7 Commits

Author SHA1 Message Date
hikari 602babb4ca chore: replace .npmrc with pnpm-workspace.yaml
Node.js CI / CI (push) Successful in 30s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m21s
2026-03-02 16:27:31 -08:00
minori a9d51d40ce Merge pull request 'deps: update @atproto/api to 0.18.21' (#13) from dependencies/update--atproto-api into main
Node.js CI / CI (push) Successful in 28s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m54s
2026-02-25 07:01:29 -08:00
minori 8478aa3e2f deps: update @atproto/api to 0.18.21
Node.js CI / CI (pull_request) Successful in 30s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m23s
2026-02-24 07:01:39 -08:00
minori f97bb33c51 Merge pull request 'deps: update @atproto/api to 0.18.17' (#3) from dependencies/update--atproto-api into main
Node.js CI / CI (push) Successful in 30s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m24s
2026-02-23 20:44:49 -08:00
minori 201408b97c deps: update @atproto/api to 0.18.20
Node.js CI / CI (pull_request) Successful in 25s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m25s
2026-02-10 07:02:43 -08:00
minori 91b2e4c33e deps: update @atproto/api to 0.18.18
Node.js CI / CI (pull_request) Successful in 46s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 2m20s
2026-02-08 07:07:48 -08:00
minori ae045ef881 deps: update @atproto/api to 0.18.17
Node.js CI / CI (pull_request) Successful in 32s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m32s
2026-02-04 08:23:40 -08:00
4 changed files with 114 additions and 93 deletions
-25
View File
@@ -1,25 +0,0 @@
# Package Manager Configuration
# Force pnpm usage - breaks npm/yarn intentionally
node-linker=pnpm
# Security: Disable all lifecycle scripts
ignore-scripts=true
enable-pre-post-scripts=false
# Security: Require packages to be 10+ days old before installation
minimum-release-age=14400
# Security: Verify package integrity hashes
verify-store-integrity=true
# Security: Enforce strict trust policies
trust-policy=strict
# Security: Strict peer dependency resolution
strict-peer-dependencies=true
# Performance: Use symlinks for node_modules
symlink=true
# Lockfile: Ensure lockfile is not modified during install
frozen-lockfile=false
+2 -2
View File
@@ -17,13 +17,13 @@
"devDependencies": {
"@nhcarrigan/eslint-config": "5.2.0",
"@nhcarrigan/typescript-config": "4.0.0",
"@types/node": "25.2.3",
"@types/node": "22.13.9",
"@types/node-schedule": "2.1.7",
"eslint": "9.21.0",
"typescript": "5.8.2"
},
"dependencies": {
"@atproto/api": "0.14.8",
"@atproto/api": "0.18.21",
"@nhcarrigan/logger": "1.0.0",
"@slack/bolt": "4.2.1",
"@slack/oauth": "3.0.2",
+91 -66
View File
@@ -9,8 +9,8 @@ importers:
.:
dependencies:
'@atproto/api':
specifier: 0.14.8
version: 0.14.8
specifier: 0.18.21
version: 0.18.21
'@nhcarrigan/logger':
specifier: 1.0.0
version: 1.0.0
@@ -35,13 +35,13 @@ importers:
devDependencies:
'@nhcarrigan/eslint-config':
specifier: 5.2.0
version: 5.2.0(@typescript-eslint/utils@8.26.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(playwright@1.51.0)(react@19.0.0)(typescript@5.8.2)(vitest@3.0.8(@types/node@25.2.3))
version: 5.2.0(@typescript-eslint/utils@8.26.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(playwright@1.51.0)(react@19.0.0)(typescript@5.8.2)(vitest@3.0.8(@types/node@22.13.9))
'@nhcarrigan/typescript-config':
specifier: 4.0.0
version: 4.0.0(typescript@5.8.2)
'@types/node':
specifier: 25.2.3
version: 25.2.3
specifier: 22.13.9
version: 22.13.9
'@types/node-schedule':
specifier: 2.1.7
version: 2.1.7
@@ -54,20 +54,26 @@ importers:
packages:
'@atproto/api@0.14.8':
resolution: {integrity: sha512-i3jriHPLOqR0hRWKTte+3pRN1LEH+pa23CoNXEycYSa69K4nBVp6/qxUZ+UfOE5H/mkGXabI59P1xL8tSFCSXA==}
'@atproto/api@0.18.21':
resolution: {integrity: sha512-s35MIJerGT/pKe2xJtKKswqlIr/ola2r2iURBKBL0Mk1OKe6jP4YvTMh1N2d2PEANFzNNTbKoDaLfJPo2Uvc/w==}
'@atproto/common-web@0.4.0':
resolution: {integrity: sha512-ZYL0P9myHybNgwh/hBY0HaBzqiLR1B5/ie5bJpLQAg0whRzNA28t8/nU2vh99tbsWcAF0LOD29M8++LyENJLNQ==}
'@atproto/common-web@0.4.16':
resolution: {integrity: sha512-Ufvaff5JgxUyUyTAG0/3o7ltpy3lnZ1DvLjyAnvAf+hHfiK7OMQg+8byr+orN+KP9MtIQaRTsCgYPX+PxMKUoA==}
'@atproto/lexicon@0.4.8':
resolution: {integrity: sha512-NPhu4MNHqft4muvHvcU0BrkWoEpTI+OmbQzvZzzRpw54MW3PfrQ4TPEpAfPOrWugPB9y4mD+l8OMN1c9eOGWMQ==}
'@atproto/lex-data@0.0.11':
resolution: {integrity: sha512-4+KTtHdqwlhiTKA7D4SACea4jprsNpCQsNALW09wsZ6IHhCDGO5tr1cmV+QnLYe3G3mu1E1yXHXbPUHrUUDT/A==}
'@atproto/syntax@0.3.4':
resolution: {integrity: sha512-8CNmi5DipOLaVeSMPggMe7FCksVag0aO6XZy9WflbduTKM4dFZVCs4686UeMLfGRXX+X966XgwECHoLYrovMMg==}
'@atproto/lex-json@0.0.11':
resolution: {integrity: sha512-2IExAoQ4KsR5fyPa1JjIvtR316PvdgRH/l3BVGLBd3cSxM3m5MftIv1B6qZ9HjNiK60SgkWp0mi9574bTNDhBQ==}
'@atproto/xrpc@0.6.10':
resolution: {integrity: sha512-ClMiO+oAl3KrFe7sdo8Wzw81yV7EpEradZLJnYilPq4s7uF0by1jHGI/LarHBKHnE5RpaFpBC/5XD/ZzgmvAeg==}
'@atproto/lexicon@0.6.1':
resolution: {integrity: sha512-/vI1kVlY50Si+5MXpvOucelnYwb0UJ6Qto5mCp+7Q5C+Jtp+SoSykAPVvjVtTnQUH2vrKOFOwpb3C375vSKzXw==}
'@atproto/syntax@0.4.3':
resolution: {integrity: sha512-YoZUz40YAJr5nPwvCDWgodEOlt5IftZqPJvA0JDWjuZKD8yXddTwSzXSaKQAzGOpuM+/A3uXRtPzJJqlScc+iA==}
'@atproto/xrpc@0.7.7':
resolution: {integrity: sha512-K1ZyO/BU8JNtXX5dmPp7b5UrkLMMqpsIa/Lrj5D3Su+j1Xwq1m6QJ2XJ1AgjEjkI1v4Muzm7klianLE6XGxtmA==}
'@babel/code-frame@7.26.2':
resolution: {integrity: sha512-RJlIHRueQgwWitWgF8OdFYGZX328Ax5BCemNGlqHfplnRT9ESi8JkFlvaVYbS+UubVY6dpv87Fs2u5M29iNFVQ==}
@@ -580,8 +586,8 @@ packages:
'@types/node-schedule@2.1.7':
resolution: {integrity: sha512-G7Z3R9H7r3TowoH6D2pkzUHPhcJrDF4Jz1JOQ80AX0K2DWTHoN9VC94XzFAPNMdbW9TBzMZ3LjpFi7RYdbxtXA==}
'@types/node@25.2.3':
resolution: {integrity: sha512-m0jEgYlYz+mDJZ2+F4v8D1AyQb+QzsNqRuI7xg1VQX/KlKS0qT9r1Mo16yo5F/MtifXFgaofIFsdFMox2SxIbQ==}
'@types/node@22.13.9':
resolution: {integrity: sha512-acBjXdRJ3A6Pb3tqnw9HZmyR3Fiol3aGxRCK1x3d+6CDAMjl7I649wpSd+yNURCjbOUGu9tqtLKnTGxmK6CyGw==}
'@types/normalize-package-data@2.4.4':
resolution: {integrity: sha512-37i+OaWTh9qeK4LSHPsyRC7NahnGotNuZvjLSgcPzblpHB3rrCJxAOgI5gCdKm7coonsaX1Of0ILiTcnZjbfxA==}
@@ -2451,13 +2457,16 @@ packages:
resolution: {integrity: sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw==}
engines: {node: '>= 0.4'}
undici-types@7.16.0:
resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
undici-types@6.20.0:
resolution: {integrity: sha512-Ny6QZ2Nju20vw1SRHe3d9jVu6gJ+4e3+MMpqu7pqE5HT6WsTSlce++GQmK5UXS8mzV8DSYHrQH+Xrf2jVcuKNg==}
undici@6.21.1:
resolution: {integrity: sha512-q/1rj5D0/zayJB2FraXdaWxbhWiNKDvu8naDT2dl1yTlvJp4BLtOcp2a5BvgGNQpYYJzau7tf1WgKv3b+7mqpQ==}
engines: {node: '>=18.17'}
unicode-segmenter@0.14.5:
resolution: {integrity: sha512-jHGmj2LUuqDcX3hqY12Ql+uhUTn8huuxNZGq7GvtF6bSybzH3aFgedYu/KTzQStEgt1Ra2F3HxadNXsNjb3m3g==}
unpipe@1.0.0:
resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
engines: {node: '>= 0.8'}
@@ -2609,37 +2618,51 @@ packages:
snapshots:
'@atproto/api@0.14.8':
'@atproto/api@0.18.21':
dependencies:
'@atproto/common-web': 0.4.0
'@atproto/lexicon': 0.4.8
'@atproto/syntax': 0.3.4
'@atproto/xrpc': 0.6.10
'@atproto/common-web': 0.4.16
'@atproto/lexicon': 0.6.1
'@atproto/syntax': 0.4.3
'@atproto/xrpc': 0.7.7
await-lock: 2.2.2
multiformats: 9.9.0
tlds: 1.256.0
zod: 3.24.2
'@atproto/common-web@0.4.0':
'@atproto/common-web@0.4.16':
dependencies:
graphemer: 1.4.0
multiformats: 9.9.0
uint8arrays: 3.0.0
'@atproto/lex-data': 0.0.11
'@atproto/lex-json': 0.0.11
'@atproto/syntax': 0.4.3
zod: 3.24.2
'@atproto/lexicon@0.4.8':
'@atproto/lex-data@0.0.11':
dependencies:
'@atproto/common-web': 0.4.0
'@atproto/syntax': 0.3.4
multiformats: 9.9.0
tslib: 2.8.1
uint8arrays: 3.0.0
unicode-segmenter: 0.14.5
'@atproto/lex-json@0.0.11':
dependencies:
'@atproto/lex-data': 0.0.11
tslib: 2.8.1
'@atproto/lexicon@0.6.1':
dependencies:
'@atproto/common-web': 0.4.16
'@atproto/syntax': 0.4.3
iso-datestring-validator: 2.2.2
multiformats: 9.9.0
zod: 3.24.2
'@atproto/syntax@0.3.4': {}
'@atproto/xrpc@0.6.10':
'@atproto/syntax@0.4.3':
dependencies:
'@atproto/lexicon': 0.4.8
tslib: 2.8.1
'@atproto/xrpc@0.7.7':
dependencies:
'@atproto/lexicon': 0.6.1
zod: 3.24.2
'@babel/code-frame@7.26.2':
@@ -2884,7 +2907,7 @@ snapshots:
'@jridgewell/sourcemap-codec@1.5.0': {}
'@nhcarrigan/eslint-config@5.2.0(@typescript-eslint/utils@8.26.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(playwright@1.51.0)(react@19.0.0)(typescript@5.8.2)(vitest@3.0.8(@types/node@25.2.3))':
'@nhcarrigan/eslint-config@5.2.0(@typescript-eslint/utils@8.26.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(playwright@1.51.0)(react@19.0.0)(typescript@5.8.2)(vitest@3.0.8(@types/node@22.13.9))':
dependencies:
'@eslint-community/eslint-plugin-eslint-comments': 4.4.1(eslint@9.21.0)
'@eslint/compat': 1.2.4(eslint@9.21.0)
@@ -2893,7 +2916,7 @@ snapshots:
'@stylistic/eslint-plugin': 2.12.1(eslint@9.21.0)(typescript@5.8.2)
'@typescript-eslint/eslint-plugin': 8.19.0(@typescript-eslint/parser@8.19.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(typescript@5.8.2)
'@typescript-eslint/parser': 8.19.0(eslint@9.21.0)(typescript@5.8.2)
'@vitest/eslint-plugin': 1.1.24(@typescript-eslint/utils@8.26.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(typescript@5.8.2)(vitest@3.0.8(@types/node@25.2.3))
