decentraland / transactions-server

70%

master: 70%

LAST BUILD ON BRANCH chore/update

branch: chore/update

CHANGE BRANCH

x

Reset

• chore/update
• chore/add-coveralls
• dependabot/npm_and_yarn/browserslist-4.16.6
• docs/add-ai-files
• docs/default-env
• docs/relay-strategy-todo
• docs/update-readme
• feat/add-coveralls-to-pr
• feat/add-logs
• feat/add-oz-relayer
• feat/add-polygon-amoy-support
• feat/add-release-job
• feat/add-replicas
• feat/add-tracing
• feat/allow-regex-in-cors
• feat/change-gelato-api-endpoints
• feat/check-contract-address
• feat/check-coverall
• feat/check-gas-price
• feat/enable-store-low-sales
• feat/enhance-oz-relayer-metrics
• feat/enhance-relayer-security
• feat/error-codes
• feat/gifting-changes
• feat/implement-gelatto
• feat/improve-transaction-middleware-errors
• feat/min-sale-price
• feat/pg
• feat/pg-component
• feat/reenable-store-sale-check
• feat/refactor-relay-providers
• feat/remove-contract-label-metric
• feat/replace-goerli
• feat/replace-network-mapping
• feat/send-rejected-txn-metrics
• feat/test-coveralls
• feat/thegraph-component
• feat/track-relayer-errors
• feat/update-error-code-when-checking-gas-price
• feat/update-gelato-sdk-dependency
• feat/update-high-congestion-error-code
• feat/update-meta-tx-send-structure
• feat/use-new-ci
• feat/use-node-18-alpine
• feat/whitelist-txn-for-gas-cap
• feature/remove-old-service-infra
• fix/add-gas-error-metrics
• fix/add-tracer-to-logger
• fix/ci-chain-name
• fix/cors-split-missing
• fix/gas-error-metrics
• fix/install
• fix/polygon-mainnet
• fix/relayer
• fix/remove-data-from-metrics
• fix/remove-gelato-feature-flag
• fix/remove-old-infra-code
• fix/small-change
• fix/test-code-lol
• fix/update-dep
• fix/update-http-requests-logger
• fix/update-tests
• master
• refs/tags/1.10.0
• refs/tags/1.10.1
• refs/tags/1.10.2
• refs/tags/1.11.0
• refs/tags/1.12.0
• refs/tags/1.13.0
• refs/tags/1.2.0
• refs/tags/1.2.1
• refs/tags/1.3.0
• refs/tags/1.4.0
• refs/tags/1.4.1
• refs/tags/1.4.2
• refs/tags/1.4.3
• refs/tags/1.5.0
• refs/tags/1.5.1
• refs/tags/1.7.0
• refs/tags/1.8.0
• refs/tags/1.9.0
• refs/tags/1.9.1
• refs/tags/v1
• release
• security/pin-github-actions-sha
• staging

Build # 25742400568

Build Type

Pull #138

github

Committed by cyaiox

Commit Message

fix: address PR review — Docker prod prune, TS to devDeps, ajv ReDoS fix

PR #138 review:

- Dockerfile: replace deprecated `npm ci --only=production` (ignored by
  npm 11 / Node 24) with `npm ci --omit=dev`, so the final image no
  longer silently ships every devDependency.
- package.json: move `typescript` from dependencies to devDependencies.
  It is only needed at compile time; combined with the Docker fix above
  it stops shipping to the production image.
- package.json: bump `ajv` from 8.12.0 to 8.20.0 to pull in the fix for
  GHSA-2g4f-4pwh-qvx6 (ReDoS via the `$data` option). This service
  validates user-supplied transaction payloads with ajv.

Pull Request Pull Request #138: chore: upgrade Node 24 / ESLint 9 / Prettier 3 toolchain and pin non-DCL deps

Coverage Stats

120 of 193 branches covered (62.18%)

Branch coverage included in aggregate %.

30 of 48 new or added lines in 19 files covered. (62.5%)

3 existing lines in 3 files now uncovered.

582 of 809 relevant lines covered (71.94%)

7.07 hits per line