Skip to content

feat: ecosystem test coverage and dependency freshness#122

Merged
Marve10s merged 5 commits intomainfrom
feat/ecosystem-test-coverage-and-dep-freshness
Apr 6, 2026
Merged

feat: ecosystem test coverage and dependency freshness#122
Marve10s merged 5 commits intomainfrom
feat/ecosystem-test-coverage-and-dep-freshness

Conversation

@Marve10s
Copy link
Copy Markdown
Owner

@Marve10s Marve10s commented Apr 4, 2026

Summary

  • Test coverage: Add Go + Python template snapshots (12 new tests), 6 named smoke presets for Rust/Go/Python, and expand the weekly CI matrix from 6 TypeScript-only presets to 12 presets across all 4 ecosystems
  • Dependency updates: Bump 121 template dependency versions to latest minor/patch across npm (92), Go (12), Python (16), and Rust (1)
  • Freshness tooling: Add scripts/check-dep-versions.ts that audits all 4 ecosystems against their registries, plus a weekly CI workflow (dep-freshness.yaml) that reports stale template versions

Major bumps flagged for manual review (not updated)

  • npm: Mantine 8→9, Storybook 8→10
  • Python: Django 5→6, LangChain 0.3→1.x, OpenAI 1→2, CrewAI 0.80→1.x, pytest 8→9
  • Rust 0.x breaking: Leptos 0.7→0.8, Dioxus 0.6→0.7, Tonic 0.12→0.14, Ratatui 0.29→0.30

Test plan

  • bun run --cwd apps/cli check-types passes
  • bun test apps/cli/test/template-snapshots.test.ts — 46/46 pass (12 new Go/Python snapshots)
  • bun test apps/cli/test/cli-builder-sync.test.ts — 337/337 pass
  • bun test apps/web/test/preview-config.test.ts — 2/2 pass
  • YAML lint passes for both new/modified workflow files
  • Verify Release Guard snapshot tests pass in CI
  • Verify dep-freshness.yaml runs on manual dispatch
  • Verify template-matrix.yaml installs correct toolchains for non-TS presets

@vercel
Copy link
Copy Markdown

vercel bot commented Apr 4, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
better-fullstack-web Ignored Ignored Preview Apr 6, 2026 7:31am

@github-actions github-actions bot added vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. size:XXL 1,000+ effective changed lines (test files excluded in mixed PRs). labels Apr 4, 2026
Marve10s added a commit that referenced this pull request Apr 4, 2026
@Marve10s
chore(ci): remove security audit from PR pipeline
14976f3 
bun audit always fails on transitive deps we can't patch (lodash,
h3, tar, undici). Moved to the weekly dep-freshness workflow in PR #122.
Marve10s added a commit that referenced this pull request Apr 5, 2026
@Marve10s
feat(cli): complete Phase 1 quality hardening (#121)
0d0a372 
* feat(cli): complete Phase 1 quality hardening

CI & security: add bun audit (informational), CodeQL, Dependabot npm,
code coverage, release approval gates, weekly template matrix with
generated-project typechecks for 6 curated presets.

Reliability: add retry/backoff to MCP and Skills addon installers.

Testing: add axe-core a11y checks for landing + builder pages, expand
ORM+auth coverage (TypeORM/MikroORM/Sequelize + Clerk).

Post-install sweep: add setup guidance for auth providers (NextAuth,
Auth0, Stack Auth, Supabase Auth), payment providers (Stripe, Lemon
Squeezy, Paddle, Dodo), database setup services (Neon, Supabase, Prisma
Postgres, MongoDB Atlas, Upstash, Turso+Drizzle), fix misleading ORM
message for TypeORM/MikroORM/Sequelize/Kysely, remove incorrect
auth gate on Polar instructions.

CLI: expand help text for create, add, and mcp commands.

Docs: move completed codebase-issues to completed/, update plan tracking.

* test: update template snapshots for post-install changes

* chore(ci): remove security audit from PR pipeline

bun audit always fails on transitive deps we can't patch (lodash,
h3, tar, undici). Moved to the weekly dep-freshness workflow in PR #122.

