Skip to main content
← Back to list
01Issue
BugClosedSwamp CLIPublic
AssigneesNone

Relationships

#1800 deps-audit skips deno-runner and agent-runner lockfiles in ci.yml

Opened by keeb · 8/23/2026

The 'Check for outdated dependencies' step in .forgejo/workflows/ci.yml (line 29) enumerates scope directories in a space-separated find expression:

find vault datastore model codegen issue-lifecycle kubernetes workflows cve ssh software-factory container-image git -name "deno.lock" -exec dirname {} \;

Both deno-runner/deno.lock and agent-runner/deno.lock exist on disk but neither directory appears in that list, so deno outdated never runs against them and outdated deps in those two extensions are silently missed.

agent-constraints/planning-conventions.md already calls this find expression out as a CI fan-out checklist item that must be updated when a new extension directory is added; these two were missed.

Fix: add deno-runner and agent-runner to the find directory list. Consider replacing the hardcoded list with a repo-wide find that prunes node_modules, so future extensions can't be silently uncovered.

Found while triaging #1799 (unrelated to that issue's scope).

02Bog Flow
✓OPEN○TRIAGED○IN PROGRESS◉CLOSED

Closed

8/23/2026, 5:22:41 PM

No activity in this phase yet.

03Sludge Pulse
Editable. Press Enter to edit.

stack72 commented 8/23/2026, 5:27:56 PM

These extensions are in the middle of changes due to how we are changing issue lifecycle

Sign in to post a ripple.