adam/seahaven-slack-bot
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Upgrade to TypeScript ~6.0.3 #19

Merged
amoussa1229 merged 8 commits from feature/typescript-6-upgrade into main 2026-05-06 23:56:58 +00:00
Conversation 2 Commits 8 Files changed 4 +1
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 0691cd756c - Show all commits

1
.github/workflows/claude-review.yaml vendored
View file

@ -7,6 +7,7 @@ on:
permissions:
contents: read
pull-requests: write
id-token: write
cursor[bot] commented 2026-05-06 23:50:17 +00:00 (Migrated from github.com)
Review
Copy link

Unrelated id-token: write permission added to workflow

Medium Severity

The id-token: write permission was added to the workflow but is not mentioned in the PR description and is unrelated to the TypeScript upgrade. This permission allows the workflow to mint OIDC tokens, which can be used to authenticate with cloud providers. Bundling a security-relevant permission escalation into an unrelated dependency-upgrade PR risks it going unreviewed.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 4d492f6b3e. Configure here.

### Unrelated `id-token: write` permission added to workflow **Medium Severity** <!-- DESCRIPTION START --> The `id-token: write` permission was added to the workflow but is not mentioned in the PR description and is unrelated to the TypeScript upgrade. This permission allows the workflow to mint OIDC tokens, which can be used to authenticate with cloud providers. Bundling a security-relevant permission escalation into an unrelated dependency-upgrade PR risks it going unreviewed. <!-- DESCRIPTION END --> <!-- BUGBOT_BUG_ID: dda31b5f-f743-464b-ba5b-954c9febb1f8 --> <!-- LOCATIONS START .github/workflows/claude-review.yaml#L9-L10 LOCATIONS END --> <div><a href="https://cursor.com/open?data=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImJ1Z2JvdC12MiJ9.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiQlVHQk9UX0ZJWF9JTl9DVVJTT1IiLCJkYXRhIjp7InJlZGlzS2V5IjoiYnVnYm90Ojc4NGE1NjdjLTA3MTYtNDRhMi1iZjc2LTczMWI1MjRlMDkxMyIsImVuY3J5cHRpb25LZXkiOiJUMHFBd0RzTjJmakx1VWo1WlZzbVVLRmNReDZmTTF3U3lRalA1VGlSOWZJIiwiYnJhbmNoIjoiZmVhdHVyZS90eXBlc2NyaXB0LTYtdXBncmFkZSIsInJlcG9Pd25lciI6IlNlYS1IYXZlbi1JbmR1c3RyaWVzIiwicmVwb05hbWUiOiJzZWFoYXZlbi1zbGFjay1ib3QifSwiaWF0IjoxNzc4MTExNDE3LCJleHAiOjE3ODA3MDM0MTd9.Aj7EE1Utr9eVP3ojRdTqmj-qimRNrj1qMu7ZPrVucLTqgU4uMrxXldpN6LYwWsWNCO0yL4N01wveWj7M8nUIgmft0rYd59p48JRygb417SfCkmkjiR847kBy0XVMA5U-Si-YQfxE0lHJ2ws7SD2TsWK7QuTDut6G-jFWNoI2kaf4f_bOuabqEg2V3I0OvDYZhIYB5j0x3o59xpwEthD1q153ijFkIrP8gcqhv64v1FOoHxlk8U_9CeNQcB72_zNt4asC10fus8VyLxfs3rdnZ-kPU2emJKkRRdzZ5O8M4BSyIq9v4ezkZ9dHvVdiYKj1mo9ZWeJpeVi8yNwArKtUXQ" target="_blank" rel="noopener noreferrer"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/fix-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/fix-in-cursor-light.png"><img alt="Fix in Cursor" width="115" height="28" src="https://cursor.com/assets/images/fix-in-cursor-dark.png"></picture></a>&nbsp;<a href="https://cursor.com/agents?data=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImJ1Z2JvdC12MiJ9.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiQlVHQk9UX0ZJWF9JTl9XRUIiLCJkYXRhIjp7InJlZGlzS2V5IjoiYnVnYm90Ojc4NGE1NjdjLTA3MTYtNDRhMi1iZjc2LTczMWI1MjRlMDkxMyIsImVuY3J5cHRpb25LZXkiOiJUMHFBd0RzTjJmakx1VWo1WlZzbVVLRmNReDZmTTF3U3lRalA1VGlSOWZJIiwiYnJhbmNoIjoiZmVhdHVyZS90eXBlc2NyaXB0LTYtdXBncmFkZSIsInJlcG9Pd25lciI6IlNlYS1IYXZlbi1JbmR1c3RyaWVzIiwicmVwb05hbWUiOiJzZWFoYXZlbi1zbGFjay1ib3QiLCJwck51bWJlciI6MTksImNvbW1pdFNoYSI6IjRkNDkyZjZiM2VhNjNiMmNmZGFiYWZjNDAxYTRiODIwZjc4MGJkY2IiLCJwcm92aWRlciI6ImdpdGh1YiJ9LCJpYXQiOjE3NzgxMTE0MTcsImV4cCI6MTc4MDcwMzQxN30.yvYTWc2B6UazpPOBRau0HQrGwNxkQtJKpbXfDz5h4mXRFyztsoIk5VtSmlYCHB7sTouyY8kxGEzs7zkAyOOFIGjhEjQJiUCN3yOMcE-Ask1kkarT9HTZ2KMsEdNtylgSD76MHTb5BoTpcvvXtyymzYq7M9yrteUqN8GZPVoGyGKKqF84YqjeSwbYmAbw7DDSPwWR0cw4kBzcHyPxY6kryFc5DjDpKjnBWxmULIrAsRS3IukaZ9kREmgsM23y_AfcanJWuuB00ENwu_fA7WpWU1P6I7ejSMNUmqZdj6lI4ZjLu4cX4N93kBMqAuTPlq8jO0VEKhXq3F5KE_vqxmlyRg" target="_blank" rel="noopener noreferrer"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/fix-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/fix-in-web-light.png"><img alt="Fix in Web" width="99" height="28" src="https://cursor.com/assets/images/fix-in-web-dark.png"></picture></a></div> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 4d492f6b3ea63b2cfdabafc401a4b820f780bdcb. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup>
jobs:
review: