Skip to content

fix(cli): drop redundant newlines from Println help output - #44

Merged
juicycleff merged 4 commits into
mainfrom
fix/remaining-criticals
Aug 3, 2026
Merged

fix(cli): drop redundant newlines from Println help output#44
juicycleff merged 4 commits into
mainfrom
fix/remaining-criticals

Conversation

@juicycleff

Copy link
Copy Markdown
Contributor

go vet treats cli.CommandContext.Println as a Println-style print wrapper, so the four help-text calls ending in "\n" tripped the "arg list ends with redundant newline" check and failed the build.

Emit the blank separator lines with a bare ctx.Println() instead. Output is unchanged: Fprintln with no args writes exactly one newline.

go vet treats cli.CommandContext.Println as a Println-style print
wrapper, so the four help-text calls ending in "\n" tripped the
"arg list ends with redundant newline" check and failed the build.

Emit the blank separator lines with a bare ctx.Println() instead.
Output is unchanged: Fprintln with no args writes exactly one newline.
@vercel

vercel Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
forge Ready Ready Preview Aug 3, 2026 10:37pm

Request Review

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Conventional Commits Validation

PR Title: valid
Commits: all 1 follow conventional format

pion/webrtc v3.3.6 is the last v3 release and pins dtls/v2 and stun,
which carry:

  CVE-2026-26014  pion/dtls  <=2.2.12  random nonce reuse with AES-GCM
                             risks leaking the authentication key
  CVE-2026-54909  pion/stun  <=1.23.1  remote DoS via panic parsing a
                             malformed XOR-MAPPED-ADDRESS attribute

Both fixes landed only behind new major import paths, so Dependabot
reports "no patched version" and cannot bump them automatically.

Moving to webrtc/v4 pulls dtls/v3 and stun/v3 and retires the rest of
the v2 generation (ice/v2->v4, turn/v2->v5, transport/v2->v4,
srtp/v2->v3, mdns->mdns/v2). No API changes were needed: the only
source edits are the six import paths.

go mod tidy also drops testify and go-difflib; the tests in this module
use plain stdlib testing and never imported them.

Verified with GOWORK=off (this module is not in go.work): build, vet
and test all pass.
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Conventional Commits Validation

PR Title: valid
Commits: all 2 follow conventional format

The "Build and vet all modules" loop builds each module standalone, so
cmd/forge compiled against the last PUBLISHED github.com/xraph/forge
rather than this checkout. Root API added on a branch but not yet
released therefore failed the job:

  plugins/client.go:401:23: undefined: client.PathFilter
  plugins/client.go:437:3:  unknown field PathFilter in GeneratorConfig
  plugins/client.go:438:3:  unknown field ReactQuery in GeneratorConfig

cmd/forge/go.mod cannot carry a replace directive - `go install
...@latest` rejects any module that has one - so the fix is a throwaway
workspace, the same one the Build CLI job already creates.

The workspace file lives in RUNNER_TEMP rather than the repo root: a
go.work at the root applies to every module in the loop, and the 37 it
does not list would fail with "directory prefix . does not contain
modules listed in go.work". Only cmd/forge and extensions/database use
it; everything else builds with GOWORK=off, which is what a fresh
checkout already did since go.work is gitignored.

Applied to the Test submodules loop too - it had the same defect and
would have failed identically once the build passed.

Also read mod_name from the module line instead of `head -1`, which
picked up the first line of a comment and logged "./cmd/forge (Do)".

Verified by running both extracted step scripts locally: all 39 modules
build and vet, and cmd/forge's tests pass under the workspace.
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Conventional Commits Validation

PR Title: valid
Commits: all 3 follow conventional format

The 69 MB arm64 binary was committed before .gitignore grew its
compiled-example-binary rules, and git ignores nothing it already
tracks. Every `go build ./...` in that module rewrote the file, so
it showed as modified locally and dirtied CI's build-and-vet loop.

No .gitignore change needed: examples/*/[!.]* already covers it.
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Conventional Commits Validation

PR Title: valid
Commits: all 4 follow conventional format

@github-actions github-actions Bot added fix and removed fix labels Aug 3, 2026
@juicycleff
juicycleff merged commit 73058fb into main Aug 3, 2026
25 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant