@ckeditor/ckeditor5-dev-ci 54.6.0 → 54.6.1

package/README.md

@@ -132,7 +132,7 @@ These commands accept a mix of environment variables and command line arguments.
 - ⚙️ **`ckeditor5-dev-ci-trigger-snyk-scan`**
 
   Publishes Snyk code and dependency snapshots for the current branch.
-  It configures the Snyk CLI to use the EU endpoint and the provided organization, then runs `snyk code test --report` and `snyk monitor --all-projects --detection-depth=2`.
+  It configures the Snyk CLI to use the EU endpoint and the provided organization, then runs `snyk code test --report` and `snyk monitor --all-projects --exclude=external,tests`.
 
   **Environment variables:**
   - `SNYK_TOKEN` — Snyk token used for authentication.
@@ -141,10 +141,11 @@ These commands accept a mix of environment variables and command line arguments.
   - `CIRCLE_BRANCH` — Git branch used as Snyk's `target-reference`.
 
   **Parameters:**
+  - `--exclude` — *(Optional, repeatable)* Directory or file name passed to Snyk's `--exclude`. Use multiple times, for example `--exclude=external --exclude=tests`. Defaults to `external` and `tests`.
   - `--organization` — Snyk organization ID or slug.
 
   **Behavior:**
-  - Limits dependency snapshot detection to the repository root and `packages/*`, so test fixtures and deeper nested manifests are ignored.
+  - Excludes directories and files named `external` and `tests` from dependency snapshot detection by default, and allows overriding that list with repeated `--exclude` flags.
   - Accepts exit code `1` from `snyk code test --report`, so code snapshots are still published when vulnerabilities are found.
   - Requires exit code `0` from `snyk monitor --all-projects`, because any other code means the dependency snapshot was not created.
 

package/bin/circle-workflow-notifier.js

@@ -112,8 +112,9 @@ async function waitForOtherJobsAndSendNotification() {
 		return waitForOtherJobsAndSendNotification();
 	}
 
-	// If any ignored job failed, all of its children will be marked as 'failed_parent', and thus will not trigger this check.
-	const anyJobsFailed = jobs.some( job => job.status === 'failed' );
+	// If any ignored job failed or was canceled, all of its children will be marked as
+	// 'failed_parent', and thus will not trigger this check.
+	const anyJobsFailed = jobs.some( job => job.status === 'failed' || job.status === 'canceled' );
 
 	if ( anyJobsFailed ) {
 		return execSync( task, { stdio: 'inherit' } );

package/bin/trigger-snyk-scan.js

@@ -15,6 +15,11 @@ try {
 
 	const { values } = parseArgs( {
 		options: {
+			exclude: {
+				default: [ 'external', 'tests' ],
+				multiple: true,
+				type: 'string'
+			},
 			organization: {
 				type: 'string'
 			}
@@ -57,7 +62,7 @@ try {
 		[
 			'monitor',
 			'--all-projects',
-			'--detection-depth=2',
+			`--exclude=${ values.exclude.join( ',' ) }`,
 			`--target-reference=${ CIRCLE_BRANCH }`
 		],
 

package/lib/process-job-statuses.js

@@ -64,6 +64,11 @@ function isJobFailed( job ) {
 		return true;
 	}
 
+	// See: https://github.com/ckeditor/ckeditor5/issues/19978.
+	if ( job.status === 'canceled' ) {
+		return true;
+	}
+
 	if ( job.status === 'failed_parent' ) {
 		return true;
 	}
@@ -85,7 +90,7 @@ function clone( obj ) {
  *
  * @property {string} id
  *
- * @property {'blocked'|'running'|'failed'|'failed_parent'|'success'} status
+ * @property {'blocked'|'running'|'failed'|'canceled'|'failed_parent'|'success'|'skipped'} status
  *
  * @property {Array.<string>} dependencies
  */

package/lib/utils/is-workflow-finished.js

@@ -6,6 +6,8 @@
 const FINISHED_STATUSES = [
 	'success',
 	'failed',
+	// See: https://github.com/ckeditor/ckeditor5/issues/19978.
+	'canceled',
 	'failed_parent',
 	// See: https://github.com/ckeditor/ckeditor5/issues/18359.
 	'skipped'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ckeditor/ckeditor5-dev-ci",
-  "version": "54.6.0",
+  "version": "54.6.1",
   "description": "Utils used on various Continuous Integration services.",
   "keywords": [],
   "author": "CKSource (http://cksource.com/)",