empty data tabs stay hidden | loan-lifecycle.spec.ts |
29.3s |
| Teller cash management › a cashier is listed, receives an allocation, and settles cash back | teller-cash-management.spec.ts |
25.7s |
| Share product accounting › a share product is mapped to equity and round-trips on edit | share-product-accounting.spec.ts |
23.9s |
| Group membership and lifecycle › a group is activated, staffed, given members and a committee, then emptied | group-membership.spec.ts |
19.0s |
| Group membership and lifecycle › an empty group is closed with a reason, and a group with members is refused | group-membership.spec.ts |
18.3s |
📼 Download the HTML report, videos and traces — see the playwright-report-backend artifact.
Generated by run 34031085177 from 52e935a.
Bumps github/codeql-action/init from 4.37.7 to 4.37.9.
Release notes
Sourced from github/codeql-action/init's releases.
Changelog
Sourced from github/codeql-action/init's changelog.
... (truncated)
Commits
cdf488fMerge pull request #4107 from github/update-v4.37.9-920ba7cd17243f38Update changelog for v4.37.9920ba7cMerge pull request #4106 from github/update-bundle/codeql-bundle-v2.26.4ecfa6e1Add changelog noteadcdf4aUpdate default bundle to codeql-bundle-v2.26.4486fec2Merge pull request #4099 from github/update-supported-enterprise-server-versions134624cMerge pull request #4101 from github/dependabot/npm_and_yarn/npm-minor-457d82...ff43db8Merge pull request #4103 from github/mergeback/v4.37.8-to-main-db488dde4605e03Rebuild099c869Update changelog and version after v4.37.8Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)