Features: BV Text node with management-gated writing assistance (translate, improve, undo, prompt profiles); reuse of prepared MODEL/CLIP state for Krea 2 and Anima LLLite consumers; Regional refactoring. Security boundaries: one wall-clock budget per Remote LLM request enforced by a socket-closing watchdog across connect, TLS handshake, headers, chunk framing and body; writing assistance uses the profile's configured timeout; a shared bounded JSON reader with route-specific limits on every JSON route; endpoint binding negative tests for the assist path. Release and packaging: SECURITY.md; bundled-library notices and a readable bundle header; Registry scan replica as a hard test with a pinned count; a packaged-file-set test; publish only from a validated push to main with provenance checks, pinned comfy-cli, an input manifest and a byte-exact comparison of the stored archive; npm audit and a whole js/ rebuild gate in Validate; design references, brand sources and a type declaration excluded from the package. README and changelog for 1.4.4. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
70 lines
1.8 KiB
YAML
70 lines
1.8 KiB
YAML
name: Validate
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
validate:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Check out repository
|
|
uses: actions/checkout@v5
|
|
|
|
- name: Set up Python
|
|
uses: actions/setup-python@v6
|
|
with:
|
|
python-version: "3.12"
|
|
|
|
- name: Install Python test dependencies
|
|
run: |
|
|
python -m pip install --upgrade pip
|
|
python -m pip install --index-url https://download.pytorch.org/whl/cpu "torch>=2.5,<3"
|
|
python -m pip install "aiohttp>=3.10,<4" "numpy>=1.26,<3" "Pillow>=10,<13" "jsonschema>=4.20,<5" "pathspec>=0.12,<1"
|
|
# Test-only: the transport tests generate a throwaway TLS certificate.
|
|
python -m pip install "cryptography>=42,<60"
|
|
|
|
- name: Validate Python syntax
|
|
run: python -m compileall -q __init__.py py
|
|
|
|
- name: Run Python tests
|
|
run: python -m unittest discover -s tests -v
|
|
|
|
- name: Set up Node.js
|
|
uses: actions/setup-node@v5
|
|
with:
|
|
node-version: "20"
|
|
cache: npm
|
|
cache-dependency-path: ui/package-lock.json
|
|
|
|
- name: Install UI dependencies
|
|
working-directory: ui
|
|
run: npm ci
|
|
|
|
- name: Audit UI dependencies
|
|
working-directory: ui
|
|
run: npm audit --audit-level=high
|
|
|
|
- name: Run frontend behavior tests
|
|
working-directory: ui
|
|
run: npm test
|
|
|
|
- name: Type-check UI
|
|
working-directory: ui
|
|
run: npm run typecheck
|
|
|
|
- name: Build UI
|
|
working-directory: ui
|
|
run: npm run build
|
|
|
|
- name: Verify committed UI bundle and that the build emitted nothing else
|
|
run: |
|
|
git diff --exit-code -- js/
|
|
test -z "$(git status --porcelain -- js/)"
|