'@vitest/eslint-plugin': 1.1.24(@typescript-eslint/utils@8.26.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(typescript@5.8.2)(vitest@3.0.8(@types/node@22.13.9))
eslint: 9.21.0
eslint-plugin-deprecation: 3.0.0(eslint@9.21.0)(typescript@5.8.2)
eslint-plugin-import: 2.31.0(@typescript-eslint/parser@8.19.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)
@@ -2906,7 +2929,7 @@ snapshots:
playwright: 1.51.0
react: 19.0.0
typescript: 5.8.2
vitest: 3.0.8(@types/node@25.2.3)
vitest: 3.0.8(@types/node@22.13.9)
transitivePeerDependencies:
- '@typescript-eslint/utils'
- eslint-import-resolver-typescript
@@ -3022,14 +3045,14 @@ snapshots:
'@slack/logger@4.0.0':
dependencies:
'@types/node': 25.2.3
'@types/node': 22.13.9
'@slack/oauth@3.0.2':
dependencies:
'@slack/logger': 4.0.0
'@slack/web-api': 7.8.0
'@types/jsonwebtoken': 9.0.9
'@types/node': 25.2.3
'@types/node': 22.13.9
jsonwebtoken: 9.0.2
lodash.isstring: 4.0.1
transitivePeerDependencies:
@@ -3039,7 +3062,7 @@ snapshots:
dependencies:
'@slack/logger': 4.0.0
'@slack/web-api': 7.8.0
'@types/node': 25.2.3
'@types/node': 22.13.9
'@types/ws': 8.18.0
eventemitter3: 5.0.1
ws: 8.18.1
@@ -3054,7 +3077,7 @@ snapshots:
dependencies:
'@slack/logger': 4.0.0
'@slack/types': 2.14.0
'@types/node': 25.2.3
'@types/node': 22.13.9
'@types/retry': 0.12.0
axios: 1.8.2
eventemitter3: 5.0.1
@@ -3082,17 +3105,17 @@ snapshots:
'@types/body-parser@1.19.5':
dependencies:
'@types/connect': 3.4.38
'@types/node': 25.2.3
'@types/node': 22.13.9
'@types/connect@3.4.38':
dependencies:
'@types/node': 25.2.3
'@types/node': 22.13.9
'@types/estree@1.0.6': {}
'@types/express-serve-static-core@5.0.6':
dependencies:
'@types/node': 25.2.3
'@types/node': 22.13.9
'@types/qs': 6.9.18
'@types/range-parser': 1.2.7
'@types/send': 0.17.4
@@ -3113,7 +3136,7 @@ snapshots:
'@types/jsonwebtoken@9.0.9':
dependencies:
'@types/ms': 2.1.0
'@types/node': 25.2.3
'@types/node': 22.13.9
'@types/mime@1.3.5': {}
@@ -3121,11 +3144,11 @@ snapshots:
'@types/node-schedule@2.1.7':
dependencies:
'@types/node': 25.2.3
'@types/node': 22.13.9
'@types/node@25.2.3':
'@types/node@22.13.9':
dependencies:
undici-types: 7.16.0
undici-types: 6.20.0
'@types/normalize-package-data@2.4.4': {}
@@ -3138,17 +3161,17 @@ snapshots:
'@types/send@0.17.4':
dependencies:
'@types/mime': 1.3.5
'@types/node': 25.2.3
'@types/node': 22.13.9
'@types/serve-static@1.15.7':
dependencies:
'@types/http-errors': 2.0.4
'@types/node': 25.2.3
'@types/node': 22.13.9
'@types/send': 0.17.4
'@types/ws@8.18.0':
dependencies:
'@types/node': 25.2.3
'@types/node': 22.13.9
'@typescript-eslint/eslint-plugin@8.19.0(@typescript-eslint/parser@8.19.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(typescript@5.8.2)':
dependencies:
@@ -3302,13 +3325,13 @@ snapshots:
'@typescript-eslint/types': 8.26.0
eslint-visitor-keys: 4.2.0
'@vitest/eslint-plugin@1.1.24(@typescript-eslint/utils@8.26.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(typescript@5.8.2)(vitest@3.0.8(@types/node@25.2.3))':
