Skip to content

Fix audit alerts#33231

Open
alexslavr wants to merge 10 commits into26_1from
lavrov/audit-alerts
Open

Fix audit alerts#33231
alexslavr wants to merge 10 commits into26_1from
lavrov/audit-alerts

Conversation

@alexslavr
Copy link
Copy Markdown
Contributor

No description provided.

@alexslavr alexslavr self-assigned this Apr 13, 2026
@alexslavr alexslavr added the 26_1 label Apr 13, 2026
@alexslavr alexslavr requested a review from a team as a code owner April 13, 2026 09:55
Copilot AI review requested due to automatic review settings April 13, 2026 09:55
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates build and CI-related scripts to reduce audit alerts and improve determinism by switching away from ad-hoc installs (npm i, npx) toward lockfile-based / workspace-managed execution, and removes unused GitHub Action scaffolding.

Changes:

  • Switched documentation injection install step to npm ci for reproducible installs.
  • Replaced several npx ... usages with pnpm exec ... in nx-infra-plugin build flow and internal scripts.
  • Removed the unused setup-chrome-headless-shell composite action and related commented-out references.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
tools/scripts/build-all.ts Uses npm ci when installing deps in the cloned documentation repo.
packages/nx-infra-plugin/src/executors/generate-components/angular-generator.ts Tweaks error message when devextreme-internal-tools is missing.
packages/nx-infra-plugin/scripts/build.ts Uses pnpm exec tsc instead of npx tsc for compilation.
packages/nx-infra-plugin/package.json Switches scripts from npx to pnpm exec for ts-node/nx.
packages/devextreme/js/__internal/grids/docs/scripts/data_grid/generate.ts Updates the suggested command for running the prerequisite generator.
apps/angular/src/polyfills.ts Removes outdated “npm install --save …” hints in commented polyfill imports.
.github/actions/setup-chrome-headless-shell/action.yml Deleted unused composite action that installed chrome-headless-shell.
.github/actions/run-qunit-tests/action.yml Removes commented-out steps referencing the deleted chrome setup action.

console.error(`ERROR: grid_core_architecture.generated.json not found at ${GC_JSON_PATH}`);
console.error('Please run the grid_core architecture script first:');
console.error(' npx tsx __docs__/scripts/grid_core/generate.ts --json');
console.error(' pnpm exec tsx __docs__/scripts/grid_core/generate.ts --json');
Copy link

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This guidance now suggests pnpm exec tsx ..., but tsx does not appear to be a dependency in this repo (so pnpm exec tsx is likely to fail). Prefer a command that works without preinstalling tsx (e.g. npx tsx ... or pnpm dlx tsx ...), or ensure tsx is added as a devDependency where this script is expected to run.

Suggested change
console.error(' pnpm exec tsx __docs__/scripts/grid_core/generate.ts --json');
console.error(' pnpm dlx tsx __docs__/scripts/grid_core/generate.ts --json');

Copilot uses AI. Check for mistakes.
Copilot AI review requested due to automatic review settings April 13, 2026 11:03
IlyaKhD
IlyaKhD previously approved these changes Apr 13, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 8 out of 9 changed files in this pull request and generated 2 comments.

Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

Copilot AI review requested due to automatic review settings April 13, 2026 11:39
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 8 out of 9 changed files in this pull request and generated 1 comment.

Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants