{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":216745016,"defaultBranch":"main","name":"cacti","ownerLogin":"petermetz","currentUserCanPush":false,"isFork":true,"isEmpty":false,"createdAt":"2019-10-22T07:01:11.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/1583231?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1717262012.0","currentOid":""},"activityList":{"items":[{"before":null,"after":"a76b0e01364e9fff0ddec59904ce610bdc9aabe7","ref":"refs/heads/fix-security-cve-2024-21505","pushedAt":"2024-06-01T17:13:32.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"fix(security): mitigate CVE-2024-21505\n\nThe changes made to this commit were performed by running `yarn up -R web3-utils`\nin the root directory of the project which upgraded all the transitive web3-utils\ndependency versions. Finally the root package.json's web3-utils declaration had\nto be manually bumped as well.\n\nTags\n- Runtime dependency\n- Patch available\nWeaknesses\n- WeaknessCWE-1321\nCVE ID\n- CVE-2024-21505\nGHSA ID\n- GHSA-2g4c-8fpm-c46v\n\nThe security advisory:\nhttps://github.com/hyperledger/cacti/security/dependabot/987\n\nRelated pull request that was an attempt by the robots to fix the issue (without success)\nhttps://github.com/hyperledger/cacti/pull/3264\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"fix(security): mitigate CVE-2024-21505"}},{"before":null,"after":"6550907e01038e60f5ac34e03c50e69ce1accef9","ref":"refs/heads/build-add-yarn-plugin-upgrade-interactive-filter","pushedAt":"2024-06-01T16:45:21.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"build(yarn): add plugin-interactive-filter to manage deps per-package\n\nThis plugin allows to resolve some CVEs more surgically that are found in indirect\ndependencies which are difficult to upgrade without triggering a large change\nneeded and potential migrations, breaking changes to the public APIs of packages.\n\nThe reason why the above problem happens is because `yarn up` and `yarn up -R`\nare blunt instruments when it comes to managing a monorepo such as ours:\nThey do their upgrade all-or-nothing, e.g. you can't upgrade a single dependency\nin a single monorepo package, you must upgrade the dependency project-wide\nwith the mentioned tools, but sometimes we need to perform the upgrade just in a\nsingle monorepo package.\n\nFor example to the above, about 20 packages use web3 but only about 5 of those\nare using v4.x versions of web3. A new CVE came out covering v4.1.x and so\nI needed to upgrade web3 only in those packages where web3 was already above\nv4.0.0 and leave the older ones alone (surgical upgrades).\n\nTo accomplish this I've found no way to do it with stock yarn CLI commands, but\nsomeone who had the exact same problem had written a plugin for solving it.\n\nThe original issue reported to yarn with the same problem we are having:\nhttps://github.com/yarnpkg/berry/issues/2591\n\nThe repository where the plugin resides that we are adding in this commit in\norder to remediate the problem of lack of surgical (per-package) upgrades:\nhttps://github.com/eyolas/yarn-plugin-interractive-filter\n\nThe original CVE that I was investigating as I stumbled upon the solution:\n- https://github.com/hyperledger/cacti/pull/3264\n- https://github.com/hyperledger/cacti/security/dependabot/987\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"build(yarn): add plugin-interactive-filter to manage deps per-package"}},{"before":"d465f810d12e5bb5c71cb625b06eca293e19fbea","after":"1a7c23e191a7f758cd16a5c616c5396e5679e351","ref":"refs/heads/test-plugin-consortim-manual-fix-connectrpc-port-binding","pushedAt":"2024-06-01T06:53:59.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"test(plugin-consortium-manual): fix port binding - multiple API servers\n\n1. The ConnectRPC port defaults to 6000 in the API server so for test cases where multiple\ninstances of the API server are created and started, we need to specify the ports\nexplicitly in the API server config so that they don't clash with each other casusing the\ntest to fail.\n2. The fix here was to simply bind to port 0 for all the ConnectRPC listeners which\neliminated the possibility of a clash and the test is passing once again.\n3. I also snuck in a quality of life improvement for contributors: the API server will no\nlonger log the entire details of the fastify server that is being used for CRPC thereby\nreducing the verbosity of the logs by a wide margin.