pr-vcptcore-qa-15-04-2026-01c4

[vc-ci]

ci: Automated update vc-module-x-cart from PR undefined undefined

---

Note

Medium Risk
Changes the resolved VirtoCommerce.XCart package and its distribution source, which can impact runtime behavior in deployed environments if the new build differs or the blob package is unavailable.

Overview
Updates backend/packages.json to pull VirtoCommerce.XCart from the AzureBlob feed (using VirtoCommerce.XCart_3.1006.0.zip) instead of GithubReleases (previously versioned there).

Includes minor JSON formatting cleanup and leaves the file without a trailing newline.

^{Reviewed by Cursor Bugbot for commit 1b1cb96. Bugbot is set up for automated code reviews on this repo. Configure here.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 1b1cb96. Configure here.}

[cursor]

XCart blob name missing PR suffix from failed automation

High Severity

The VirtoCommerce.XCart module was moved from GithubReleases (stable version 3.1005.0) to the AzureBlob prerelease source, but its BlobName (VirtoCommerce.XCart_3.1006.0.zip) is missing the -pr-NUMBER-HASH suffix that all other PR-sourced blobs have. The PR description confirms the automation failed: it reads "from PR undefined undefined" where the PR number and commit hash were unresolved. This likely references a non-existent blob, which would break module resolution at deployment time.

 

^{Reviewed by Cursor Bugbot for commit 1b1cb96. Configure here.}

[vc-ci]

Closed by stale branch cleanup workflow