rubensworks / renovate-overview / 32111232027

100%

claude/renovate-overview-dashboard-rxltbu: 100%

push

github

Fetch over REST, because GraphQL cannot be reached from a browser

The deployed app loaded nothing. Every search failed CORS:

  Access to fetch at 'https://api.github.com/graphql' from origin
  'https://rubensworks.github.io' has been blocked by CORS policy: No
  'Access-Control-Allow-Origin' header is present on the requested resource.

GitHub's REST API supports CORS and its GraphQL API does not:

  GET     /rate_limit  ->  200  Access-Control-Allow-Origin: *
  OPTIONS /graphql     ->  403  (no Access-Control-* headers at all)

So the preflight is refused and no GraphQL call from a page can ever succeed.
The brief asked for GraphQL search as the primary path, but that is
incompatible with having no backend and no proxy — which is why the sibling
project is REST-only. The whole read path moves:

- GET /search/issues, paged, per scope, with advanced_search=true. Search
  returns the body, so a group pull request lists its packages from the first
  paint rather than needing a fetch of its own. Its quota is metered in a
  separate, much smaller bucket, so x-ratelimit-resource decides which of the
  two the footer is reporting.
- Then, six at a time, GET /pulls/{n} for the head sha, branch names and
  mergeability, and check-runs plus the combined commit status for both halves
  of CI. Rows appear from the search and fill in as these land, which is what
  detailLoaded distinguishes: "not asked yet" is not "no checks".
- Review decisions have no bulk REST equivalent, so they are derived from the
  reviews endpoint — latest verdict per reviewer, changes-requested outweighing
  approvals — and only for a row somebody has opened.
- Enabling auto-merge is gone. It exists only as a GraphQL mutation, so it
  cannot work from a browser at all; leaving the button would have meant a
  button that always fails.

One bug the browser found that the tests had not: folding in a detail response
that carries no body re-parsed from the title and threw away the body the
s... (continued)

965 of 965 branches covered (100.0%)

Branch coverage included in aggregate %.

129 of 129 new or added lines in 8 files covered. (100.0%)

1237 of 1237 relevant lines covered (100.0%)

728.83 hits per line