\n\nCrash logs that revealed the bug in the test case:\n\n```sh\n024-05-31T20:14:00.9554919Z [2024-05-31T20:14:00.953Z] ERROR (api-server):\nFailed to start ApiServer Error: listen EADDRINUSE: address already in use 127.0.0.1:6000\n2024-05-31T20:14:00.9556755Z at Http2Server.setupListenHandle [as _listen2] (node:net:1817:16)\n2024-05-31T20:14:00.9557720Z at listenInCluster (node:net:1865:12)\n2024-05-31T20:14:00.9558408Z at doListen (node:net:2014:7)\n2024-05-31T20:14:00.9559355Z at processTicksAndRejections (node:internal/process/task_queues:83:21)\n2024-05-31T20:14:00.9560500Z at runNextTicks (node:internal/process/task_queues:64:3)\n2024-05-31T20:14:00.9561451Z at processImmediate (node:internal/timers:447:9) {\n2024-05-31T20:14:00.9562333Z code: 'EADDRINUSE',\n2024-05-31T20:14:00.9562857Z errno: -98,\n2024-05-31T20:14:00.9563533Z syscall: 'listen',\n2024-05-31T20:14:00.9564068Z address: '127.0.0.1',\n2024-05-31T20:14:00.9564540Z port: 6000\n2024-05-31T20:14:00.9564959Z }\n```\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"test(plugin-consortium-manual): fix port binding - multiple API servers"}},{"before":"7428a1252c31f8ed5b2aef357342f8f47196f84b","after":"d465f810d12e5bb5c71cb625b06eca293e19fbea","ref":"refs/heads/test-plugin-consortim-manual-fix-connectrpc-port-binding","pushedAt":"2024-06-01T06:52:47.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"test(plugin-consortium-manual): fix port binding - multiple API servers\n\n1. The ConnectRPC port defaults to 6000 in the API server so for test cases where multiple\ninstances of the API server are created and started, we need to specify the ports\nexplicitly in the API server config so that they don't clash with each other casusing the\ntest to fail.\n2. The fix here was to simply bind to port 0 for all the ConnectRPC listeners which\neliminated the possibility of a clash and the test is passing once again.\n3. I also snuck in a quality of life improvement for contributors: the API server will no\nlonger log the entire details of the fastify server that is being used for CRPC thereby\nreducing the verbosity of the logs by a wide margin.\n\nCrash logs that revealed the bug in the test case:\n\n```sh\n024-05-31T20:14:00.9554919Z [2024-05-31T20:14:00.953Z] ERROR (api-server):\nFailed to start ApiServer Error: listen EADDRINUSE: address already in use 127.0.0.1:6000\n2024-05-31T20:14:00.9556755Z at Http2Server.setupListenHandle [as _listen2] (node:net:1817:16)\n2024-05-31T20:14:00.9557720Z at listenInCluster (node:net:1865:12)\n2024-05-31T20:14:00.9558408Z at doListen (node:net:2014:7)\n2024-05-31T20:14:00.9559355Z at processTicksAndRejections (node:internal/process/task_queues:83:21)\n2024-05-31T20:14:00.9560500Z at runNextTicks (node:internal/process/task_queues:64:3)\n2024-05-31T20:14:00.9561451Z at processImmediate (node:internal/timers:447:9) {\n2024-05-31T20:14:00.9562333Z code: 'EADDRINUSE',\n2024-05-31T20:14:00.9562857Z errno: -98,\n2024-05-31T20:14:00.9563533Z syscall: 'listen',\n2024-05-31T20:14:00.9564068Z address: '127.0.0.1',\n2024-05-31T20:14:00.9564540Z port: 6000\n2024-05-31T20:14:00.9564959Z }\n```\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"test(plugin-consortium-manual): fix port binding - multiple API servers"}},{"before":null,"after":"7428a1252c31f8ed5b2aef357342f8f47196f84b","ref":"refs/heads/test-plugin-consortim-manual-fix-connectrpc-port-binding","pushedAt":"2024-06-01T06:45:55.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"test(plugin-consortium-manual): fix port binding - multiple API servers\n\n1. The ConnectRPC port defaults to 6000 in the API server so for test cases where multiple\ninstances of the API server are created and started, we need to specify the ports\nexplicitly in the API server config so that they don't clash with each other casusing the\ntest to fail.\n2. The fix here was to simply bind to port 0 for all the ConnectRPC listeners which\neliminated the possibility of a clash and the test is passing once again.\n3. I also snuck in a quality of life improvement for contributors: the API server will no\nlonger log the entire details of the fastify server that is being used for CRPC thereby\nreducing the verbosity of the logs by a wide margin.\n\nCrash logs that revealed the bug in the test case:\n\n```sh\n024-05-31T20:14:00.9554919Z [2024-05-31T20:14:00.953Z] ERROR (api-server):\nFailed to start ApiServer Error: listen EADDRINUSE: address already in use 127.0.0.1:6000\n2024-05-31T20:14:00.9556755Z at Http2Server.setupListenHandle [as _listen2] (node:net:1817:16)\n2024-05-31T20:14:00.9557720Z at listenInCluster (node:net:1865:12)\n2024-05-31T20:14:00.9558408Z at doListen (node:net:2014:7)\n2024-05-31T20:14:00.9559355Z at processTicksAndRejections (node:internal/process/task_queues:83:21)\n2024-05-31T20:14:00.9560500Z at runNextTicks (node:internal/process/task_queues:64:3)\n2024-05-31T20:14:00.9561451Z at processImmediate (node:internal/timers:447:9) {\n2024-05-31T20:14:00.9562333Z code: 'EADDRINUSE',\n2024-05-31T20:14:00.9562857Z errno: -98,\n2024-05-31T20:14:00.9563533Z syscall: 'listen',\n2024-05-31T20:14:00.9564068Z address: '127.0.0.1',\n2024-05-31T20:14:00.9564540Z port: 6000\n2024-05-31T20:14:00.9564959Z }\n```\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"test(plugin-consortium-manual): fix port binding - multiple API servers"}},{"before":"0add95dc9d0f93a45ef48a0aa4f4004d05ea6a44","after":"e617210c4064c26cec03d2f5e8a287fadb007779","ref":"refs/heads/trivy-scan-local-scripts","pushedAt":"2024-06-01T02:20:34.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"squash! - eliminated most of the vulnerabilities from most of the images\n\nCorda is the last holdout because of spring boot 3.x and Corda 4.11\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"squash! - eliminated most of the vulnerabilities from most of the images"}},{"before":null,"after":"13608343095ebb61e6428d1b766a98764de2e7ae","ref":"refs/heads/build-stabilize-codegen-race-condition-problem","pushedAt":"2024-06-01T02:17:34.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"build: fix codegen flakiness with sequential execution, handrolled nwget\n\n1. The package.json file of the cmd-api-server package now runs the codegen related scripts\nsequentially (e.g. using `run-s` instead of `run-p` of `npm-run-all`). This lowers the probability\nthat the download of the openapi-generator .jar file is too late to finish and a crash occurs due\nto the .jar file not being present on the file-system when it is called upon.\n2. Also adding a hand-built `nwget` alternative because it was hanging the process after finishing\nthe download (I've only seen this reproduced locally, but neveretheless it was frustrating)\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"build: fix codegen flakiness with sequential execution, handrolled nwget"}},{"before":"cd6669b52a3e77fe30f7c803dda3b8641777228a","after":"ec03fa6e558025c26b2c986d4403ff7ea3701f82","ref":"refs/heads/tools-vendor-openapi-json-spec-files-for-release-management","pushedAt":"2024-06-01T02:10:05.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"build(tools): add script to vendor-openapi-spec-files for releases\n\nWORK IN PROGRESS\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"build(tools): add script to vendor-openapi-spec-files for releases"}},{"before":null,"after":"12ef49d1b6f129c58f7a8ad338c1a04ec0989625","ref":"refs/heads/chore-vendor-openapi-json-files-v200alpha2","pushedAt":"2024-06-01T02:03:31.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"chore: vendor v2.0.0-alpha.2 openapi.json files project-wide\n\nThis was done by running a modified version of the bump openapi specs script.\n\nThe change ensures that there are no $ref's of type REMOTE (when an HTTP/S link is used)\npresent in any of the openapi.json spec files.\n\nThe upside of this change is that we can cross-reference & re-use specifications of other\npackages but without the need to have the build's success depend on the internet connection\nand the presence of a git tag on upstream repository (which was creating a catch-22 for\nthe release automation scripts).\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"chore: vendor v2.0.0-alpha.2 openapi.json files project-wide"}},{"before":"844caafe4491ef4199fbb87073bdf659fe010615","after":"cd6669b52a3e77fe30f7c803dda3b8641777228a","ref":"refs/heads/tools-vendor-openapi-json-spec-files-for-release-management","pushedAt":"2024-06-01T01:27:42.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"squash! - checkpoint one\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"squash! - checkpoint one"}},{"before":null,"after":"450f7c1f7025bc8057275f5c8ae4886a49d70e64","ref":"refs/heads/refactor-tools-extract-tmp-git-clone-function","pushedAt":"2024-05-31T20:05:57.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"refactor(tools): extract createTemporaryClone() utility function\n\nThis makes the tooling code a more [DRY](https://en.wikipedia.org/wiki/Don%27t_repeat_yourself)\nand is a pre-requisite of some follow-up changes that are about to get proposed\nin a separate pull request by Peter that are specific to vendoring the openapi.json spec files.\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"refactor(tools): extract createTemporaryClone() utility function"}},{"before":"44a8981deaa861e56db563487742c406dde9f05e","after":"844caafe4491ef4199fbb87073bdf659fe010615","ref":"refs/heads/tools-vendor-openapi-json-spec-files-for-release-management","pushedAt":"2024-05-31T19:51:27.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"build(tools): add script to vendor-openapi-spec-files for releases\n\nWORK IN PROGRESS\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"build(tools): add script to vendor-openapi-spec-files for releases"}},{"before":null,"after":"a622e7ec73ee44736e865444551b198bee385099","ref":"refs/heads/ci-fix-ctp-ledger-connector-ethereum-job-cache-restore","pushedAt":"2024-05-31T19:40:14.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"ci(github): fix broken ci.yaml workflow job of ethereum connector\n\nThe problem seems to have been that the yarn cache restore operation\nwas somehow reverted to the old way of doing it which at this point\nhave been deprecated and broken by upgrades performed by GitHub in the\nmeantime.\n\nI've updated the job definition yaml to declare the cache restore operation\nthe same way all the other jobs are doing it so that it doesn't crash while\nattempting to restore the yarn dependency cache prior to a build+test job.\n\nThe logs of the failing job looked like this which provided the clue to\nwhat the issue might be:\n\n```sh\n2024-05-29T18:14:26.2450767Z Current runner version: '2.316.1'\n2024-05-29T18:14:26.2479056Z ##[group]Operating System\n2024-05-29T18:14:26.2479698Z Ubuntu\n2024-05-29T18:14:26.2480035Z 22.04.4\n2024-05-29T18:14:26.2480413Z LTS\n2024-05-29T18:14:26.2480746Z ##[endgroup]\n2024-05-29T18:14:26.2481115Z ##[group]Runner Image\n2024-05-29T18:14:26.2481603Z Image: ubuntu-22.04\n2024-05-29T18:14:26.2482000Z Version: 20240526.1.0\n2024-05-29T18:14:26.2482983Z Included Software: https://github.com/actions/runner-images/blob/ubuntu22/20240526.1/images/ubuntu/Ubuntu2204-Readme.md\n2024-05-29T18:14:26.2484443Z Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu22%2F20240526.1\n2024-05-29T18:14:26.2485292Z ##[endgroup]\n2024-05-29T18:14:26.2485726Z ##[group]Runner Image Provisioner\n2024-05-29T18:14:26.2486244Z 2.0.369.1\n2024-05-29T18:14:26.2486581Z ##[endgroup]\n2024-05-29T18:14:26.2488876Z ##[group]GITHUB_TOKEN Permissions\n2024-05-29T18:14:26.2490642Z Actions: write\n2024-05-29T18:14:26.2491263Z Attestations: write\n2024-05-29T18:14:26.2491851Z Checks: write\n2024-05-29T18:14:26.2492296Z Contents: write\n2024-05-29T18:14:26.2492725Z Deployments: write\n2024-05-29T18:14:26.2493115Z Discussions: write\n2024-05-29T18:14:26.2493536Z Issues: write\n2024-05-29T18:14:26.2493922Z Metadata: read\n2024-05-29T18:14:26.2494321Z Packages: write\n2024-05-29T18:14:26.2494693Z Pages: write\n2024-05-29T18:14:26.2495100Z PullRequests: write\n2024-05-29T18:14:26.2495540Z RepositoryProjects: write\n2024-05-29T18:14:26.2495985Z SecurityEvents: write\n2024-05-29T18:14:26.2496416Z Statuses: write\n2024-05-29T18:14:26.2496808Z ##[endgroup]\n2024-05-29T18:14:26.2499861Z Secret source: Actions\n2024-05-29T18:14:26.2500527Z Prepare workflow directory\n2024-05-29T18:14:26.3236714Z Prepare all required actions\n2024-05-29T18:14:26.3395737Z Getting action download info\n2024-05-29T18:14:26.4669232Z Download action repository 'actions/setup-node@v4.0.2' (SHA:60edb5dd545a775178f52524783378180af0d1f8)\n2024-05-29T18:14:26.6354890Z Download action repository 'actions/checkout@v4.1.1' (SHA:b4ffde65f46336ab88eb53be808477a3936bae11)\n2024-05-29T18:14:26.6738751Z Download action repository 'actions/cache@v4.0.1' (SHA:ab5e6d0c87105b4c9c2047343972218f562e4319)\n2024-05-29T18:14:26.9454684Z Complete job name: ctp-ledger-connector-ethereum\n2024-05-29T18:14:27.0407144Z ##[group]Run actions/setup-node@v4.0.2\n2024-05-29T18:14:27.0407904Z with:\n2024-05-29T18:14:27.0408249Z node-version: v18.18.2\n2024-05-29T18:14:27.0408727Z always-auth: false\n2024-05-29T18:14:27.0409242Z check-latest: false\n2024-05-29T18:14:27.0409864Z token: ***\n2024-05-29T18:14:27.0410223Z env:\n2024-05-29T18:14:27.0410660Z NODEJS_VERSION: v18.18.2\n2024-05-29T18:14:27.0411118Z RUN_TRIVY_SCAN: true\n2024-05-29T18:14:27.0411536Z FULL_BUILD_DISABLED: true\n2024-05-29T18:14:27.0412814Z JEST_TEST_PATTERN: packages/cactus-test-plugin-ledger-connector-ethereum/src/test/typescript/(unit|integration|benchmark)/.*/*.test.ts\n2024-05-29T18:14:27.0414083Z JEST_TEST_RUNNER_DISABLED: false\n2024-05-29T18:14:27.0414578Z TAPE_TEST_RUNNER_DISABLED: true\n2024-05-29T18:14:27.0415149Z ##[endgroup]\n2024-05-29T18:14:27.3394142Z Attempting to download v18.18.2...\n2024-05-29T18:14:27.6146256Z Acquiring 18.18.2 - x64 from https://github.com/actions/node-versions/releases/download/18.18.2-6796085386/node-18.18.2-linux-x64.tar.gz\n2024-05-29T18:14:28.0584476Z Extracting ...\n2024-05-29T18:14:28.0729917Z [command]/usr/bin/tar xz --strip 1 --warning=no-unknown-keyword --overwrite -C /home/runner/work/_temp/7f62dcc4-2eea-4134-9996-51fb41a608d7 -f /home/runner/work/_temp/18a8f5ad-d701-4682-a0a6-ddfeccff98bc\n2024-05-29T18:14:29.0694653Z Adding to the cache ...\n2024-05-29T18:14:30.6693206Z ##[group]Environment details\n2024-05-29T18:14:30.9336497Z node: v18.18.2\n2024-05-29T18:14:30.9337120Z npm: 9.8.1\n2024-05-29T18:14:30.9337787Z yarn: 1.22.22\n2024-05-29T18:14:30.9339206Z ##[endgroup]\n2024-05-29T18:14:30.9702266Z ##[group]Run actions/checkout@v4.1.1\n2024-05-29T18:14:30.9702711Z with:\n2024-05-29T18:14:30.9703208Z repository: hyperledger/cacti\n2024-05-29T18:14:30.9704074Z token: ***\n2024-05-29T18:14:30.9704384Z ssh-strict: true\n2024-05-29T18:14:30.9704846Z persist-credentials: true\n2024-05-29T18:14:30.9705243Z clean: true\n2024-05-29T18:14:30.9705551Z sparse-checkout-cone-mode: true\n2024-05-29T18:14:30.9706019Z fetch-depth: 1\n2024-05-29T18:14:30.9706366Z fetch-tags: false\n2024-05-29T18:14:30.9706670Z show-progress: true\n2024-05-29T18:14:30.9707093Z lfs: false\n2024-05-29T18:14:30.9707406Z submodules: false\n2024-05-29T18:14:30.9707712Z set-safe-directory: true\n2024-05-29T18:14:30.9708223Z env:\n2024-05-29T18:14:30.9708526Z NODEJS_VERSION: v18.18.2\n2024-05-29T18:14:30.9708865Z RUN_TRIVY_SCAN: true\n2024-05-29T18:14:30.9709297Z FULL_BUILD_DISABLED: true\n2024-05-29T18:14:30.9710676Z JEST_TEST_PATTERN: packages/cactus-test-plugin-ledger-connector-ethereum/src/test/typescript/(unit|integration|benchmark)/.*/*.test.ts\n2024-05-29T18:14:30.9711734Z JEST_TEST_RUNNER_DISABLED: false\n2024-05-29T18:14:30.9712303Z TAPE_TEST_RUNNER_DISABLED: true\n2024-05-29T18:14:30.9712669Z ##[endgroup]\n2024-05-29T18:14:31.0490368Z Syncing repository: hyperledger/cacti\n2024-05-29T18:14:31.0491730Z ##[group]Getting Git version info\n2024-05-29T18:14:31.0492806Z Working directory is '/home/runner/work/cacti/cacti'\n2024-05-29T18:14:31.0510179Z [command]/usr/bin/git version\n2024-05-29T18:14:31.0595744Z git version 2.45.1\n2024-05-29T18:14:31.0624616Z ##[endgroup]\n2024-05-29T18:14:31.0647005Z Temporarily overriding HOME='/home/runner/work/_temp/65f40793-e9dd-45f7-aa48-3edabe0b5e12' before making global git config changes\n2024-05-29T18:14:31.0648980Z Adding repository directory to the temporary git global config as a safe directory\n2024-05-29T18:14:31.0650804Z [command]/usr/bin/git config --global --add safe.directory /home/runner/work/cacti/cacti\n2024-05-29T18:14:31.0683363Z Deleting the contents of '/home/runner/work/cacti/cacti'\n2024-05-29T18:14:31.0689073Z ##[group]Initializing the repository\n2024-05-29T18:14:31.0692659Z [command]/usr/bin/git init /home/runner/work/cacti/cacti\n2024-05-29T18:14:31.0791277Z hint: Using 'master' as the name for the initial branch. This default branch name\n2024-05-29T18:14:31.0792241Z hint: is subject to change. To configure the initial branch name to use in all\n2024-05-29T18:14:31.0793062Z hint: of your new repositories, which will suppress this warning, call:\n2024-05-29T18:14:31.0793748Z hint:\n2024-05-29T18:14:31.0794276Z hint: \tgit config --global init.defaultBranch \n2024-05-29T18:14:31.0794773Z hint:\n2024-05-29T18:14:31.0795453Z hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and\n2024-05-29T18:14:31.0796493Z hint: 'development'. The just-created branch can be renamed via this command:\n2024-05-29T18:14:31.0797495Z hint:\n2024-05-29T18:14:31.0798046Z hint: \tgit branch -m \n2024-05-29T18:14:31.0798683Z Initialized empty Git repository in /home/runner/work/cacti/cacti/.git/\n2024-05-29T18:14:31.0801234Z [command]/usr/bin/git remote add origin https://github.com/hyperledger/cacti\n2024-05-29T18:14:31.0838315Z ##[endgroup]\n2024-05-29T18:14:31.0839010Z ##[group]Disabling automatic garbage collection\n2024-05-29T18:14:31.0842207Z [command]/usr/bin/git config --local gc.auto 0\n2024-05-29T18:14:31.0872228Z ##[endgroup]\n2024-05-29T18:14:31.0873045Z ##[group]Setting up auth\n2024-05-29T18:14:31.0878799Z [command]/usr/bin/git config --local --name-only --get-regexp core\\.sshCommand\n2024-05-29T18:14:31.0909618Z [command]/usr/bin/git submodule foreach --recursive sh -c \"git config --local --name-only --get-regexp 'core\\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :\"\n2024-05-29T18:14:31.1265073Z [command]/usr/bin/git config --local --name-only --get-regexp http\\.https\\:\\/\\/github\\.com\\/\\.extraheader\n2024-05-29T18:14:31.1294718Z [command]/usr/bin/git submodule foreach --recursive sh -c \"git config --local --name-only --get-regexp 'http\\.https\\:\\/\\/github\\.com\\/\\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :\"\n2024-05-29T18:14:31.1537668Z [command]/usr/bin/git config --local http.https://github.com/.extraheader AUTHORIZATION: basic ***\n2024-05-29T18:14:31.1581241Z ##[endgroup]\n2024-05-29T18:14:31.1582433Z ##[group]Fetching the repository\n2024-05-29T18:14:31.1593800Z [command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules --depth=1 origin +81da3334d8e638f85e398dd228bcef836a278230:refs/remotes/origin/main\n2024-05-29T18:14:32.1369829Z From https://github.com/hyperledger/cacti\n2024-05-29T18:14:32.1371859Z * [new ref] 81da3334d8e638f85e398dd228bcef836a278230 -> origin/main\n2024-05-29T18:14:32.1395818Z ##[endgroup]\n2024-05-29T18:14:32.1396843Z ##[group]Determining the checkout info\n2024-05-29T18:14:32.1398690Z ##[endgroup]\n2024-05-29T18:14:32.1399672Z ##[group]Checking out the ref\n2024-05-29T18:14:32.1404086Z [command]/usr/bin/git checkout --progress --force -B main refs/remotes/origin/main\n2024-05-29T18:14:32.7594778Z Switched to a new branch 'main'\n2024-05-29T18:14:32.7595819Z branch 'main' set up to track 'origin/main'.\n2024-05-29T18:14:32.7624017Z ##[endgroup]\n2024-05-29T18:14:32.7660832Z [command]/usr/bin/git log -1 --format='%H'\n2024-05-29T18:14:32.7686058Z '81da3334d8e638f85e398dd228bcef836a278230'\n2024-05-29T18:14:32.7843915Z ##[group]Run echo \"dir=$(yarn cache dir)\" >> \"$GITHUB_OUTPUT\"\n2024-05-29T18:14:32.7844624Z \u001B[36;1mecho \"dir=$(yarn cache dir)\" >> \"$GITHUB_OUTPUT\"\u001B[0m\n2024-05-29T18:14:32.7923507Z shell: /usr/bin/bash -e {0}\n2024-05-29T18:14:32.7923979Z env:\n2024-05-29T18:14:32.7924456Z NODEJS_VERSION: v18.18.2\n2024-05-29T18:14:32.7924917Z RUN_TRIVY_SCAN: true\n2024-05-29T18:14:32.7925306Z FULL_BUILD_DISABLED: true\n2024-05-29T18:14:32.7926271Z JEST_TEST_PATTERN: packages/cactus-test-plugin-ledger-connector-ethereum/src/test/typescript/(unit|integration|benchmark)/.*/*.test.ts\n2024-05-29T18:14:32.7927223Z JEST_TEST_RUNNER_DISABLED: false\n2024-05-29T18:14:32.7927770Z TAPE_TEST_RUNNER_DISABLED: true\n2024-05-29T18:14:32.7928191Z ##[endgroup]\n2024-05-29T18:14:33.2096065Z ##[error]Unable to process file command 'output' successfully.\n2024-05-29T18:14:33.2104770Z ##[error]Invalid format ' 0. yarn cache clean [--mirror] [--all]'\n2024-05-29T18:14:33.2263637Z Post job cleanup.\n2024-05-29T18:14:33.3035435Z [command]/usr/bin/git version\n2024-05-29T18:14:33.3079712Z git version 2.45.1\n2024-05-29T18:14:33.3124388Z Temporarily overriding HOME='/home/runner/work/_temp/9b8e00bb-c36a-4d67-abcb-cfafdf02bd77' before making global git config changes\n2024-05-29T18:14:33.3126367Z Adding repository directory to the temporary git global config as a safe directory\n2024-05-29T18:14:33.3129712Z [command]/usr/bin/git config --global --add safe.directory /home/runner/work/cacti/cacti\n2024-05-29T18:14:33.3168293Z [command]/usr/bin/git config --local --name-only --get-regexp core\\.sshCommand\n2024-05-29T18:14:33.3203708Z [command]/usr/bin/git submodule foreach --recursive sh -c \"git config --local --name-only --get-regexp 'core\\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :\"\n2024-05-29T18:14:33.3479541Z [command]/usr/bin/git config --local --name-only --get-regexp http\\.https\\:\\/\\/github\\.com\\/\\.extraheader\n2024-05-29T18:14:33.3501845Z http.https://github.com/.extraheader\n2024-05-29T18:14:33.3514783Z [command]/usr/bin/git config --local --unset-all http.https://github.com/.extraheader\n2024-05-29T18:14:33.3547533Z [command]/usr/bin/git submodule foreach --recursive sh -c \"git config --local --name-only --get-regexp 'http\\.https\\:\\/\\/github\\.com\\/\\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :\"\n2024-05-29T18:14:33.4044749Z Cleaning up orphan processes\n```\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"ci(github): fix broken ci.yaml workflow job of ethereum connector"}},{"before":"d64dd17422b4afca752037c5b3aadb5ee60893d9","after":"d5ba745c0d6297649b277222c48ce3e039148983","ref":"refs/heads/gh-pages","pushedAt":"2024-05-29T18:45:58.