Career Ops UI

v1.69.2 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 1mo Productivity & Wikis

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

airbnb-style ashby ats career-ops claude-code cv

+11 more

express greenhouse-api hh-ru job-application job-search lever local-first no-telemetry resume self-hosted sse

Summary

AI summary

Fixed test‑isolation leak that overwrote the user's real config/profile.yml and data/scan-history.tsv during npm test.

Changes in this release

Type	Severity	Summary	CVE
Bugfix	High	Fixes test‑isolation leak that overwrote user's real config/profile.yml and data/scan-history.tsv during npm test. Fixes test‑isolation leak that overwrote user's real config/profile.yml and data/scan-history.tsv during npm test. Source: llm_adapter@2026-06-13 Confidence: high	—

Full changelog

[1.69.2] — 2026-06-12

fix(test): close a test-isolation leak that let npm test overwrite the user's real config/profile.yml and data/scan-history.tsv. tests/critical-fixes.test.mjs statically imported prompts.mjs at the top of the file; prompts.mjs transitively imports paths.mjs, which resolves PROJECT_ROOT eagerly at module load (PATHS resolves once per process). Because that import ran before the before() hook set CAREER_OPS_ROOT to a temp dir, PATHS pinned the real parent — so the F-008 PUT /api/profile wrote the "Acceptance Test" fixture into the user's real profile on every run (and similar writes escaped the temp root). Fix: load prompts.mjs via dynamic import() inside before(), after the env is set (the server was already loaded that way). New tests/test-root-isolation.test.mjs (2 cases) guards every isolation-needing test against statically importing a paths.mjs carrier (server/index.mjs, prompts.mjs, store.mjs, en-scanner.mjs, ru-scanner.mjs, paths.mjs). No production-code change. Suite 1084 → 1086.