@theholocron/cli 4.16.0 → 4.16.1

package/README.md

@@ -99,6 +99,16 @@ export default defineConfig({
 });
 ```
 
+The generated ruleset also sets `require_extra_approval_for_unattributed_changes:
+false` — with `required_approving_review_count: 0` and a single maintainer, the
+GitHub default (`true`) is an unsatisfiable block on any PR with an
+unverified/unattributed commit. Repository-admin bypass still covers the real
+risk. And the `codecov.yml` `holocron setup` writes carries `if_not_found:
+success` on every status default, so an infra-only PR (dep bump, config,
+lockfile — no coverable change) passes instead of hanging on a `codecov/*`
+required check that never posts. A re-run of `holocron setup` backfills both into
+an existing repo.
+
 ### Git hooks
 
 ```ts

package/dist/cli.mjs

@@ -3379,7 +3379,7 @@ function createIgnoreConfig() {
 }
 //#endregion
 //#region src/templates/configs/codecov/codecov.yml
-var codecov_default = "codecov:\n  require_ci_to_pass: true\n\ncoverage:\n  precision: 2\n  round: down\n  status:\n    project:\n      default:\n        target: auto\n        threshold: 2%\n    patch:\n      default:\n        target: 80%\n\ncomment:\n  layout: \"reach,diff,flags,components\"\n  behavior: default\n  require_changes: true\n\ncomponent_management:\n  default_rules:\n    statuses:\n      - type: patch\n        target: 80%\n  individual_components:\n";
+var codecov_default = "codecov:\n  require_ci_to_pass: true\n\ncoverage:\n  precision: 2\n  round: down\n  status:\n    project:\n      default:\n        target: auto\n        threshold: 2%\n        # Infra-only PRs (dep bumps, config, lockfile) touch no coverable code,\n        # so codecov produces no report to compare. Pass instead of blocking\n        # forever on a required check that will never post.\n        if_not_found: success\n    patch:\n      default:\n        target: 80%\n        if_not_found: success\n\ncomment:\n  layout: \"reach,diff,flags,components\"\n  behavior: default\n  require_changes: true\n\ncomponent_management:\n  default_rules:\n    statuses:\n      - type: patch\n        target: 80%\n        if_not_found: success\n  individual_components:\n";
 //#endregion
 //#region src/templates/configs/codecov/utils.ts
 const INDIVIDUAL_COMPONENTS_MARKER = "  individual_components:";
@@ -3393,10 +3393,45 @@ function codecovComponentBlock(packages) {
 		``
 	]).join("\n");
 }
+/**
+* Ensure every codecov status default carries `if_not_found: success`, so an
+* infra-only PR (dep bump, config, lockfile — no coverable change) passes
+* instead of hanging forever on a required check codecov never posts.
+*
+* Injects the key on the line after each `target:` that sits inside a status
+* block (`coverage.status.*.default` or a `statuses:` list item — indent ≥ 8,
+* or ≥ 8 for a `- type:` list entry), when the immediate sibling lines do not
+* already declare it.
+*/
+function ensureIfNotFound(yaml) {
+	const lines = yaml.split("\n");
+	const out = [];
+	for (let i = 0; i < lines.length; i++) {
+		const line = lines[i];
+		out.push(line);
+		const m = /^(\s{8,})target:\s+\S+\s*$/.exec(line);
+		if (!m) continue;
+		const indent = m[1];
+		let alreadySet = false;
+		for (let j = i + 1; j < lines.length; j++) {
+			const sib = lines[j];
+			if (sib.trim() === "") continue;
+			const sibIndent = sib.match(/^\s*/)[0].length;
+			if (sibIndent < indent.length) break;
+			if (sibIndent === indent.length && /^\s*if_not_found\s*:/.test(sib)) {
+				alreadySet = true;
+				break;
+			}
+			if (sibIndent === indent.length && /^\s*(- |\w)/.test(sib) && !/^\s*(threshold|flags|paths|branches)\s*:/.test(sib)) break;
+		}
+		if (!alreadySet) out.push(`${indent}if_not_found: success`);
+	}
+	return out.join("\n");
+}
 function mergeCodecovComponents(existing, packages) {
 	const idx = existing.indexOf(INDIVIDUAL_COMPONENTS_MARKER);
-	if (idx === -1) return existing;
-	return existing.slice(0, idx + 24) + codecovComponentBlock(packages);
+	if (idx === -1) return ensureIfNotFound(existing);
+	return ensureIfNotFound(existing.slice(0, idx + 24)) + codecovComponentBlock(packages);
 }
 async function readWorkspacePackages(repoRoot) {
 	const packagesDir = join(repoRoot, "packages");
@@ -3965,7 +4000,8 @@ function buildRulesetPayload(requiredChecks = []) {
 				dismiss_stale_reviews_on_push: false,
 				require_code_owner_review: false,
 				require_last_push_approval: false,
-				required_review_thread_resolution: true
+				required_review_thread_resolution: true,
+				require_extra_approval_for_unattributed_changes: false
 			}
 		}
 	];