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"add Benchmark (benchmarkjs) benchmark result for 81da3334d8e638f85e398dd228bcef836a278230","shortMessageHtmlLink":"add Benchmark (benchmarkjs) benchmark result for 81da333"}},{"before":"ab676d23e1781aa17b5f2c61cb7dec643443bded","after":"81da3334d8e638f85e398dd228bcef836a278230","ref":"refs/heads/main","pushedAt":"2024-05-29T18:34:40.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"fix(cmd-api-server): address CVE-2022-25881\n\nPrimary Changes:\n\tUpdated the Dockerfile & https-cache-semantics inside the cmd-api-server package\n\nFixes: #2862\n\nSigned-off-by: zondervancalvez \nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"fix(cmd-api-server): address CVE-2022-25881"}},{"before":"a8b1a8952bb991a61977b4a174afc8cfab51e189","after":"d64dd17422b4afca752037c5b3aadb5ee60893d9","ref":"refs/heads/gh-pages","pushedAt":"2024-05-29T18:15:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"add Benchmark (benchmarkjs) benchmark result for ab676d23e1781aa17b5f2c61cb7dec643443bded","shortMessageHtmlLink":"add Benchmark (benchmarkjs) benchmark result for ab676d2"}},{"before":"6994e5b7a43b4f3e06535babb17edd466c4d4abc","after":"ab676d23e1781aa17b5f2c61cb7dec643443bded","ref":"refs/heads/main","pushedAt":"2024-05-29T17:45:02.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"feat(connector-besu): add gRPC support for operations\n\n1. The Besu connector now can be reached via the gRPC interface.\n2. The same operations are exposed as via HTTP+SocketIO\n3. gRPC supports bi-directional streaming so the block watching is also\nsupported and test coverage verifies that it works.\n4. To see an example of how to use the gRPC client of the Besu connector\nread the source code of the test case that provides the verification that\nthe functionality works:\n```\npackages/cactus-test-plugin-ledger-connector-besu/src/test/typescript/\nintegration/grpc-services/connector-besu-grpc-services.test.ts\n```\n\nDepends on #3173\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"feat(connector-besu): add gRPC support for operations"}},{"before":"121c031f40131d7bd19530ec317c956f2491312d","after":null,"ref":"refs/heads/feat-connector-besu-grpc-support","pushedAt":"2024-05-29T16:49:08.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"}},{"before":"12437983f533f0106c8e85d69de7ba1f8b14ba8b","after":"121c031f40131d7bd19530ec317c956f2491312d","ref":"refs/heads/feat-connector-besu-grpc-support","pushedAt":"2024-05-29T15:49:23.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"feat(connector-besu): add gRPC support for operations\n\n1. The Besu connector now can be reached via the gRPC interface.\n2. The same operations are exposed as via HTTP+SocketIO\n3. gRPC supports bi-directional streaming so the block watching is also\nsupported and test coverage verifies that it works.\n4. To see an example of how to use the gRPC client of the Besu connector\nread the source code of the test case that provides the verification that\nthe functionality works:\n```\npackages/cactus-test-plugin-ledger-connector-besu/src/test/typescript/\nintegration/grpc-services/connector-besu-grpc-services.test.ts\n```\n\nDepends on #3173\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"feat(connector-besu): add gRPC support for operations"}},{"before":"55760f9a43c95d7a93898ccc921fd6b8113a8125","after":null,"ref":"refs/heads/build-types-node-consolidate-to-v18-11-9-project-wide","pushedAt":"2024-05-24T22:19:24.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"}},{"before":"76b814a6a954161d0fb176337426adb62e5bc582","after":null,"ref":"refs/heads/build-upgrade-grpc-js-v1-10-3","pushedAt":"2024-05-24T22:10:18.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"}},{"before":"e6d5d88fd33b2078035447bc0e452f3d862e0e68","after":"6994e5b7a43b4f3e06535babb17edd466c4d4abc","ref":"refs/heads/main","pushedAt":"2024-05-24T21:09:04.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"fix(weaver-go-sdk): revert fabric-protos-go-apiv2 dep to fabric-protos-go\n\n * Added a script to manually change go package names inside fabric-protos\n to fabric-protos-go-apiv2 (for future migration apiv2).