* fix(ci): scope test:coverage to top-level tests only

test:coverage was missing a path glob, causing bun to discover
test/matrix/ (1,451 combos) and test/e2e/ recursively. This exceeded
the 20-minute job timeout and blocked every PR. Align the glob with
the existing `test` script so CI only runs unit tests.
@Marve10s Marve10s force-pushed the feat/ecosystem-test-coverage-and-dep-freshness branch from 442255b to 277f7a0 Compare April 5, 2026 22:46
@Marve10s Marve10s closed this Apr 6, 2026
@Marve10s Marve10s reopened this Apr 6, 2026
Marve10s added 5 commits April 6, 2026 10:27
@Marve10s
feat: ecosystem test coverage and cross-ecosystem dependency freshness
dd92255 
Test coverage:
- Add Go and Python template snapshot configs (12 new tests)
- Add 6 named smoke presets for Rust, Go, Python ecosystems
- Expand CI template matrix to validate all 4 ecosystems weekly
- Conditional Rust/Go/Python toolchain setup in matrix jobs

Dependency updates:
- Update 92 npm packages to latest minor/patch in add-deps.ts
- Update 12 Go modules to latest in go.mod.hbs
- Update 16 Python packages to latest minor/patch in pyproject.toml.hbs
- Update Rust tokio pin 1.43 → 1.51 in Cargo.toml.hbs

Freshness tooling:
- Add scripts/check-dep-versions.ts — audits all 4 ecosystems
  against npm registry, crates.io, Go proxy, and PyPI
- Handles Rust 0.x breaking semantics, skips pre-releases
- Supports --update, --json, --ecosystem flags
- Add weekly dep-freshness.yaml CI workflow (Wednesdays)
@Marve10s
chore(ci): make dep-freshness workflow create a weekly PR
ef56cca 
Instead of only reporting stale versions, the workflow now runs
--update, regenerates snapshots, and opens a PR via
peter-evans/create-pull-request when changes exist. Major bumps
are still skipped and listed in the artifact for manual review.
@Marve10s
test: regenerate snapshots after template-generator rebuild
468992b 
The previous snapshot commit was generated before rebuilding the
template-generator dist with the updated add-deps.ts versions.
@Marve10s
chore(ci): move security audit from PR pipeline to weekly
31ee61c 
bun audit always fails on transitive deps we can't patch (lodash,
h3, tar, undici, etc.), adding noise to every PR. Moved to the
weekly dep-freshness workflow where it runs alongside version checks
and uploads its report as an artifact.
@Marve10s
test: update celery version assertion to match template bump
3e0e68d 
The dep-freshness commit bumped celery[redis] from 5.4.0 to 5.6.3 in
pyproject.toml.hbs but the python-language test still asserted the old
version.
@Marve10s Marve10s force-pushed the feat/ecosystem-test-coverage-and-dep-freshness branch from b2b1022 to 3e0e68d Compare April 6, 2026 07:31
@github-actions github-actions bot added size:XL 500-999 effective changed lines (test files excluded in mixed PRs). and removed size:XXL 1,000+ effective changed lines (test files excluded in mixed PRs). labels Apr 6, 2026
@Marve10s Marve10s merged commit 30de074 into main Apr 6, 2026
13 checks passed
Marve10s added a commit that referenced this pull request Apr 7, 2026
@Marve10s
chore: release v1.5.0
c1520d5 
## New Features

### TypeScript Ecosystem
- **Algolia search** — managed search-as-a-service with full server-side
  client template (search, CRUD, index management, multi-search helpers).
  Env vars: ALGOLIA_APP_ID, ALGOLIA_API_KEY. (#125)

### Rust Ecosystem
- **Logging category** — new RustLogging category with tracing (default)
  and env-logger options. Conditional deps in Cargo.toml, subscriber init
  in main.rs, full CLI/web/MCP wiring. 27 files, first new Rust category
  since launch. (#126)

### Go Ecosystem
- **Fiber web framework** — Express.js-like API built on FastHTTP.
  Full server template with middleware, auth adapter via gofiber/adaptor,
  CRUD handlers for gorm/sqlc/none ORM variants. Import alias handling
  for middleware collisions. (#127)

### Python Ecosystem
- **Flask web framework** — lightweight WSGI framework with CORS,
  health endpoint, pydantic settings, test client setup. Template
  conditionals in pyproject.toml, main.py, test_main.py. (#128)

