chore: replace .npmrc with pnpm-workspace.yaml

Merge pull request 'deps: update @vitest/coverage-v8 to 4.0.18' (#2 ) from dependencies/update--vitest-coverage-v8 into main
deps: update @vitest/coverage-v8 to 4.0.18
2026-03-02 16:29:16 -08:00 · 2026-02-23 20:48:20 -08:00 · 2026-02-04 08:50:54 -08:00
4 changed files with 87 additions and 106 deletions
@@ -1,25 +0,0 @@
-# Package Manager Configuration
-# Force pnpm usage - breaks npm/yarn intentionally
-node-linker=pnpm
-
-# Security: Disable all lifecycle scripts
-ignore-scripts=true
-enable-pre-post-scripts=false
-
-# Security: Require packages to be 10+ days old before installation
-minimum-release-age=14400
-
-# Security: Verify package integrity hashes
-verify-store-integrity=true
-
-# Security: Enforce strict trust policies
-trust-policy=strict
-
-# Security: Strict peer dependency resolution
-strict-peer-dependencies=true
-
-# Performance: Use symlinks for node_modules
-symlink=true
-
-# Lockfile: Ensure lockfile is not modified during install
-frozen-lockfile=false
@@ -19,10 +19,10 @@
    "@nhcarrigan/typescript-config": "4.0.0",
    "@type-challenges/utils": "0.1.1",
    "@types/node": "24.10.1",
-    "@vitest/coverage-v8": "4.0.10",
+    "@vitest/coverage-v8": "4.0.18",
    "eslint": "9.39.1",
    "tsx": "4.20.6",
    "typescript": "5.9.3",
-    "vitest": "4.0.18"
+    "vitest": "4.0.10"
  }
 }
@@ -10,7 +10,7 @@ importers:
    devDependencies:
      '@nhcarrigan/eslint-config':
        specifier: 5.2.0
-        version: 5.2.0(@typescript-eslint/utils@8.47.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)(playwright@1.56.1)(react@19.2.0)(typescript@5.9.3)(vitest@4.0.18(@types/node@24.10.1)(tsx@4.20.6))
+        version: 5.2.0(@typescript-eslint/utils@8.47.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)(playwright@1.56.1)(react@19.2.0)(typescript@5.9.3)(vitest@4.0.10(@types/node@24.10.1)(tsx@4.20.6))
      '@nhcarrigan/typescript-config':
        specifier: 4.0.0
        version: 4.0.0(typescript@5.9.3)
@@ -21,8 +21,8 @@ importers:
        specifier: 24.10.1
        version: 24.10.1
      '@vitest/coverage-v8':
-        specifier: 4.0.10
-        version: 4.0.10(vitest@4.0.18(@types/node@24.10.1)(tsx@4.20.6))
+        specifier: 4.0.18
+        version: 4.0.18(vitest@4.0.10(@types/node@24.10.1)(tsx@4.20.6))
      eslint:
        specifier: 9.39.1
        version: 9.39.1
@@ -33,8 +33,8 @@ importers:
        specifier: 5.9.3
        version: 5.9.3
      vitest:
-        specifier: 4.0.18
-        version: 4.0.18(@types/node@24.10.1)(tsx@4.20.6)
+        specifier: 4.0.10
+        version: 4.0.10(@types/node@24.10.1)(tsx@4.20.6)

 packages:

@@ -610,11 +610,11 @@ packages:
    resolution: {integrity: sha512-SIV3/6eftCy1bNzCQoPmbWsRLujS8t5iDIZ4spZOBHqrM+yfX2ogg8Tt3PDTAVKw3sSCiUgg30uOAvK2r9zGjQ==}
    engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}

-  '@vitest/coverage-v8@4.0.10':
-    resolution: {integrity: sha512-g+brmtoKa/sAeIohNJnnWhnHtU6GuqqVOSQ4SxDIPcgZWZyhJs5RmF5LpqXs8Kq64lANP+vnbn5JLzhLj/G56g==}
+  '@vitest/coverage-v8@4.0.18':
+    resolution: {integrity: sha512-7i+N2i0+ME+2JFZhfuz7Tg/FqKtilHjGyGvoHYQ6iLV0zahbsJ9sljC9OcFcPDbhYKCet+sG8SsVqlyGvPflZg==}
    peerDependencies:
-      '@vitest/browser': 4.0.10
-      vitest: 4.0.10
+      '@vitest/browser': 4.0.18
+      vitest: 4.0.18
    peerDependenciesMeta:
      '@vitest/browser':
        optional: true
@@ -632,11 +632,11 @@ packages:
      vitest:
        optional: true

-  '@vitest/expect@4.0.18':
-    resolution: {integrity: sha512-8sCWUyckXXYvx4opfzVY03EOiYVxyNrHS5QxX3DAIi5dpJAAkyJezHCP77VMX4HKA2LDT/Jpfo8i2r5BE3GnQQ==}
+  '@vitest/expect@4.0.10':
+    resolution: {integrity: sha512-3QkTX/lK39FBNwARCQRSQr0TP9+ywSdxSX+LgbJ2M1WmveXP72anTbnp2yl5fH+dU6SUmBzNMrDHs80G8G2DZg==}

-  '@vitest/mocker@4.0.18':
-    resolution: {integrity: sha512-HhVd0MDnzzsgevnOWCBj5Otnzobjy5wLBe4EdeeFGv8luMsGcYqDuFRMcttKWZA5vVO8RFjexVovXvAM4JoJDQ==}
+  '@vitest/mocker@4.0.10':
+    resolution: {integrity: sha512-e2OfdexYkjkg8Hh3L9NVEfbwGXq5IZbDovkf30qW2tOh7Rh9sVtmSr2ztEXOFbymNxS4qjzLXUQIvATvN4B+lg==}
    peerDependencies:
      msw: ^2.4.9
      vite: ^6.0.0 || ^7.0.0-0
@@ -652,14 +652,14 @@ packages:
  '@vitest/pretty-format@4.0.18':
    resolution: {integrity: sha512-P24GK3GulZWC5tz87ux0m8OADrQIUVDPIjjj65vBXYG17ZeU3qD7r+MNZ1RNv4l8CGU2vtTRqixrOi9fYk/yKw==}

-  '@vitest/runner@4.0.18':
-    resolution: {integrity: sha512-rpk9y12PGa22Jg6g5M3UVVnTS7+zycIGk9ZNGN+m6tZHKQb7jrP7/77WfZy13Y/EUDd52NDsLRQhYKtv7XfPQw==}
+  '@vitest/runner@4.0.10':
+    resolution: {integrity: sha512-EXU2iSkKvNwtlL8L8doCpkyclw0mc/t4t9SeOnfOFPyqLmQwuceMPA4zJBa6jw0MKsZYbw7kAn+gl7HxrlB8UQ==}

-  '@vitest/snapshot@4.0.18':
-    resolution: {integrity: sha512-PCiV0rcl7jKQjbgYqjtakly6T1uwv/5BQ9SwBLekVg/EaYeQFPiXcgrC2Y7vDMA8dM1SUEAEV82kgSQIlXNMvA==}
+  '@vitest/snapshot@4.0.10':
+    resolution: {integrity: sha512-2N4X2ZZl7kZw0qeGdQ41H0KND96L3qX1RgwuCfy6oUsF2ISGD/HpSbmms+CkIOsQmg2kulwfhJ4CI0asnZlvkg==}

-  '@vitest/spy@4.0.18':
-    resolution: {integrity: sha512-cbQt3PTSD7P2OARdVW3qWER5EGq7PHlvE+QfzSC0lbwO+xnt7+XH06ZzFjFRgzUX//JmpxrCu92VdwvEPlWSNw==}
+  '@vitest/spy@4.0.10':
+    resolution: {integrity: sha512-AsY6sVS8OLb96GV5RoG8B6I35GAbNrC49AO+jNRF9YVGb/g9t+hzNm1H6kD0NDp8tt7VJLs6hb7YMkDXqu03iw==}

  '@vitest/utils@4.0.10':
    resolution: {integrity: sha512-kOuqWnEwZNtQxMKg3WmPK1vmhZu9WcoX69iwWjVz+jvKTsF1emzsv3eoPcDr6ykA3qP2bsCQE7CwqfNtAVzsmg==}
@@ -736,8 +736,8 @@ packages:
    resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
    engines: {node: '>=12'}

-  ast-v8-to-istanbul@0.3.8:
-    resolution: {integrity: sha512-szgSZqUxI5T8mLKvS7WTjF9is+MVbOeLADU73IseOcrqhxr/VAvy6wfoVE39KnKzA7JRhjF5eUagNlHwvZPlKQ==}
+  ast-v8-to-istanbul@0.3.10:
+    resolution: {integrity: sha512-p4K7vMz2ZSk3wN8l5o3y2bJAoZXT3VuJI5OLTATY/01CYWumWvwkUw0SqDBnNq6IiTO3qDa1eSQDibAV8g7XOQ==}

  async-function@1.0.0:
    resolution: {integrity: sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==}
@@ -1364,10 +1364,6 @@ packages:
    resolution: {integrity: sha512-GCfE1mtsHGOELCU8e/Z7YWzpmybrx/+dSTfLrvY8qRmaY6zXTKWn6WQIjaAFw069icm6GVMNkgu0NzI4iPZUNw==}
    engines: {node: '>=10'}

-  istanbul-lib-source-maps@5.0.6:
-    resolution: {integrity: sha512-yg2d+Em4KizZC5niWhQaIomgf5WlL4vOOjZ5xGCmF8SnPE/mDWWXgvRExdcpCgh9lLRRa1/fSYp2ymmbJ1pI+A==}
-    engines: {node: '>=10'}
-
  istanbul-reports@3.2.0:
    resolution: {integrity: sha512-HGYWWS/ehqTV3xN10i23tkPkpH46MLCIMFNCaaKNavAXTF1RkqxawEPtnjnGZ6XKSInBKkiOA5BKS+aZiY3AvA==}
    engines: {node: '>=8'}
@@ -1846,9 +1842,8 @@ packages:
  tinybench@2.9.0:
    resolution: {integrity: sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==}

-  tinyexec@1.0.2:
-    resolution: {integrity: sha512-W/KYk+NFhkmsYpuHq5JykngiOCnxeVL8v8dFnqxSD8qEEdRfXk1SDM6JzNqcERbcGYj9tMrDQBYV9cjgnunFIg==}
-    engines: {node: '>=18'}
+  tinyexec@0.3.2:
+    resolution: {integrity: sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA==}

  tinyglobby@0.2.15:
    resolution: {integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==}
@@ -1981,24 +1976,24 @@ packages:
      yaml:
        optional: true

-  vitest@4.0.18:
-    resolution: {integrity: sha512-hOQuK7h0FGKgBAas7v0mSAsnvrIgAvWmRFjmzpJ7SwFHH3g1k2u37JtYwOwmEKhK6ZO3v9ggDBBm0La1LCK4uQ==}
+  vitest@4.0.10:
+    resolution: {integrity: sha512-2Fqty3MM9CDwOVet/jaQalYlbcjATZwPYGcqpiYQqgQ/dLC7GuHdISKgTYIVF/kaishKxLzleKWWfbSDklyIKg==}
    engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0}
    hasBin: true
    peerDependencies:
      '@edge-runtime/vm': '*'
-      '@opentelemetry/api': ^1.9.0
+      '@types/debug': ^4.1.12
      '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
-      '@vitest/browser-playwright': 4.0.18
-      '@vitest/browser-preview': 4.0.18
-      '@vitest/browser-webdriverio': 4.0.18
-      '@vitest/ui': 4.0.18
+      '@vitest/browser-playwright': 4.0.10
+      '@vitest/browser-preview': 4.0.10
+      '@vitest/browser-webdriverio': 4.0.10
+      '@vitest/ui': 4.0.10
      happy-dom: '*'
      jsdom: '*'
    peerDependenciesMeta:
      '@edge-runtime/vm':
        optional: true
-      '@opentelemetry/api':
+      '@types/debug':
        optional: true
      '@types/node':
        optional: true
@@ -2248,7 +2243,7 @@ snapshots:
      '@jridgewell/resolve-uri': 3.1.2
      '@jridgewell/sourcemap-codec': 1.5.5

-  '@nhcarrigan/eslint-config@5.2.0(@typescript-eslint/utils@8.47.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)(playwright@1.56.1)(react@19.2.0)(typescript@5.9.3)(vitest@4.0.18(@types/node@24.10.1)(tsx@4.20.6))':
+  '@nhcarrigan/eslint-config@5.2.0(@typescript-eslint/utils@8.47.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)(playwright@1.56.1)(react@19.2.0)(typescript@5.9.3)(vitest@4.0.10(@types/node@24.10.1)(tsx@4.20.6))':
    dependencies:
      '@eslint-community/eslint-plugin-eslint-comments': 4.4.1(eslint@9.39.1)
      '@eslint/compat': 1.2.4(eslint@9.39.1)
@@ -2257,7 +2252,7 @@ snapshots:
      '@stylistic/eslint-plugin': 2.12.1(eslint@9.39.1)(typescript@5.9.3)
      '@typescript-eslint/eslint-plugin': 8.19.0(@typescript-eslint/parser@8.19.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)(typescript@5.9.3)
      '@typescript-eslint/parser': 8.19.0(eslint@9.39.1)(typescript@5.9.3)
-      '@vitest/eslint-plugin': 1.1.24(@typescript-eslint/utils@8.47.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)(typescript@5.9.3)(vitest@4.0.18(@types/node@24.10.1)(tsx@4.20.6))
+      '@vitest/eslint-plugin': 1.1.24(@typescript-eslint/utils@8.47.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)(typescript@5.9.3)(vitest@4.0.10(@types/node@24.10.1)(tsx@4.20.6))
      eslint: 9.39.1
      eslint-plugin-deprecation: 3.0.0(eslint@9.39.1)(typescript@5.9.3)
      eslint-plugin-import: 2.31.0(@typescript-eslint/parser@8.19.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)
@@ -2270,7 +2265,7 @@ snapshots:
      playwright: 1.56.1
      react: 19.2.0
      typescript: 5.9.3
-      vitest: 4.0.18(@types/node@24.10.1)(tsx@4.20.6)
+      vitest: 4.0.10(@types/node@24.10.1)(tsx@4.20.6)
    transitivePeerDependencies:
      - '@typescript-eslint/utils'
      - eslint-import-resolver-typescript
@@ -2565,43 +2560,40 @@ snapshots:
      '@typescript-eslint/types': 8.47.0
      eslint-visitor-keys: 4.2.1

-  '@vitest/coverage-v8@4.0.10(vitest@4.0.18(@types/node@24.10.1)(tsx@4.20.6))':
+  '@vitest/coverage-v8@4.0.18(vitest@4.0.10(@types/node@24.10.1)(tsx@4.20.6))':
    dependencies:
      '@bcoe/v8-coverage': 1.0.2
-      '@vitest/utils': 4.0.10
-      ast-v8-to-istanbul: 0.3.8
-      debug: 4.4.3
+      '@vitest/utils': 4.0.18
+      ast-v8-to-istanbul: 0.3.10
      istanbul-lib-coverage: 3.2.2
      istanbul-lib-report: 3.0.1
-      istanbul-lib-source-maps: 5.0.6
      istanbul-reports: 3.2.0
      magicast: 0.5.1
+      obug: 2.1.1
      std-env: 3.10.0
      tinyrainbow: 3.0.3
-      vitest: 4.0.18(@types/node@24.10.1)(tsx@4.20.6)
-    transitivePeerDependencies:
-      - supports-color
+      vitest: 4.0.10(@types/node@24.10.1)(tsx@4.20.6)

-  '@vitest/eslint-plugin@1.1.24(@typescript-eslint/utils@8.47.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)(typescript@5.9.3)(vitest@4.0.18(@types/node@24.10.1)(tsx@4.20.6))':
+  '@vitest/eslint-plugin@1.1.24(@typescript-eslint/utils@8.47.0(eslint@9.39.1)(typescript@5.9.3))(eslint@9.39.1)(typescript@5.9.3)(vitest@4.0.10(@types/node@24.10.1)(tsx@4.20.6))':
    dependencies:
      '@typescript-eslint/utils': 8.47.0(eslint@9.39.1)(typescript@5.9.3)
      eslint: 9.39.1
    optionalDependencies:
      typescript: 5.9.3
-      vitest: 4.0.18(@types/node@24.10.1)(tsx@4.20.6)
+      vitest: 4.0.10(@types/node@24.10.1)(tsx@4.20.6)

-  '@vitest/expect@4.0.18':
+  '@vitest/expect@4.0.10':
    dependencies:
      '@standard-schema/spec': 1.0.0
      '@types/chai': 5.2.3
-      '@vitest/spy': 4.0.18
-      '@vitest/utils': 4.0.18
+      '@vitest/spy': 4.0.10
+      '@vitest/utils': 4.0.10
      chai: 6.2.1
      tinyrainbow: 3.0.3

-  '@vitest/mocker@4.0.18(vite@7.2.2(@types/node@24.10.1)(tsx@4.20.6))':
+  '@vitest/mocker@4.0.10(vite@7.2.2(@types/node@24.10.1)(tsx@4.20.6))':
    dependencies:
-      '@vitest/spy': 4.0.18
+      '@vitest/spy': 4.0.10
      estree-walker: 3.0.3
      magic-string: 0.30.21
    optionalDependencies:
@@ -2615,18 +2607,18 @@ snapshots:
    dependencies:
      tinyrainbow: 3.0.3

-  '@vitest/runner@4.0.18':
+  '@vitest/runner@4.0.10':
    dependencies:
-      '@vitest/utils': 4.0.18
+      '@vitest/utils': 4.0.10
      pathe: 2.0.3

-  '@vitest/snapshot@4.0.18':
+  '@vitest/snapshot@4.0.10':
    dependencies:
-      '@vitest/pretty-format': 4.0.18
+      '@vitest/pretty-format': 4.0.10
      magic-string: 0.30.21
      pathe: 2.0.3

-  '@vitest/spy@4.0.18': {}
+  '@vitest/spy@4.0.10': {}

  '@vitest/utils@4.0.10':
    dependencies:
@@ -2736,7 +2728,7 @@ snapshots:

  assertion-error@2.0.1: {}

-  ast-v8-to-istanbul@0.3.8:
+  ast-v8-to-istanbul@0.3.10:
    dependencies:
      '@jridgewell/trace-mapping': 0.3.31
      estree-walker: 3.0.3
@@ -3538,14 +3530,6 @@ snapshots:
      make-dir: 4.0.0
      supports-color: 7.2.0

-  istanbul-lib-source-maps@5.0.6:
-    dependencies:
-      '@jridgewell/trace-mapping': 0.3.31
-      debug: 4.4.3
-      istanbul-lib-coverage: 3.2.2
-    transitivePeerDependencies:
-      - supports-color
-
  istanbul-reports@3.2.0:
    dependencies:
      html-escaper: 2.0.2
@@ -4084,7 +4068,7 @@ snapshots:

  tinybench@2.9.0: {}

-  tinyexec@1.0.2: {}
+  tinyexec@0.3.2: {}

  tinyglobby@0.2.15:
    dependencies:
@@ -4203,24 +4187,24 @@ snapshots:
      fsevents: 2.3.3
      tsx: 4.20.6

-  vitest@4.0.18(@types/node@24.10.1)(tsx@4.20.6):
+  vitest@4.0.10(@types/node@24.10.1)(tsx@4.20.6):
    dependencies:
-      '@vitest/expect': 4.0.18
-      '@vitest/mocker': 4.0.18(vite@7.2.2(@types/node@24.10.1)(tsx@4.20.6))
-      '@vitest/pretty-format': 4.0.18
-      '@vitest/runner': 4.0.18
-      '@vitest/snapshot': 4.0.18
-      '@vitest/spy': 4.0.18
-      '@vitest/utils': 4.0.18
+      '@vitest/expect': 4.0.10
+      '@vitest/mocker': 4.0.10(vite@7.2.2(@types/node@24.10.1)(tsx@4.20.6))
+      '@vitest/pretty-format': 4.0.10
+      '@vitest/runner': 4.0.10
+      '@vitest/snapshot': 4.0.10
+      '@vitest/spy': 4.0.10
+      '@vitest/utils': 4.0.10
+      debug: 4.4.3
      es-module-lexer: 1.7.0
      expect-type: 1.2.2
      magic-string: 0.30.21
-      obug: 2.1.1
      pathe: 2.0.3
      picomatch: 4.0.3
      std-env: 3.10.0
      tinybench: 2.9.0
-      tinyexec: 1.0.2
+      tinyexec: 0.3.2
      tinyglobby: 0.2.15
      tinyrainbow: 3.0.3
      vite: 7.2.2(@types/node@24.10.1)(tsx@4.20.6)
@@ -4236,6 +4220,7 @@ snapshots:
      - sass-embedded
      - stylus
      - sugarss
+      - supports-color
      - terser
      - tsx
      - yaml
@@ -0,0 +1,21 @@
+# Security
+
+# Do not execute any scripts of installed packages (project scripts still run)
+ignoreDepScripts: true
+# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
+enablePrePostScripts: false
+# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
+minimumReleaseAge: 14400
+# Fail if a package's trust level has decreased compared to previous releases
+trustPolicy: no-downgrade
+# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
+trustPolicyIgnoreAfter: 525960
+# Fail if there are missing or invalid peer dependencies
+strictPeerDependencies: true
+# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
+blockExoticSubdeps: true
+
+# Lockfile
+
+# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
+preferFrozenLockfile: false
Author	SHA1	Message	Date
hikari	fa8ba705f6	chore: replace .npmrc with pnpm-workspace.yaml Node.js CI / CI (push) Successful in 30s Details Security Scan and Upload / Security & DefectDojo Upload (push) Failing after 15m20s Details	2026-03-02 16:29:16 -08:00
minori	687c20b0ff	Merge pull request 'deps: update @vitest/coverage-v8 to 4.0.18' (#2 ) from dependencies/update--vitest-coverage-v8 into main Node.js CI / CI (push) Successful in 33s Details Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m52s Details	2026-02-23 20:48:20 -08:00
minori	26c4b547bd	deps: update @vitest/coverage-v8 to 4.0.18 Node.js CI / CI (pull_request) Successful in 41s Details Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m39s Details	2026-02-04 08:50:54 -08:00