Prepare 0.1.13 inquiry store candidate - #59
Conversation
Constraint: Keep signing profiles and remote build-number increments unchanged. Confidence: high Scope-risk: narrow Tested: Three project identity and EAS profile checks; git diff --check. Not-tested: Inquiry integration and signed binaries await the feature candidate.
Replace the BSD-only file-size command with the already-required Node filesystem API. Test without a usable stat binary and assert exact upload lengths. Constraint: Preserve dry-run safety, signing validation and fixed release file identity. Rejected: OS detection and dual stat implementations | the existing Node dependency supplies one portable call. Confidence: high Scope-risk: narrow Tested: Reproduced CI failure and local regression RED; 146 tests and typecheck pass after fix; ESLint and shell syntax pass. Not-tested: No real APK upload performed.
|
Full CI 34083933160 exposed an existing macOS-only |
Resolve the existing Metro dependency ranges to 0.84.5, which Expo already requires, eliminating image-size and duplicate Metro installations. Constraint: Keep Expo 56, React Native 0.85.3, direct dependencies and package.json unchanged. Rejected: Audit bypass, forced SDK upgrade and persistent overrides | the compatible patch fits existing ranges. Confidence: high Scope-risk: narrow Tested: 146 tests, typecheck, npm dependency tree, Expo alignment, npm audit zero findings, diff check. Not-tested: Updated toolchain exports and signed binaries await candidate CI and build. Directive: Preserve the reviewed lockfile; upstream fix is react/metro commit 06e9e17b83bd63820293c467ab78c83cf2e27d45.
|
Candidate efeee67 also includes a separate lockfile-only security hotfix. CI 34084157086 passed workspace checks/lint and both exports but failed audit on the old Metro 0.84.4 -> image-size path. Upstream Metro 0.84.5 removes the vulnerable parsers and is already Expo 56.0.21's pinned version; all RN 0.85.3 ranges permit it. The final package.json/direct versions/overrides are unchanged. Only Metro-family deduplication and image-size/queue removal remain in the lockfile. Installed-tree audit now reports zero vulnerabilities; 146 tests/typecheck/Expo alignment pass. Full corrected-candidate CI: https://github.com/EVNSolution/clever-driver-app/actions/runs/34085045118 . No current store review was cancelled. |
1 participant
Scope
Version-only release candidate on the reviewed inquiry integration PR #58. Links #53 and EVNSolution/clever-change-control#240.
Verification
No Drive APK publication. Server schema drift hotfix remains a separate server commit/PR from inquiry functionality.