Skip to content

chore: harden workflows and refresh dependencies - #23

Merged
hyochan merged 4 commits into
mainfrom
chore/refresh-dependencies-workflows
Aug 7, 2026
Merged

chore: harden workflows and refresh dependencies#23
hyochan merged 4 commits into
mainfrom
chore/refresh-dependencies-workflows

Conversation

@hyochan

@hyochan hyochan commented Aug 7, 2026

Copy link
Copy Markdown
Member

Summary

  • make GraphQL generation and canonical version synchronization fail closed, regenerate Apple/Android shared types, and render package versions from the source-of-truth map
  • refresh compatible JavaScript, Kotlin, Android, Flutter, ML Kit, and ExecuTorch dependencies while preserving the current Expo/React Native/Nitro platform matrices
  • migrate the Android ExecuTorch integration to the 1.3 callback/error and context-reset APIs, including privacy-preserving failure tests
  • harden CI, deployment, and release workflows with pinned Bun installs, protected environments, immutable release checks, and a Web release workflow
  • add repository-local Locanara workflow/documentation/rebase/review skills, including an OpenIAP-adapted review-pr fallback and contract tests
  • fix React Native example lifecycle/lint regressions, remove its stale npm lockfile, update Flutter example lints, and keep documentation/version displays synchronized

Validation

  • bunx bun@1.3.14 install --frozen-lockfile --ignore-scripts
  • bun run version:check
  • GraphQL generation plus generated Apple/Android drift checks
  • Apple swift build, swift test, and example simulator build
  • Android :locanara:test, :locanara:build, and :example:assembleDebug
  • Web lint, tests, package build, and Vite example build
  • Site typecheck, lint, format check, 63 tests, and production build
  • Expo TypeScript, ESLint, tests, package build, dependency compatibility check, and frozen installs
  • React Native nitrogen, TypeScript, 46 tests, package build, example lint/test, iOS example build, and Android four-ABI debug build
  • Flutter analyze, 39 tests, example analyze, and Android debug APK build
  • agent context typecheck, 19 tests, Markdown lint, compile, generated-output check, and version check
  • all GitHub Actions workflows with the latest actionlint
  • git diff --check and staged secret-pattern scan

Dependency audit notes

Compatible direct updates and safe same-major overrides are included. The remaining Bun advisories are transitive legacy glob/WebSocket tooling or require coordinated major upgrades rather than a safe global override:

  • root: 12 advisories across 4 packages
  • Expo library/example: 30 / 37 advisories
  • React Native library/example: 31 / 19 advisories
  • agent tooling: 0 advisories

React Router is already on the latest published 7.x release used by the site; the reported RSC advisory currently names a future 8.3.0 fix and the site does not use RSC actions. Coordinated migrations to Expo 57, React Native 0.86, Nitro 0.36, Jest 30, TypeScript 7, Kotlin 2.3/ML Kit beta4, AGP 9, and the newer Maven publishing DSL are intentionally left for separate changes.

No package version was bumped and no publish, deployment, tag, or release workflow was triggered.

@coderabbitai

coderabbitai Bot commented Aug 7, 2026

Copy link
Copy Markdown

Review Change Stack

Important

Review skipped

Too many files!

This PR contains 107 files, which is 7 over the limit of 100.

To get a review, reduce the PR to 100 files or fewer by splitting it into smaller PRs or changing its base branch.

Upgrade to a paid plan to raise the limit.

This review couldn't start because sufficient usage credits or metered capacity aren't available. Add credits or update usage-based reviews in the billing tab, then retry.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 55eba44e-a176-4738-a786-e0ac1bd468b6

📥 Commits

Reviewing files that changed from the base of the PR and between cdd2329 and 289ed89.

⛔ Files ignored due to path filters (8)
  • bun.lock is excluded by !**/*.lock
  • libraries/expo-ondevice-ai/bun.lock is excluded by !**/*.lock
  • libraries/expo-ondevice-ai/example/bun.lock is excluded by !**/*.lock
  • libraries/flutter_ondevice_ai/example/pubspec.lock is excluded by !**/*.lock
  • libraries/react-native-ondevice-ai/bun.lock is excluded by !**/*.lock
  • libraries/react-native-ondevice-ai/example/bun.lock is excluded by !**/*.lock
  • libraries/react-native-ondevice-ai/example/package-lock.json is excluded by !**/package-lock.json
  • scripts/agent/bun.lock is excluded by !**/*.lock
📒 Files selected for processing (107)
  • .claude/commands/review-pr.md
  • .claude/guides/07-versioning.md
  • .claude/guides/08-deployment.md
  • .claude/skills/locanara-docs/SKILL.md
  • .claude/skills/locanara-workflows/SKILL.md
  • .claude/skills/rebase-main/SKILL.md
  • .claude/skills/review-pr/SKILL.md
  • .claude/skills/review-self/SKILL.md
  • .codex/scripts/install-skills.sh
  • .codex/skills/locanara-docs/SKILL.md
  • .codex/skills/locanara-docs/agents/openai.yaml
  • .codex/skills/locanara-workflows/SKILL.md
  • .codex/skills/locanara-workflows/agents/openai.yaml
  • .codex/skills/rebase-main/SKILL.md
  • .codex/skills/rebase-main/agents/openai.yaml
  • .codex/skills/review-pr/SKILL.md
  • .codex/skills/review-pr/agents/openai.yaml
  • .codex/skills/review-self/SKILL.md
  • .github/workflows/ci-agent-context.yml
  • .github/workflows/ci-android.yml
  • .github/workflows/ci-expo.yml
  • .github/workflows/ci-flutter.yml
  • .github/workflows/ci-gql.yml
  • .github/workflows/ci-ios.yml
  • .github/workflows/ci-react-native.yml
  • .github/workflows/ci-site.yml
  • .github/workflows/ci-version-mirrors.yml
  • .github/workflows/ci-web.yml
  • .github/workflows/deploy-site.yml
  • .github/workflows/release-android.yml
  • .github/workflows/release-apple.yml
  • .github/workflows/release-expo.yml
  • .github/workflows/release-flutter.yml
  • .github/workflows/release-react-native.yml
  • .github/workflows/release-types.yml
  • .github/workflows/release-web.yml
  • AGENTS.md
  • README.md
  • SKILLS_INDEX.md
  • docs/VERSION_SYNC.md
  • knowledge/_claude-context/context.md
  • libraries/expo-ondevice-ai/android/build.gradle
  • libraries/expo-ondevice-ai/example/package.json
  • libraries/expo-ondevice-ai/package.json
  • libraries/flutter_ondevice_ai/android/build.gradle
  • libraries/flutter_ondevice_ai/example/android/gradle.properties
  • libraries/flutter_ondevice_ai/example/lib/screens/framework_screen.dart
  • libraries/flutter_ondevice_ai/example/lib/widgets/feature_detail/chat_demo.dart
  • libraries/flutter_ondevice_ai/example/lib/widgets/framework_detail/memory_demo.dart
  • libraries/flutter_ondevice_ai/example/lib/widgets/framework_detail/model_demo.dart
  • libraries/flutter_ondevice_ai/example/lib/widgets/framework_detail/session_demo.dart
  • libraries/flutter_ondevice_ai/example/lib/widgets/shared/ai_status_banner.dart
  • libraries/flutter_ondevice_ai/example/lib/widgets/shared/model_selection_sheet.dart
  • libraries/flutter_ondevice_ai/example/pubspec.yaml
  • libraries/flutter_ondevice_ai/pubspec.yaml
  • libraries/react-native-ondevice-ai/android/build.gradle
  • libraries/react-native-ondevice-ai/example/__tests__/App.test.tsx
  • libraries/react-native-ondevice-ai/example/jest.config.js
  • libraries/react-native-ondevice-ai/example/package.json
  • libraries/react-native-ondevice-ai/example/src/components/AppState.tsx
  • libraries/react-native-ondevice-ai/example/src/components/pages/FeatureDetail/ChatDemo/TypingIndicator.tsx
  • libraries/react-native-ondevice-ai/example/src/components/pages/FrameworkDetail/AgentDemo.tsx
  • libraries/react-native-ondevice-ai/example/src/components/pages/FrameworkDetail/ChainDemo.tsx
  • libraries/react-native-ondevice-ai/example/src/components/shared/ModelSelectionSheet.tsx
  • libraries/react-native-ondevice-ai/package.json
  • llms-full.txt
  • llms.txt
  • package.json
  • packages/android/build.gradle.kts
  • packages/android/locanara/build.gradle.kts
  • packages/android/locanara/src/main/kotlin/com/locanara/EngineTypes.kt
  • packages/android/locanara/src/main/kotlin/com/locanara/Types.kt
  • packages/android/locanara/src/main/kotlin/com/locanara/engine/ExecuTorchEngine.kt
  • packages/android/locanara/src/test/kotlin/com/locanara/engine/ExecuTorchEnginePrivacyTests.kt
  • packages/apple/Sources/Locanara.swift
  • packages/apple/Sources/Types.swift
  • packages/apple/Tests/LocanaraTests.swift
  • packages/gql/codegen.ts
  • packages/gql/codegen/parser.test.ts
  • packages/gql/codegen/parser.ts
  • packages/gql/codegen/typescript.ts
  • packages/gql/package.json
  • packages/gql/scripts/sync-to-platforms.mjs
  • packages/gql/src/error.graphql
  • packages/gql/src/type.graphql
  • packages/site/locanara-versions.json
  • packages/site/package.json
  • packages/site/public/llms-full.txt
  • packages/site/public/llms.txt
  • packages/site/public/sitemap.xml
  • packages/site/src/lib/versioning.ts
  • packages/site/src/pages/docs/android-setup.tsx
  • packages/site/src/pages/docs/index.tsx
  • packages/site/src/pages/docs/ios-setup.tsx
  • packages/site/src/pages/docs/release-notes.tsx
  • packages/site/src/pages/docs/tutorials/model-selection.tsx
  • packages/site/src/pages/feature-requests/FeatureRequests.tsx
  • packages/site/src/seo.test.ts
  • packages/web/example/main.ts
  • packages/web/package.json
  • scripts/agent/lint-markdown.ts
  • scripts/agent/package.json
  • scripts/agent/review-workflow-fallback.test.ts
  • scripts/agent/skill-install.test.ts
  • scripts/agent/version-sync.test.ts
  • scripts/sync-versions.d.mts
  • scripts/sync-versions.mjs

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Create stacked PR
  • Commit on current branch
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/refresh-dependencies-workflows

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@hyochan hyochan added 📦 update packages 💨 ci Cloud integration 📖 documentation Improvements or additions to documentation 🤖 android Related to android labels Aug 7, 2026
@hyochan
hyochan merged commit 9b4643b into main Aug 7, 2026
19 checks passed
@hyochan
hyochan deleted the chore/refresh-dependencies-workflows branch August 7, 2026 20:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🤖 android Related to android 💨 ci Cloud integration 📖 documentation Improvements or additions to documentation 📦 update packages

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant