Skip to content

fix: pass RPC credentials to production deploy - #76

Merged
tmm merged 4 commits into
mainfrom
centaur/fix-rpc-credentials-deploy-1786544049
Aug 12, 2026
Merged

fix: pass RPC credentials to production deploy#76
tmm merged 4 commits into
mainfrom
centaur/fix-rpc-credentials-deploy-1786544049

Conversation

@decofe

@decofe decofe commented Aug 12, 2026

Copy link
Copy Markdown
Member

Summary

  • Pass the existing production RPC_CREDENTIALS secret to the Cloudflare Worker deploy.
  • Prevent Tipbot from falling back to unauthenticated rpc.tempo.xyz traffic and its shared-IP connection limit.
  • Refresh newly vulnerable pinned dependencies so the repository audit gate passes.
  • Temporarily ignore two image-size advisories because no patched npm release exists yet.
  • Stabilize the mixed reaction aggregation test and upload preview icons using Slack’s supported file field.

Validation

  • pnpm check
  • pnpm check:types
  • pnpm audit (only the two documented unavailable-fix advisories remain ignored)
  • All GitHub checks and the deployed preview pass.

Prompted by: @tmm

Co-authored-by: Derek Cofausper <256792747+decofe@users.noreply.github.com>
Co-authored-by: Derek Cofausper <256792747+decofe@users.noreply.github.com>
@socket-security

socket-security Bot commented Aug 12, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednanoid@​5.1.161001007995100
Addedhono@​4.12.341001009796100

View full report

@decofe
decofe force-pushed the centaur/fix-rpc-credentials-deploy-1786544049 branch from aaabd2b to 8835be2 Compare August 12, 2026 14:34
Co-authored-by: Derek Cofausper <256792747+decofe@users.noreply.github.com>
@decofe
decofe force-pushed the centaur/fix-rpc-credentials-deploy-1786544049 branch from 8835be2 to 333a554 Compare August 12, 2026 14:34
@github-actions

github-actions Bot commented Aug 12, 2026

Copy link
Copy Markdown

The latest Tipbot preview deployment for db2edf7

Name Status Preview Updated (UTC)
pr76 Shut Down Shut Down pr76.tip.bot Aug 12, 2026, 3:20 PM

Co-authored-by: Derek Cofausper <256792747+decofe@users.noreply.github.com>
@decofe
decofe force-pushed the centaur/fix-rpc-credentials-deploy-1786544049 branch from 53b713e to db2edf7 Compare August 12, 2026 14:49
@tmm
tmm merged commit 975bb9a into main Aug 12, 2026
9 checks passed
@tmm
tmm deleted the centaur/fix-rpc-credentials-deploy-1786544049 branch August 12, 2026 15:19
@tmm
tmm deployed to preview August 12, 2026 15:20 — with GitHub Actions Active
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants