Skip to content

Add date range filtering and fix test infrastructure #25

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
maxgolov wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Add date range filtering and fix test infrastructure #25

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3100d7f
Add date range filtering, fix test infrastructure
maxgolov Feb 12, 2026
91395bc
fix: resolve CodeQL type confusion through parameter tampering
maxgolov Feb 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
62 changes: 35 additions & 27 deletions package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

12 changes: 6 additions & 6 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,25 +42,25 @@
"@opentelemetry/instrumentation-express": "^0.59.0",
"@opentelemetry/instrumentation-http": "^0.211.0",
"@opentelemetry/instrumentation-winston": "^0.55.0",
"@opentelemetry/resources": "^2.2.0",
"@opentelemetry/resources": "^2.5.0",
"@opentelemetry/sdk-logs": "^0.211.0",
"@opentelemetry/sdk-metrics": "^2.2.0",
"@opentelemetry/sdk-metrics": "^2.5.0",
"@opentelemetry/sdk-node": "^0.211.0",
"@opentelemetry/sdk-trace-base": "^2.2.0",
"@opentelemetry/sdk-trace-node": "^2.2.0",
"@opentelemetry/sdk-trace-base": "^2.5.0",
"@opentelemetry/sdk-trace-node": "^2.5.0",
"@opentelemetry/semantic-conventions": "^1.39.0",
"cors": "^2.8.6",
"express": "^5.0.1",
"winston": "^3.18.3",
"zod": "^4.3.6"
},
"devDependencies": {
"@ai-sdk/azure": "^3.0.27",
"@ai-sdk/azure": "^3.0.28",
"@azure/identity": "^4.13.0",
"@types/cors": "^2.8.17",
"@types/express": "^5.0.0",
"@types/node": "^25.2.3",
"ai": "^6.0.79",
"ai": "^6.0.81",
Comment on lines +45 to +63
Copy link

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR description lists incorrect dependency version updates. The description claims updates to @opentelemetry/api (1.9.0 → 2.0.0), @opentelemetry/sdk-node (0.57.2 → 0.200.0), @opentelemetry/auto-instrumentations-node (0.57.2 → 0.200.0), @ai-sdk/azure (1.3.22 → 2.0.6), and ai (4.3.15 → 4.3.16).

However, the actual changes are:

  • @opentelemetry/resources: ^2.2.0 → ^2.5.0
  • @opentelemetry/sdk-metrics: ^2.2.0 → ^2.5.0
  • @opentelemetry/sdk-trace-base: ^2.2.0 → ^2.5.0
  • @opentelemetry/sdk-trace-node: ^2.2.0 → ^2.5.0
  • @ai-sdk/azure: ^3.0.27 → ^3.0.28
  • ai: ^6.0.79 → ^6.0.81

The PR description should be updated to reflect the actual dependency changes made.

Copilot uses AI. Check for mistakes.
"dotenv": "^17.2.4",
"typescript": "^5.7.2",
"vitest": "^4.0.18"
Expand Down
34 changes: 32 additions & 2 deletions src/datasources/local-repository.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -301,6 +301,36 @@
};
}

/**
* Parse date filter string and return start/end dates
* Supports: "2026-01-27" (single day) or "2026-01-01..2026-01-31" (range)
*/
private parseDateFilter(dateStr: string): { start: string; end: string } {
if (dateStr.includes('..')) {
Comment thread Fixed
const [start, end] = dateStr.split('..');
// End date: include full day by using next day midnight
const endDate = new Date(end + 'T00:00:00Z');
endDate.setUTCDate(endDate.getUTCDate() + 1);
return { start: start + 'T00:00:00Z', end: endDate.toISOString() };
Comment on lines +312 to +316
Copy link

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The parseDateFilter method doesn't validate that the start date comes before the end date in a range filter. If a user provides "2026-12-31..2026-01-01", the filter will produce an empty result set without any error message, which could confuse users.

Add validation to ensure start is less than or equal to end when parsing a date range, and throw a descriptive error if the range is invalid.

Suggested change
const [start, end] = str.split('..');
// End date: include full day by using next day midnight
const endDate = new Date(end + 'T00:00:00Z');
endDate.setUTCDate(endDate.getUTCDate() + 1);
return { start: start + 'T00:00:00Z', end: endDate.toISOString() };
const [startRaw, endRaw] = str.split('..');
const startDate = new Date(startRaw + 'T00:00:00Z');
const endDate = new Date(endRaw + 'T00:00:00Z');
if (startDate > endDate) {
throw new Error(
`Invalid date range "${str}": start date must be less than or equal to end date.`,
);
}
// End date: include full day by using next day midnight (end is exclusive)
endDate.setUTCDate(endDate.getUTCDate() + 1);
return { start: startDate.toISOString(), end: endDate.toISOString() };

Copilot uses AI. Check for mistakes.
}
// Single date: filter for that specific day
const startDate = new Date(dateStr + 'T00:00:00Z');
const endDate = new Date(dateStr + 'T00:00:00Z');
endDate.setUTCDate(endDate.getUTCDate() + 1);
return { start: startDate.toISOString(), end: endDate.toISOString() };
}

/**
* Filter advisories by date range
*/
private filterByDateRange(advisories: Advisory[], field: 'published_at' | 'updated_at', dateStr: string): Advisory[] {
const { start, end } = this.parseDateFilter(dateStr);
return advisories.filter(a => {
const date = a[field];
return date >= start && date < end;
});
}
Comment on lines +304 to +334
Copy link

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new parseDateFilter and filterByDateRange methods lack unit test coverage. While there are E2E tests that exercise these methods indirectly, there are no unit tests that validate edge cases such as invalid dates, reversed date ranges, malformed input, or boundary conditions.

Consider adding unit tests for the LocalRepositoryDataSource class to cover these critical date parsing scenarios, following the pattern established in test/unit/refresh-database.test.ts.

Copilot uses AI. Check for mistakes.

/**
* List advisories with optional filtering
*/
Expand Down Expand Up @@ -349,11 +379,11 @@
}

if (options.published) {
results = results.filter(a => a.published_at >= options.published!);
results = this.filterByDateRange(results, 'published_at', options.published);
}

if (options.updated) {
results = results.filter(a => a.updated_at >= options.updated!);
results = this.filterByDateRange(results, 'updated_at', options.updated);
}

// Sort results
Expand Down
Loading