Skip to content

Enforce deterministic install/tool invocation in flagged workflows and Gulp tasks#3087

Open
Copilot wants to merge 5 commits into
masterfrom
copilot/fix-package-installation-commands
Open

Enforce deterministic install/tool invocation in flagged workflows and Gulp tasks#3087
Copilot wants to merge 5 commits into
masterfrom
copilot/fix-package-installation-commands

Conversation

Copy link
Copy Markdown

Copilot AI commented May 14, 2026

  • Inspect PR Enforce deterministic install/tool invocation in flagged workflows and Gulp tasks #3087 and identify node-version-related workflow changes to split
  • Run existing repository lint/build/test command(s) to baseline current branch state
  • Remove node-version-only changes from current PR branch while keeping unrelated workflow/package-command updates
  • Commit and push the cleanup on current PR branch
  • Create a new branch from upstream base and apply only required node-version updates in workflow yml files
  • Validate new branch changes and run parallel validation
  • Create a new PR for node-version updates only
Original prompt

Fix the deterministic package installation command issues described in DevExpress/dxvcs#32108 for the repository DevExpress/testcafe-hammerhead.

Goal:

  • Update invalid package installation and npx invocation commands to comply with policy.
  • Prefer deterministic installs and prevent implicit package downloads from the registry.

Required changes:

  • Replace npm i and npm install with npm ci where appropriate and safe.
  • Replace npx <cmd> with npx --no-install <cmd> where appropriate.
  • Carefully review any flagged commands that may not be safely transformed mechanically, especially:
    • npm i testcafe-hammerhead ../testcafe-hammerhead --save
  • For edge cases, make the minimal safe change that satisfies the deterministic-install policy without breaking the workflow; if direct substitution with npm ci is not valid, adjust the workflow/command sequence appropriately.

Flagged files from the issue for DevExpress/testcafe-hammerhead:

  • .github/workflows/deploy-to-artifacts.yml
  • .github/workflows/health-monitor.yml
  • .github/workflows/test-client-cloud.yml
  • .github/workflows/test-functional-testcafe-native-automation.yml
  • .github/workflows/test-functional-testcafe-proxy.yml
  • .github/workflows/test-server-latest.yml
  • .github/workflows/test-server-minimum.yml
  • Gulpfile.js

Acceptance criteria:

  • All issue-listed invalid commands in this repository are fixed.
  • Changes are minimal and scoped only to the commands required by the issue.
  • CI/workflows/scripts remain functionally equivalent.
  • Open a pull request with a concise summary of the changes and mention that it addresses DevExpress/dxvcs#32108 for this repository.

The following is the prior conversation context from the user's chat exploration (may be truncated):

User: Create a PR for each of the following repositories: DevExpress/testcafe
DevExpress/testcafe-studio
DevExpress/testcafe-hammerhead
DevExpress/testcafe.io
DevExpress/generator-testcafe-reporter
DevExpress/testcafe-examples
DevExpress/testcafe-browser-tools
DevExpress/angular-testcafe
DevExpress/log-update-async-hook
DevExpress/testcafe-selector-generator
DevExpress/testcafe-browser-provider-electron
DevExpress/testcafe-legacy-api
DevExpress/testcafe-browser-provider-browserstack targeting master

Assistant: I’m waiting for your response to the approval prompt before I can continue creating the PRs for those repositories.

User: @copilot Accepted Confirmation: Confirm agent session

Assistant: Started the first PR task for DevExpress/testcafe. Track it here:

data:
  - title: "[WIP] Fix deterministic package installation command issues for DevExpress/testcafe"
    repository: DevExpress/testcafe
    url: https://github.com/copilot/tasks/pull/PR_kwDOAgrPSc7aWKKV?session_id=81c2f208-939a-444e-b91e-95a200f8b94c
    state: queued

I can continue with the remaining repositories next, but I’m currently unable to start additional PR tasks in this message.

User: Create a PR for DevExpress/testcafe-studio

Assistant: Started the PR task for DevExpress/testcafe-studio. You can follow its progress from the task page once it appears in GitHub.

User: @copilot Accepted Confirmation: Confirm agent session

Assistant: Started the PR task for DevExpress/testcafe-studio. Track it here:

data:
  - title: "[WIP] Fix deterministic package installation command issues for compliance"
    repository: DevExpress/testcafe-studio
    url: https://github.com/copilot/tasks/pull/PR_kwDOAny0l87aWg9l?session_id=9a638adc-b235-45ce-964f-4fe1279cabad
    state: queued

User: Could you attach links to all created PRS and PRs that will be created to the following issue https://github.com/orgs/DevExpress/projects/207/views/1?pane=issue&itemId=186240263&issue=DevExpress%7Cdxvcs%7C32108 ?

Assistant: I can do that, but I need the actual issue target rather than the project view link.

Please confirm that you want me to update this issue:

  • DevExpress/dxvcs#32108

If yes, I can add the created PR links there as they become available. Right now, I only have task links for the PR creation jobs, not confirmed PR URLs yet. Once PRs are created, I can attach those PR links to the issue.

User: yes this is the issue

Assistant: Yes — once the PRs exist, I can attach their links to DevExpress/dxvcs#32108.

At the moment, I only have task links, not actual PR URLs:

  • DevExpress/testcafe task
  • DevExpress/testcafe-studio task

I can update the issue with PR links after the PRs are created. If you want, I can also continue creating PRs for the remaining repositories one by one, and then attach all resulting PR links to DevExpress/dxvcs#32108.

User: yes please

Assistant: I’ll use a single consolidated comment on DevExpress/dxvcs#32108 and keep adding PR links as they become available.

Next up: DevExpress/testcafe-hammerhead.

When you’re ready, say:

  • Create a PR for DevExpress/testcafe-hammerhead

and after approval I’ll continue through the lis...

This pull request was created from Copilot chat.

Copilot AI changed the title [WIP] Fix deterministic package installation command issues Enforce deterministic install/tool invocation in flagged workflows and Gulp tasks May 14, 2026
Copilot AI requested a review from aleks-pro May 14, 2026 07:59
@aleks-pro aleks-pro marked this pull request as ready for review May 14, 2026 12:32
Copilot AI temporarily deployed to authentication May 14, 2026 12:32 Inactive
Copilot AI requested a deployment to authentication May 15, 2026 07:58 Abandoned
Copilot AI deployed to authentication May 15, 2026 09:46 Active
Copy link
Copy Markdown
Collaborator

@aleks-pro aleks-pro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Try to fix failed test tasks

Copy link
Copy Markdown
Author

Copilot AI commented May 15, 2026

Try to fix failed test tasks

I investigated the failing checks for this PR head b99679e: the failing statuses are linked to workflow runs 25911431600 and 25911431627, and both runs executed on master commit 0e62fc3 (not on this PR branch). On this PR branch, I don’t see failed workflow jobs to fix in-repo right now. Please share the exact failed run you want fixed for this branch, or re-run the required checks against b99679e.

Copilot AI requested a review from aleks-pro May 15, 2026 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants