Skip to content

Re-baseline course deltas after web vuln fix - #41

Merged
GeekTrainer merged 3 commits into
mainfrom
geektrainer/rebaseline-after-web-fix
Aug 18, 2026
Merged

Re-baseline course deltas after web vuln fix#41
GeekTrainer merged 3 commits into
mainfrom
geektrainer/rebaseline-after-web-fix

Conversation

@GeekTrainer

Copy link
Copy Markdown
Owner

What & why

Re-baselines the ACC learner-branch delta store onto current main after the services/web transitive npm vuln fix (#40). The base commit must carry the fixed web deps (and the intervening #37 devcontainer + #38 exercises changes), so manifest.base.sha advances and every expectedTreeSha is recomputed.

Net diff is course-build/** only. No app/service files change on main (the learner-branch app state is produced by applying deltas onto the re-derived base).

Changes

  • manifest.base.sha 510b4ffab05db6 — the re-derived tooling-free base = current main app state (.NET 10 + Boot 3.5.16/Java 17 + the sharp/svgo/@babel/core fix), minus course-build/ + workflows.
  • All 6 expectedTreeSha recomputed (they shift because the base app tree changed).
  • module-01: drops the Update postCreateCommand patch — that fix now lives in the base (merged via Fix devcontainer postCreate: correct Copilot CLI package + don't skip dependency install #37, which rewrote the postCreate more thoroughly), so re-applying it would conflict / be a no-op. Keeps the ARCHITECTURE.md + README docs patch (renumbered 0001). Title/patches list updated.
  • modules 02–06: patch content unchanged; only their cumulative expectedTreeSha shift.
  • Base commit ab05db6 is grafted into this branch's history via an -s ours merge so CI (fetch-depth: 0) resolves it; the branch tree is unchanged.

Gate (evidence)

  • build-branches.mjs --check green — M1–M6 all match manifest expectedTreeSha, ancestry linear.
  • selftest.mjs green.

Note

Promotion (moving learner aliases / the acc-base tag) remains a separate gated step; not performed here. Propagation to the published github-samples/contoso-inventory is a follow-up.

acc-course-bot and others added 3 commits August 18, 2026 16:18
… + web vuln fix)

Re-derived tooling-free base after the services/web transitive npm vuln fix
(sharp/svgo/@babel/core). acc-base file-set updated to current main app state.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Re-derives the tooling-free base onto current main (post-#40), which now carries
the services/web transitive npm vuln fix (sharp/svgo/@babel/core) plus the
devcontainer (#37) and exercises.md (#38) updates. manifest.base.sha
510b4ff -> ab05db6; every expectedTreeSha recomputed.

- module-01: drops the 'Update postCreateCommand' patch — that fix now lives in
  the base (merged via #37), so the delta would be a no-op/conflict. Keeps the
  ARCHITECTURE.md + README docs patch (renumbered 0001).
- modules 02-06: patch content unchanged; only their cumulative expectedTreeSha
  shift because the base app tree changed.

build-branches --check green (M1-M6 match), selftest green. Net diff is
course-build/** only. Promotion still required (gated, owner-approved).

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
…hability

Records base commit ab05db6 (manifest.base.sha) as an ancestor so validate-branches
(fetch-depth:0) has the base object for git am. -s ours: branch tree unchanged.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@GeekTrainer
GeekTrainer merged commit 76fe5e2 into main Aug 18, 2026
0 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant