lsh-framework 3.5.0 → 3.5.1

package/dist/commands/self.js

@@ -102,6 +102,22 @@ async function fetchLatestVersion() {
         });
     });
 }
+/**
+ * Decide build status from the build workflow's runs (pure, unit-testable).
+ *
+ * Only a real `failure` on the most recent COMPLETED run blocks an update.
+ * `cancelled` / `skipped` / `null` are infra noise — the build is frequently
+ * cancelled by concurrency on the self-hosted runner — and must NOT be reported
+ * as a failing build. No completed runs → treat as passing (don't block).
+ */
+export function evaluateBuildRuns(runs) {
+    const completed = (runs || []).filter((run) => run.status === 'completed');
+    if (completed.length === 0) {
+        return { passing: true };
+    }
+    const latest = completed[0];
+    return { passing: latest.conclusion !== 'failure', url: latest.html_url };
+}
 /**
  * Check GitHub Actions CI status for a specific version tag
  */
@@ -110,7 +126,9 @@ async function checkCIStatus(_version) {
         const options = {
             hostname: 'api.github.com',
             port: 443,
-            path: `/repos/gwicho38/lsh/actions/runs?per_page=5`,
+            // Scope to the BUILD workflow only. Querying all workflows let a flaky
+            // security scan (e.g. Codacy timing out on a download) read as "build failing".
+            path: `/repos/gwicho38/lsh/actions/workflows/node.js.yml/runs?branch=main&per_page=5`,
             method: 'GET',
             headers: {
                 'User-Agent': 'lsh-cli',
@@ -126,21 +144,9 @@ async function checkCIStatus(_version) {
                 try {
                     if (res.statusCode === 200) {
                         const ghData = JSON.parse(data);
-                        const runs = ghData.workflow_runs || [];
-                        // Find the most recent workflow run for main branch
-                        const mainRuns = runs.filter((run) => run.head_branch === 'main' && run.status === 'completed');
-                        if (mainRuns.length > 0) {
-                            const latestRun = mainRuns[0];
-                            const passing = latestRun.conclusion === 'success';
-                            resolve({
-                                passing,
-                                url: latestRun.html_url,
-                            });
-                        }
-                        else {
-                            // No completed runs found, assume passing
-                            resolve({ passing: true });
-                        }
+                        const runs = (ghData.workflow_runs || []);
+                        // The path is already scoped to node.js.yml on main; decide via the pure helper.
+                        resolve(evaluateBuildRuns(runs));
                     }
                     else {
                         // If we can't check CI, don't block the update

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lsh-framework",
-  "version": "3.5.0",
+  "version": "3.5.1",
   "description": "Simple, cross-platform encrypted secrets manager with automatic sync, IPFS audit logs, and multi-environment support. Just run lsh sync and start managing your secrets.",
   "main": "dist/cli.js",
   "bin": {