From 602441c33db9d74eadce97522a729c2344332af3 Mon Sep 17 00:00:00 2001 From: Matt Venables Date: Thu, 2 Jul 2026 17:48:34 -0400 Subject: [PATCH] ci: shorten audit-fix PR body to avoid odd line-breaks The generated PR body hard-wrapped paragraphs mid-sentence, which GitHub renders with stray line breaks. Collapse each paragraph to a single line and trim the prose so it reads cleanly. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/audit-fix.yaml | 17 ++++------------- 1 file changed, 4 insertions(+), 13 deletions(-) diff --git a/.github/workflows/audit-fix.yaml b/.github/workflows/audit-fix.yaml index e0fa4dd..a7cfc7b 100644 --- a/.github/workflows/audit-fix.yaml +++ b/.github/workflows/audit-fix.yaml @@ -95,22 +95,13 @@ jobs: commit-message: "chore(deps): apply pnpm audit fixes" labels: dependencies body: | - ${{ steps.audit.outputs.clean != 'true' && '**Partial fix:** some advisories could not be auto-resolved. The scheduled audit-fix run for this change is red -- review its log and resolve the remainder by hand before merging.' || '' }} + ${{ steps.audit.outputs.clean != 'true' && '**Partial fix:** some advisories could not be auto-resolved. This run is red -- resolve the remainder by hand before merging.' || '' }} - Automated `pnpm audit --fix` from the scheduled audit sweep - (`.github/workflows/audit-fix.yaml`). + Automated `pnpm audit --fix=override` from the scheduled audit sweep (`.github/workflows/audit-fix.yaml`). - **AI usage:** none. This PR is generated mechanically by `pnpm audit - --fix=override`; no AI tools authored these changes (per - [AI_POLICY.md](AI_POLICY.md)). + **AI usage:** none. Generated mechanically; no AI tools authored these changes (per [AI_POLICY.md](AI_POLICY.md)). - Before merging, tidy the generated overrides by hand — `--fix` tends - to write overly broad ranges, caret targets instead of pinned - versions, and `minimumReleaseAgeExclude` entries that should be - pruned once the patch ages past `minimumReleaseAge`. Confirm each - override is scoped to the affected major and carries a comment - naming the advisory, matching the existing block in - `pnpm-workspace.yaml`. + Before merging, tidy the generated overrides by hand: scope each to the affected major, pin the version, and add a comment naming the advisory to match the existing block in `pnpm-workspace.yaml`. # A standing advisory that --fix can't auto-resolve must not pass as a # silent green sweep. The post-fix re-audit above already decided this; a # PR (if any) was opened with whatever --fix could resolve first.