@avi2dg/checks 0.65.0 → 0.65.2

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 Every release of `@avi2dg/checks`, newest first, written by the release from its conventional commits.
 
+## 0.65.2
+
+Released 2026-11-04.
+
+### Fixes
+
+- **testing:** stop filing failed issues for fully undecided night runs [#43](https://github.com/avi2d/checks/pull/43)
+
+## 0.65.1
+
+Released 2026-11-03.
+
+### Fixes
+
+- allow weekly advisory scan in any public repository [#42](https://github.com/avi2d/checks/pull/42)
+
 ## 0.65.0
 
 Released 2026-11-03.

package/docs/gates/checks-advisories.md

@@ -105,7 +105,7 @@ A range that leaves `bun.lock` unchanged runs in under a second, and a direct ru
 ## Running it on a schedule
 
 A range never fails on an advisory published after its package landed, so a weekly `--all` run finds those.
-Only a public repository that publishes its package to npm runs it on a schedule, as [checks-ci-wiring](checks-ci-wiring.md#schedules) requires.
+Only a public repository runs it on a schedule, as [checks-ci-wiring](checks-ci-wiring.md#schedules) requires.
 Any other repository starts the same workflow by hand with `gh workflow run`, with no `schedule` trigger.
 A package scans on Monday between 05:00 and 06:00 UTC, at a minute chosen so repositories do not start together:
 

package/docs/gates/checks-ci-wiring.md

@@ -104,11 +104,11 @@ Each refusal names the workflow file, the line of its `schedule` trigger and wha
 ### Schedules
 
 It refuses every other workflow that triggers on `schedule`, since a test, mutation, flake, browser or night run starts only by hand, with `gh workflow run`.
-The one schedule it keeps is a weekly advisory scan in a public repository whose `package.json` does not set `private` to `true`.
+The one schedule it keeps is a weekly advisory scan in a public repository.
 A workflow scans advisories when a run step calls `checks-advisories`, the same ways a release call counts, and every other run step is a `bun install`.
 A weekly scan has one `cron` entry with one minute, one hour and one weekday, and `*` for the day of the month and the month.
-It refuses an advisory scan that runs more often, and any scheduled advisory scan in a private repository or a package that sets `private`.
-A run outside CI cannot read whether the repository is private, so it refuses a scan there only for the `package.json` field or the cron.
+It refuses an advisory scan that runs more often, and any scheduled advisory scan in a private repository.
+A run outside CI cannot read whether the repository is private, so it refuses a scan there only for the cron.
 A workflow that releases on a schedule is judged only by the release rule above.
 Each refusal names the workflow file, the line of its `schedule` trigger and what to change.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@avi2dg/checks",
-  "version": "0.65.0",
+  "version": "0.65.2",
   "description": "Deterministic checks shared across a set of TypeScript repositories",
   "author": {
     "name": "avi2d",

package/src/core/lint.ts

@@ -160,6 +160,10 @@ function outcomeOf(exitCode: number): Outcome {
   return exitCode === 1 ? "violated" : "undecided";
 }
 
+export function summaryOf(names: readonly string[], total: number, outcome: "failed" | "undecided"): string {
+  return `${names.length} of ${total} gate(s) ${outcome}: ${names.join(", ")}`;
+}
+
 const runGate = Effect.fn("runGate")(function* (gate: KitGate, range: Range, wholeTree: boolean) {
   const spawner = yield* ChildProcessSpawner.ChildProcessSpawner;
   const script = (yield* Path.Path).join(import.meta.dir, "..", gate.vector, gate.file);
@@ -249,11 +253,11 @@ const lint = Effect.gen(function* () {
     yield* Console.log(`${NAME}: ${gates.length} gate(s) pass`);
     return true;
   }
-  const names = failed.map((verdict) => verdict.gate.bin).join(", ");
+  const names = failed.map((verdict) => verdict.gate.bin);
   if (failed.every((verdict) => verdict.outcome === "undecided")) {
-    return yield* new GatesUndecided({ message: `${failed.length} of ${gates.length} gate(s) undecided: ${names}` });
+    return yield* new GatesUndecided({ message: summaryOf(names, gates.length, "undecided") });
   }
-  const summary = `${failed.length} of ${gates.length} gate(s) failed: ${names}`;
+  const summary = summaryOf(names, gates.length, "failed");
   yield* Console.error(`${NAME}: ${summary}`);
   return false;
 });

package/src/delivery/schedule-policy.ts

@@ -42,7 +42,6 @@ function scansAdvisoriesOnly(workflow: Workflow, context: ScheduleContext): bool
 
 function advisoryFault(workflow: Workflow, owner: ScheduleOwner): string | undefined {
   if (owner.visibility === "private") return "a private repository scans advisories by hand; " + BY_HAND;
-  if (!owner.publishes) return "a package.json that sets private publishes nothing to npm, so it scans advisories by hand; " + BY_HAND;
   const entries = crons(workflow.document);
   if (entries.length === 1 && entries.every(weekly)) return undefined;
   return 'the advisory scan runs more than once a week; keep one cron at a minute, an hour and a weekday, such as "15 5 * * 1"';

package/src/testing/night-run-findings.ts

@@ -78,7 +78,7 @@ export function findingsOf(previous: Option.Option<PreviousNight>, tonight: Toni
   );
 }
 
-const FAILED_GATES = /of \d+ gate\(s\) failed: (.+)/;
+const FAILED_GATES = /checks-lint: \d+ of \d+ gate\(s\) failed: (.+)/;
 const PASSED_GATES = /gate\(s\) pass/;
 
 export function gatesOf(log: string): readonly Finding[] {