1 Commits

Author SHA1 Message Date
minori 6a6706a609 deps: update @prisma/client to 7.3.0
Node.js CI / CI (pull_request) Failing after 28s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m26s
2026-02-04 08:28:18 -08:00
4 changed files with 40 additions and 29 deletions
+25
View File
@@ -0,0 +1,25 @@
# Package Manager Configuration
# Force pnpm usage - breaks npm/yarn intentionally
node-linker=pnpm
# Security: Disable all lifecycle scripts
ignore-scripts=true
enable-pre-post-scripts=false
# Security: Require packages to be 10+ days old before installation
minimum-release-age=14400
# Security: Verify package integrity hashes
verify-store-integrity=true
# Security: Enforce strict trust policies
trust-policy=strict
# Security: Strict peer dependency resolution
strict-peer-dependencies=true
# Performance: Use symlinks for node_modules
symlink=true
# Lockfile: Ensure lockfile is not modified during install
frozen-lockfile=false
+1 -1
View File
@@ -24,7 +24,7 @@
"dependencies": {
"@nhcarrigan/discord-analytics": "0.0.6",
"@nhcarrigan/logger": "1.1.1",
"@prisma/client": "6.12.0",
"@prisma/client": "7.3.0",
"discord.js": "14.21.0",
"fastify": "5.4.0"
}
+14 -7
View File
@@ -15,8 +15,8 @@ importers:
specifier: 1.1.1
version: 1.1.1
'@prisma/client':
specifier: 6.12.0
version: 6.12.0(prisma@6.12.0(typescript@5.8.3))(typescript@5.8.3)
specifier: 7.3.0
version: 7.3.0(prisma@6.12.0(typescript@5.8.3))(typescript@5.8.3)
discord.js:
specifier: 14.21.0
version: 14.21.0
@@ -381,12 +381,15 @@ packages:
resolution: {integrity: sha512-fdDH1LSGfZdTH2sxdpVMw31BanV28K/Gry0cVFxaNP77neJSkd82mM8ErPNYs9e+0O7SdHBLTDzDgwUuy18RnQ==}
engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
'@prisma/client@6.12.0':
resolution: {integrity: sha512-wn98bJ3Cj6edlF4jjpgXwbnQIo/fQLqqQHPk2POrZPxTlhY3+n90SSIF3LMRVa8VzRFC/Gec3YKJRxRu+AIGVA==}
engines: {node: '>=18.18'}
'@prisma/client-runtime-utils@7.3.0':
resolution: {integrity: sha512-dG/ceD9c+tnXATPk8G+USxxYM9E6UdMTnQeQ+1SZUDxTz7SgQcfxEqafqIQHcjdlcNK/pvmmLfSwAs3s2gYwUw==}
'@prisma/client@7.3.0':
resolution: {integrity: sha512-FXBIxirqQfdC6b6HnNgxGmU7ydCPEPk7maHMOduJJfnTP+MuOGa15X4omjR/zpPUUpm8ef/mEFQjJudOGkXFcQ==}
engines: {node: ^20.19 || ^22.12 || >=24.0}
peerDependencies:
prisma: '*'
typescript: '>=5.1.0'
typescript: '>=5.4.0'
peerDependenciesMeta:
prisma:
optional: true
@@ -2572,7 +2575,11 @@ snapshots:
'@pkgr/core@0.1.2': {}
'@prisma/client@6.12.0(prisma@6.12.0(typescript@5.8.3))(typescript@5.8.3)':
'@prisma/client-runtime-utils@7.3.0': {}
'@prisma/client@7.3.0(prisma@6.12.0(typescript@5.8.3))(typescript@5.8.3)':
dependencies:
'@prisma/client-runtime-utils': 7.3.0
optionalDependencies:
prisma: 6.12.0(typescript@5.8.3)
typescript: 5.8.3
-21
View File
@@ -1,21 +0,0 @@
# Security
# Do not execute any scripts of installed packages (project scripts still run)
ignoreDepScripts: true
# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
enablePrePostScripts: false
# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
minimumReleaseAge: 14400
# Fail if a package's trust level has decreased compared to previous releases
trustPolicy: no-downgrade
# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
trustPolicyIgnoreAfter: 525960
# Fail if there are missing or invalid peer dependencies
strictPeerDependencies: true
# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
blockExoticSubdeps: true
# Lockfile
# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
preferFrozenLockfile: false