\n * Added more unit and build tests covering all go modules\n * Added tools/go-mod-tidy.sh script to fix go.mod by running go mod tidy\n\nSigned-off-by: Sandeep Nishad ","shortMessageHtmlLink":"fix(weaver-go-sdk): revert fabric-protos-go-apiv2 dep to fabric-proto…"}},{"before":"32a78f66aafa7d825d004628f2bbf246b0dfa6ee","after":"12437983f533f0106c8e85d69de7ba1f8b14ba8b","ref":"refs/heads/feat-connector-besu-grpc-support","pushedAt":"2024-05-24T18:42:09.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"feat(connector-besu): add gRPC support for operations\n\n1. The Besu connector now can be reached via the gRPC interface.\n2. The same operations are exposed as via HTTP+SocketIO\n3. gRPC supports bi-directional streaming so the block watching is also\nsupported and test coverage verifies that it works.\n4. To see an example of how to use the gRPC client of the Besu connector\nread the source code of the test case that provides the verification that\nthe functionality works:\n```\npackages/cactus-test-plugin-ledger-connector-besu/src/test/typescript/\nintegration/grpc-services/connector-besu-grpc-services.test.ts\n```\n\nDepends on #3173\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"feat(connector-besu): add gRPC support for operations"}},{"before":"ce561e1cf2ec72a4fd1dc5992e9eae5353c6cc18","after":null,"ref":"refs/heads/test-jest-migration-besu-get-block-get-logs-get-record-locator","pushedAt":"2024-05-24T18:11:06.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"}},{"before":"3cabe03017623c7d65a60e5997d6becfab905226","after":"e6d5d88fd33b2078035447bc0e452f3d862e0e68","ref":"refs/heads/main","pushedAt":"2024-05-24T17:25:40.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"feat(actionlint): fix the errors produced by the ActionLint tool\n\nPrimary Changes\n---------------\n\n1. Fix errors found by Actionlint on multiple yaml files\n2. Temporarily removed test_weaver*.yaml, weaver_deploy*.yml, weaver/ directory\nin ActionLint\n\nfixes: #2651\n\nSigned-off-by: ruzell22 ","shortMessageHtmlLink":"feat(actionlint): fix the errors produced by the ActionLint tool"}},{"before":"db6f958ad181b7b71d1587007741d5c1f539bb3f","after":null,"ref":"refs/heads/test-plugin-htlc-coordinator-besu-hsts-header-fix","pushedAt":"2024-05-23T13:59:09.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"}},{"before":"cb736a75ef18ac0866c90c4cae220af4a7d1bccd","after":"db6f958ad181b7b71d1587007741d5c1f539bb3f","ref":"refs/heads/test-plugin-htlc-coordinator-besu-hsts-header-fix","pushedAt":"2024-05-23T03:04:59.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"petermetz","name":"Peter Somogyvari","path":"/petermetz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1583231?s=80&v=4"},"commit":{"message":"test(plugin-htlc-coordinator-besu): fix HSTS header assert lowercase\n\n1. The test seem to have been broken from the moment of the introduction\nof the HSTS header assertions.\n2. The HSTS headers should be managed on the API server level instead of\nindividual endpoints.\n3. I'll create a follow-up issue for working on this in a more generic\nway that gets HSTS headers in place across the board and also in a way\nthat these are configurable for scenarios when the users don't want them.\n\nSigned-off-by: Peter Somogyvari ","shortMessageHtmlLink":"test(plugin-htlc-coordinator-besu): fix HSTS header assert lowercase"}},{"before":"48f0597d07144582142ca97d1af745cdfbfb3ade","after":"a8b1a8952bb991a61977b4a174afc8cfab51e189","ref":"refs/heads/gh-pages","pushedAt":"2024-05-23T02:08:24.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"add Benchmark (benchmarkjs) benchmark result for 3cabe03017623c7d65a60e5997d6becfab905226","shortMessageHtmlLink":"add Benchmark (benchmarkjs) benchmark result for 3cabe03"}},{"before":"7ef25f65d4982413071272dffcae6952f3fab2d6","after":"48f0597d07144582142ca97d1af745cdfbfb3ade","ref":"refs/heads/gh-pages","pushedAt":"2024-05-23T01:54:20.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"add Benchmark (benchmarkjs) benchmark result for 3cabe03017623c7d65a60e5997d6becfab905226","shortMessageHtmlLink":"add Benchmark (benchmarkjs) benchmark result for 3cabe03"}},{"before":"649b25b5faca3ac8bfa1f529480e57f4204a1b5d","after":"7ef25f65d4982413071272dffcae6952f3fab2d6","ref":"refs/heads/gh-pages","pushedAt":"2024-05-23T01:44:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Deployed 3cabe0301 with MkDocs version: 1.6.0","shortMessageHtmlLink":"Deployed 3cabe03 with MkDocs version: 1.6.0"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEWdG8fwA","startCursor":null,"endCursor":null}},"title":"Activity · petermetz/cacti"}