Skip to content

feat: implement issue #429 — SonarCloud: miscellaneous findings#430

Merged
don-petry merged 3 commits into
mainfrom
dev-lead/issue-429-20260707-1917
Jul 8, 2026
Merged

feat: implement issue #429 — SonarCloud: miscellaneous findings#430
don-petry merged 3 commits into
mainfrom
dev-lead/issue-429-20260707-1917

Conversation

@don-petry

Copy link
Copy Markdown
Collaborator

Closes #429

Implemented by dev-lead agent. Please review.

Copilot AI review requested due to automatic review settings July 7, 2026 19:23
@don-petry
don-petry requested a review from a team as a code owner July 7, 2026 19:24
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

@coderabbitai

coderabbitai Bot commented Jul 7, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@don-petry, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 47 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 5675b288-35ca-4f00-972c-95308c59bb39

📥 Commits

Reviewing files that changed from the base of the PR and between f04efc7 and 7e4096f.

📒 Files selected for processing (4)
  • deploy/index.html
  • deploy/tests/ui.spec.js
  • gas-installer/Index.html
  • gas-installer/tests/ui.spec.js
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dev-lead/issue-429-20260707-1917

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@don-petry

Copy link
Copy Markdown
Collaborator Author

Dev-Lead — review-changes (no-changes)

No changes were needed for this PR.

@don-petry
don-petry enabled auto-merge (squash) July 7, 2026 19:25

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the text color of the .status-info class in both deploy/index.html and gas-installer/Index.html to improve contrast, and adds corresponding UI tests to verify compliance with WCAG AA contrast guidelines. The reviewer recommended adding a fallback empty array to the regex match in the test helper functions to prevent potential TypeError exceptions if the color string parsing fails.

Comment thread deploy/tests/ui.spec.js Outdated
Comment thread gas-installer/tests/ui.spec.js Outdated
@don-petry
don-petry disabled auto-merge July 7, 2026 19:26

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Addresses SonarCloud rule css:S7924 by improving the status-info banner text contrast in both the deploy UI and the GAS installer UI, and adds Playwright coverage to prevent regressions.

Changes:

  • Darken .status-info text color from #1a73e8 to #1765cc in both deploy/index.html and gas-installer/Index.html.
  • Add Playwright tests that compute and assert WCAG AA contrast ratio (>= 4.5:1) for .status-msg.status-info in both UIs.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File Description
gas-installer/Index.html Updates .status-info foreground color to meet contrast requirements.
gas-installer/tests/ui.spec.js Adds WCAG AA contrast assertion for the status-info banner styling.
deploy/index.html Updates .status-info foreground color to meet contrast requirements.
deploy/tests/ui.spec.js Adds WCAG AA contrast assertion for the status-info banner styling.

Comment thread gas-installer/tests/ui.spec.js Outdated
Comment thread deploy/tests/ui.spec.js Outdated
@don-petry

Copy link
Copy Markdown
Collaborator Author

Dev-Lead — fix-reviews (applied)

Changes committed and pushed.

@don-petry
don-petry enabled auto-merge (squash) July 7, 2026 19:27
@don-petry
don-petry disabled auto-merge July 7, 2026 19:28
@don-petry

Copy link
Copy Markdown
Collaborator Author

Dev-Lead — fix-bot-comment (applied)

Changes committed and pushed.

@don-petry
don-petry enabled auto-merge (squash) July 7, 2026 19:31
@don-petry
don-petry disabled auto-merge July 7, 2026 19:32
@sonarqubecloud

sonarqubecloud Bot commented Jul 7, 2026

Copy link
Copy Markdown

@don-petry

Copy link
Copy Markdown
Collaborator Author

Dev-Lead — review-changes (no-changes)

No changes were needed for this PR.

@donpetry-bot donpetry-bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated review — APPROVED ✓

Risk: LOW
Reviewed commit: 7e4096ff1271c55133da5a6705970fe17c26a4bb
Review mode: triage-approved (single reviewer)

Summary

Darkens .status-info text color from #1a73e8 to #1765cc in deploy/index.html and gas-installer/Index.html to satisfy SonarCloud css:S7924 (WCAG AA contrast), and adds Playwright tests asserting a >= 4.5:1 contrast ratio in both UIs. The new color yields ~4.86:1 against the #e8f0fe background (verified independently). Triage assessment confirmed correct.

Linked issue analysis

Closes #429 (SonarCloud: miscellaneous findings — 2x css:S7924 contrast violations in deploy/index.html and gas-installer/Index.html). Both flagged files are fixed with a real color change (no NOSONAR suppressions), and regression tests are added. SonarCloud quality gate passed on this PR. Substantively addressed.

Findings

  • No security-sensitive changes: CSS color value + test-only additions; risk LOW.
  • All 4 bot review threads (gemini-code-assist, Copilot — null-guard on regex match) are resolved; the (s || '').match(...) || [] fallback is present at HEAD.
  • Minor non-blocking nit: if the color format were ever unparseable, channels() returns [] and the contrast computes to NaN, which fails the assertion (acceptable for a test).
  • Secret scanning MCP tool unavailable in this environment; gitleaks CI check passed instead.

CI status

All checks green: build-and-test, Node.js Tests, Playwright UI Tests, Coverage, CodeQL (actions/js-ts/python), gitleaks secret scan, AgentShield, dependency audit, SonarCloud quality gate PASSED. Dependabot/ecosystem-specific audits skipped (not applicable).


Reviewed automatically by the PR-review agent (single-reviewer mode: fable 5). Reply if you need a human review.

@don-petry
don-petry merged commit c628592 into main Jul 8, 2026
26 checks passed
@don-petry
don-petry deleted the dev-lead/issue-429-20260707-1917 branch July 8, 2026 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SonarCloud: miscellaneous findings

3 participants