GitNexus/.github/workflows
Gergő Magyar e1e2464960
feat(kotlin): bind Spring config consumers on Kotlin sources (#3126)
* feat(kotlin): bind Spring @Value and ConfigurationProperties consumers

Kotlin sources were skipping the Java-only config-binding attach path, so mixed JVM apps under-reported blast radius for Kotlin placeholders. Capture from the live AST, serialize on the existing side channel, and reuse the shared binder. (U1-U4)

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(review): require exact Spring annotation FQNs and skip raw-string escapes

Reject similarly named third-party imports and leave Kotlin triple-quoted bodies undecoded so capture stays fail-closed.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(kotlin): use only grammar-valid Kotlin string and class-name nodes

The coverage shard failed the #1920 literal gate on invented string node types and a Java-style name field.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(kotlin): fail closed on non-literal prefixes and persist unresolved config markers

Reject constant and boolean @ConfigurationProperties arguments, scope nested Value shadows to their owner, and rewrite drifted consumer files when a config key is deleted.

Co-authored-by: Cursor <cursoragent@cursor.com>

* test(kotlin): add config-consumer capture benchmark and fix JVM feature stamps

The Kotlin capture path had no performance or behavior guard: a file-wide
lexical shadow regression silently dropped two of every three facts. The new
bench arm fingerprints @Value / @ConfigurationProperties facts from an
explicit-import control against a wildcard-import corpus whose files each
declare a sibling nested `Value` type, so parity between the arms is the
regression gate, and CI runs it with scaling + widening budgets.

Broadening spring.config-bindings to .kt also means Kotlin-only JVM repos now
stamp the feature, which the two exact-map orchestration expectations still
denied.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(kotlin): let an explicit import shadow the Spring wildcard import

importedAs accepted a star import of the Spring package even when the same
simple name was explicitly bound to another type, so a file importing
com.example.Value alongside the Spring annotation package emitted a false
@Value consumer fact. Kotlin resolves the explicit import first, so the
wildcard branch now only applies when the name is otherwise unbound.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Gergo Magyar <gergomagyar0@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-01 10:32:09 +00:00
..
build-tree-sitter-prebuilds.yml chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 (#3005) 2026-08-24 09:46:14 +01:00
ci-devcontainer.yml chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 2026-07-22 20:18:29 +00:00
ci-e2e.yml chore(deps): bump dorny/paths-filter from 4.0.2 to 4.0.3 (#2948) 2026-08-13 06:21:54 +01:00
ci-quality.yml chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 2026-07-22 20:18:29 +00:00
ci-report.yml fix(ci): stop CI Report dying silently when the tests job fails (#2728) 2026-08-01 18:31:49 +01:00
ci-tests.yml feat(kotlin): bind Spring config consumers on Kotlin sources (#3126) 2026-09-01 10:32:09 +00:00
ci.yml refactor(ingestion): delete legacy call-resolution DAG + heritage processor (RING4-1, #942) (#2023) 2026-06-04 11:07:37 +01:00
claude.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
codeql.yml fix(server,web): honor the grep tool contract — real regex, fileFilter, caseSensitive (#3109) 2026-08-31 20:43:28 +01:00
commit-fork-prebuilds.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
dependency-review.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
docker.yml chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#3057) 2026-08-27 08:43:33 +01:00
gitleaks.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
gitnexus-review-agent.yml fix(ci): stop the placeholder review, verify citations, repair once (#2733) 2026-07-28 18:51:01 +01:00
gitnexus-skill-evolution.yml chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 2026-07-22 20:18:29 +00:00
grammar-update-monitor.yml chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 2026-07-22 20:18:29 +00:00
impact-pdg-mutation-report.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
pr-autofix-apply.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
pr-autofix-publish.yml feat(autofix): replace inline reviewdog with /autofix ChatOps button (#1458) 2026-05-09 16:32:38 +01:00
pr-autofix.yml chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 2026-07-22 20:18:29 +00:00
pr-description-check.yml chore(deps): bump actions/github-script from 7.0.1 to 9.0.0 2026-04-15 20:17:08 +00:00
pr-labeler.yml chore(deps): bump release-drafter/release-drafter from 7.6.0 to 7.7.0 (#2853) 2026-08-06 08:18:01 +01:00
publish.yml Merge branch 'main' into dependabot/github_actions/softprops/action-gh-release-3.0.2 2026-07-23 09:23:26 +01:00
scorecard.yml chore(deps): bump the codeql-action group with 3 updates (#3056) 2026-08-27 13:29:52 +01:00
skill-sync.yml chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 2026-07-22 20:18:29 +00:00
tree-sitter-upgrade-readiness.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
triage-sweep.yml chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 (#2757) 2026-07-31 13:05:18 +01:00
trivy.yml chore(deps): bump the codeql-action group with 3 updates (#3056) 2026-08-27 13:29:52 +01:00
workflow-lint.yml chore(deps): bump the codeql-action group with 3 updates (#3056) 2026-08-27 13:29:52 +01:00