You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Route nodes created from URL strings in config / non-source files #521
Indexing a repo that contains only config files (no source, no HTTP route definitions) creates Route nodes for arbitrary URL-like strings in those files. In a three-file repro I get four Route nodes:
https://app.terraform.io (a Dependabot/Terraform registry URL, from dependabot.yaml)
http://order-service:8080/v2/orders/{id} (an upstream config value, from config.yaml)
curl --fail http://localhost:9000/ || exit 1 (a healthcheck shell command, from compose.yaml)
None of these is a route the service serves. They inflate the route set that get_architecture and cross-repo route matching rely on, which makes that downstream matching noisier.
Implemented in #646 - restricts infra Route extraction to Terraform/HCL files (and bare URLs), so config/compose/dependabot/k8s files no longer emit spurious Routes; structured topic->endpoint bindings are unaffected.
Reproduced in the cumulative bug-reproduction suite in #667 and fixed there: Route extraction now uses deny-wins-by-value so URL strings in config / non-source files (e.g. YAML config URLs) are no longer turned into Route nodes, with dedup for the config-URL case. The reproduction stays as a regression guard.
Fixed on main in #667 (04697c6) via deny-wins-by-value config-URL filtering: an is_upstream_config_key denylist (jwks / registry / healthcheck / upstream / *_service_url / auth) plus route_sr_denied (rejects whitespace values + denylisted keys) and a two-pass dedup, so the bogus Route nodes from config-file URLs are no longer minted. The issue was resolved but left open — closing as completed. Thanks for the detailed three-file repro.
Activity
DeusData commentedon Jun 21, 2026
Hey, thx for reporting, will review as soon as there is time :)
test(repro): -Itests fix + reproductions for #495, #521, #382
mvanhorn commentedon Jun 27, 2026
Implemented in #646 - restricts infra Route extraction to Terraform/HCL files (and bare URLs), so config/compose/dependabot/k8s files no longer emit spurious Routes; structured topic->endpoint bindings are unaffected.
fix(issues): #521 YAML config-URL Route dedup, #523 sequential extern…
fix(test): resolve 18 make-test regressions from the marathon batch
fix(pipeline): deny-wins-by-value for infra Route extraction (#521)
DeusData commentedon Jun 28, 2026
Reproduced in the cumulative bug-reproduction suite in #667 and fixed there: Route extraction now uses deny-wins-by-value so URL strings in config / non-source files (e.g. YAML config URLs) are no longer turned into Route nodes, with dedup for the config-URL case. The reproduction stays as a regression guard.
(Lands when #667 merges.)
fix: 17 reproduce-first issue + new-bug fixes (per-case verified)
DeusData commentedon Jul 1, 2026
Fixed on
mainin #667 (04697c6) via deny-wins-by-value config-URL filtering: anis_upstream_config_keydenylist (jwks / registry / healthcheck / upstream / *_service_url / auth) plusroute_sr_denied(rejects whitespace values + denylisted keys) and a two-pass dedup, so the bogus Route nodes from config-file URLs are no longer minted. The issue was resolved but left open — closing as completed. Thanks for the detailed three-file repro.fix(pipeline): stop CI/tooling config URLs from minting infra Route n…