'@vitest/eslint-plugin@1.1.24(@typescript-eslint/utils@8.26.0(eslint@9.21.0)(typescript@5.8.2))(eslint@9.21.0)(typescript@5.8.2)(vitest@3.0.8(@types/node@22.13.9))':
dependencies:
'@typescript-eslint/utils': 8.26.0(eslint@9.21.0)(typescript@5.8.2)
eslint: 9.21.0
optionalDependencies:
typescript: 5.8.2
vitest: 3.0.8(@types/node@25.2.3)
vitest: 3.0.8(@types/node@22.13.9)
'@vitest/expect@3.0.8':
dependencies:
@@ -3317,13 +3340,13 @@ snapshots:
chai: 5.2.0
tinyrainbow: 2.0.0
'@vitest/mocker@3.0.8(vite@6.2.1(@types/node@25.2.3))':
'@vitest/mocker@3.0.8(vite@6.2.1(@types/node@22.13.9))':
dependencies:
'@vitest/spy': 3.0.8
estree-walker: 3.0.3
magic-string: 0.30.17
optionalDependencies:
vite: 6.2.1(@types/node@25.2.3)
vite: 6.2.1(@types/node@22.13.9)
'@vitest/pretty-format@3.0.8':
dependencies:
@@ -5339,10 +5362,12 @@ snapshots:
has-symbols: 1.1.0
which-boxed-primitive: 1.1.1
undici-types@7.16.0: {}
undici-types@6.20.0: {}
undici@6.21.1: {}
unicode-segmenter@0.14.5: {}
unpipe@1.0.0: {}
update-browserslist-db@1.1.3(browserslist@4.24.4):
@@ -5364,13 +5389,13 @@ snapshots:
vary@1.1.2: {}
vite-node@3.0.8(@types/node@25.2.3):
vite-node@3.0.8(@types/node@22.13.9):
dependencies:
cac: 6.7.14
debug: 4.4.0
es-module-lexer: 1.6.0
pathe: 2.0.3
vite: 6.2.1(@types/node@25.2.3)
vite: 6.2.1(@types/node@22.13.9)
transitivePeerDependencies:
- '@types/node'
- jiti
@@ -5385,19 +5410,19 @@ snapshots:
- tsx
- yaml
vite@6.2.1(@types/node@25.2.3):
vite@6.2.1(@types/node@22.13.9):
dependencies:
esbuild: 0.25.0
postcss: 8.5.3
rollup: 4.34.9
optionalDependencies:
'@types/node': 25.2.3
'@types/node': 22.13.9
fsevents: 2.3.3
vitest@3.0.8(@types/node@25.2.3):
vitest@3.0.8(@types/node@22.13.9):
dependencies:
'@vitest/expect': 3.0.8
'@vitest/mocker': 3.0.8(vite@6.2.1(@types/node@25.2.3))
'@vitest/mocker': 3.0.8(vite@6.2.1(@types/node@22.13.9))
'@vitest/pretty-format': 3.0.8
'@vitest/runner': 3.0.8
'@vitest/snapshot': 3.0.8
@@ -5413,11 +5438,11 @@ snapshots:
tinyexec: 0.3.2
tinypool: 1.0.2
tinyrainbow: 2.0.0
vite: 6.2.1(@types/node@25.2.3)
vite-node: 3.0.8(@types/node@25.2.3)
vite: 6.2.1(@types/node@22.13.9)
vite-node: 3.0.8(@types/node@22.13.9)
why-is-node-running: 2.3.0
optionalDependencies:
'@types/node': 25.2.3
'@types/node': 22.13.9
transitivePeerDependencies:
- jiti
- less
+21
View File
@@ -0,0 +1,21 @@
# Security
# Do not execute any scripts of installed packages (project scripts still run)
ignoreDepScripts: true
# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
enablePrePostScripts: false
# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
minimumReleaseAge: 14400
# Fail if a package's trust level has decreased compared to previous releases
trustPolicy: no-downgrade
# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
trustPolicyIgnoreAfter: 525960
# Fail if there are missing or invalid peer dependencies
strictPeerDependencies: true
# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
blockExoticSubdeps: true
# Lockfile
# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
preferFrozenLockfile: false