@replayio/replay - npm Package Compare versions

Comparing version 0.21.0 to 0.21.1

metadata/source.js

@@ -152,2 +152,6 @@ "use strict";
         });
+        // override the SHA if passed because it might be the SHA from the github
+        // event rather than GITHUB_SHA. we update this regardless of our ability to
+        // fetch the details because that can fail due to a missing token.
+        process.env.RECORD_REPLAY_METADATA_SOURCE_COMMIT_ID = sha;
         if (resp.status === 200) {
@@ -266,5 +270,7 @@ const json = resp.json;
             if (GITHUB_SHA && GITHUB_REPOSITORY) {
-                yield expandCommitMetadataFromGitHub(GITHUB_REPOSITORY, (_a = getGitHubMergeSHA(process.env)) !== null && _a !== void 0 ? _a : GITHUB_SHA);
-                debug("Merge ID:", getGitHubMergeId(process.env));
-                yield expandMergeMetadataFromGitHub(GITHUB_REPOSITORY, getGitHubMergeId(process.env));
+                const sha = (_a = getGitHubMergeSHA(process.env)) !== null && _a !== void 0 ? _a : GITHUB_SHA;
+                const mergeId = getGitHubMergeId(process.env);
+                debug("GitHub context $0", { mergeId, sha });
+                yield expandCommitMetadataFromGitHub(GITHUB_REPOSITORY, sha);
+                yield expandMergeMetadataFromGitHub(GITHUB_REPOSITORY, mergeId);
             }
@@ -271,0 +277,0 @@ else if (CIRCLECI) {

package.json

 {
   "name": "@replayio/replay",
-  "version": "0.21.0",
+  "version": "0.21.1",
   "description": "CLI tool for uploading and managing recordings",
@@ -45,3 +45,3 @@ "bin": {
   },
-  "gitHead": "1f238538500444cf35816e3b586f16e7e2e822d1",
+  "gitHead": "421de3615ce205eee470ac69657a389057463c0c",
   "devDependencies": {
@@ -48,0 +48,0 @@ "@types/debug": "^4.1.7",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

500735

increased by0.1%

Lines of code

9128

increased by0.07%

No dependency changes