## Documentation
- **Adding new tool options guideline** — 3,000+ line guide suite with
  5 files: master checklist (3 scenarios, 29-item new-ecosystem checklist),
  worked examples (TS + Go), template/handler reference,
  testing guide, routing gotchas (8 edge cases)
- **Pre-push verification checklist** — 7-step workflow matching CI,
  snapshot -u flag fix, CI job mapping table
- **AGENTS.md** updated with guideline reference

## Internal
- Dependency version updates (#123, #124)
- Phase 1 quality hardening (#121)
- Ecosystem test coverage improvements (#122)
Marve10s added a commit that referenced this pull request Apr 7, 2026
@Marve10s
chore: release v1.5.3
e79003d 
## New Features

### TypeScript Ecosystem
- **Algolia search** — managed search-as-a-service with full server-side
  client template (search, CRUD, index management, multi-search helpers).
  Env vars: ALGOLIA_APP_ID, ALGOLIA_API_KEY. (#125)

### Rust Ecosystem
- **Logging category** — new RustLogging category with tracing (default)
  and env-logger options. Conditional deps in Cargo.toml, subscriber init
  in main.rs, full CLI/web/MCP wiring. 27 files, first new Rust category
  since launch. (#126)

### Go Ecosystem
- **Fiber web framework** — Express.js-like API built on FastHTTP.
  Full server template with middleware, auth adapter via gofiber/adaptor,
  CRUD handlers for gorm/sqlc/none ORM variants. Import alias handling
  for middleware collisions. (#127)

### Python Ecosystem
- **Flask web framework** — lightweight WSGI framework with CORS,
  health endpoint, pydantic settings, test client setup. Template
  conditionals in pyproject.toml, main.py, test_main.py. (#128)

## Documentation
- **Adding new tool options guideline** — 3,000+ line guide suite with
  5 files: master checklist (3 scenarios, 29-item new-ecosystem checklist),
  worked examples (TS + Go), template/handler reference,
  testing guide, routing gotchas (8 edge cases)
- **Pre-push verification checklist** — 7-step workflow matching CI,
  snapshot -u flag fix, CI job mapping table
- **AGENTS.md** updated with guideline reference

## Internal
- Dependency version updates (#123, #124)
- Phase 1 quality hardening (#121)
- Ecosystem test coverage improvements (#122)
Marve10s added a commit that referenced this pull request Apr 7, 2026
@Marve10s
chore: release v1.5.3
58f9e79 
## New Features

### TypeScript Ecosystem
- **Algolia search** — managed search-as-a-service with full server-side
  client template (search, CRUD, index management, multi-search helpers).
  Env vars: ALGOLIA_APP_ID, ALGOLIA_API_KEY. (#125)

### Rust Ecosystem
- **Logging category** — new RustLogging category with tracing (default)
  and env-logger options. Conditional deps in Cargo.toml, subscriber init
  in main.rs, full CLI/web/MCP wiring. 27 files, first new Rust category
  since launch. (#126)

### Go Ecosystem
- **Fiber web framework** — Express.js-like API built on FastHTTP.
  Full server template with middleware, auth adapter via gofiber/adaptor,
  CRUD handlers for gorm/sqlc/none ORM variants. Import alias handling
  for middleware collisions. (#127)

### Python Ecosystem
- **Flask web framework** — lightweight WSGI framework with CORS,
  health endpoint, pydantic settings, test client setup. Template
  conditionals in pyproject.toml, main.py, test_main.py. (#128)

## Documentation
- **Adding new tool options guideline** — 3,000+ line guide suite with
  5 files: master checklist (3 scenarios, 29-item new-ecosystem checklist),
  worked examples (TS + Go), template/handler reference,
  testing guide, routing gotchas (8 edge cases)
- **Pre-push verification checklist** — 7-step workflow matching CI,
  snapshot -u flag fix, CI job mapping table
- **AGENTS.md** updated with guideline reference

## Internal
- Dependency version updates (#123, #124)
- Phase 1 quality hardening (#121)
- Ecosystem test coverage improvements (#122)
Marve10s added a commit that referenced this pull request Apr 7, 2026
@Marve10s
chore(release): 1.5.3
faf004f 
## New Features

### TypeScript Ecosystem
- **Algolia search** — managed search-as-a-service with full server-side
  client template (search, CRUD, index management, multi-search helpers).
  Env vars: ALGOLIA_APP_ID, ALGOLIA_API_KEY. (#125)

### Rust Ecosystem
- **Logging category** — new RustLogging category with tracing (default)
  and env-logger options. Conditional deps in Cargo.toml, subscriber init
  in main.rs, full CLI/web/MCP wiring. 27 files, first new Rust category
  since launch. (#126)

### Go Ecosystem
- **Fiber web framework** — Express.js-like API built on FastHTTP.
  Full server template with middleware, auth adapter via gofiber/adaptor,
  CRUD handlers for gorm/sqlc/none ORM variants. Import alias handling
  for middleware collisions. (#127)

### Python Ecosystem
- **Flask web framework** — lightweight WSGI framework with CORS,
  health endpoint, pydantic settings, test client setup. Template
  conditionals in pyproject.toml, main.py, test_main.py. (#128)

## Documentation
- **Adding new tool options guideline** — 3,000+ line guide suite with
  5 files: master checklist (3 scenarios, 29-item new-ecosystem checklist),
  worked examples (TS + Go), template/handler reference,
  testing guide, routing gotchas (8 edge cases)
- **Pre-push verification checklist** — 7-step workflow matching CI,
  snapshot -u flag fix, CI job mapping table
- **AGENTS.md** updated with guideline reference

## Internal
- Dependency version updates (#123, #124)
- Phase 1 quality hardening (#121)
- Ecosystem test coverage improvements (#122)
Marve10s added a commit that referenced this pull request Apr 7, 2026
@Marve10s
chore(release): 1.5.3
14234dc 
## New Features

### TypeScript Ecosystem
- **Algolia search** — managed search-as-a-service with full server-side
  client template (search, CRUD, index management, multi-search helpers).
  Env vars: ALGOLIA_APP_ID, ALGOLIA_API_KEY. (#125)

### Rust Ecosystem
- **Logging category** — new RustLogging category with tracing (default)
  and env-logger options. Conditional deps in Cargo.toml, subscriber init
  in main.rs, full CLI/web/MCP wiring. (#126)

### Go Ecosystem
- **Fiber web framework** — Express.js-like API built on FastHTTP.
  Full server template with middleware, auth adapter via gofiber/adaptor,
  CRUD handlers for gorm/sqlc/none ORM variants. (#127)

### Python Ecosystem
- **Flask web framework** — lightweight WSGI framework with CORS,
  health endpoint, pydantic settings, test client setup. (#128)

## Documentation
- Adding new tool options guideline (3,000+ lines, 5 files)
- Pre-push verification checklist
- AGENTS.md updated with guideline reference

## Internal
- Dependency version updates (#123, #124)
- Phase 1 quality hardening (#121)
- Ecosystem test coverage improvements (#122)
Marve10s added a commit that referenced this pull request Apr 7, 2026
@Marve10s
chore(release): 1.5.3
2902b94 
## New Features

### TypeScript Ecosystem
- **Algolia search** — managed search-as-a-service with full server-side
  client template (search, CRUD, index management, multi-search helpers).
  Env vars: ALGOLIA_APP_ID, ALGOLIA_API_KEY. (#125)

### Rust Ecosystem
- **Logging category** — new RustLogging category with tracing (default)
  and env-logger options. Conditional deps in Cargo.toml, subscriber init
  in main.rs, full CLI/web/MCP wiring. (#126)

### Go Ecosystem
- **Fiber web framework** — Express.js-like API built on FastHTTP.
  Full server template with middleware, auth adapter via gofiber/adaptor,
  CRUD handlers for gorm/sqlc/none ORM variants. (#127)

### Python Ecosystem
- **Flask web framework** — lightweight WSGI framework with CORS,
  health endpoint, pydantic settings, test client setup. (#128)

## Documentation
- Adding new tool options guideline (3,000+ lines, 5 files)
- Pre-push verification checklist
- AGENTS.md updated with guideline reference

## Internal
- Dependency version updates (#123, #124)
- Phase 1 quality hardening (#121)
- Ecosystem test coverage improvements (#122)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

size:XL 500-999 effective changed lines (test files excluded in mixed PRs). vouch:trusted PR author is trusted by repo permissions or the VOUCHED list.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Marve10s