6 Commits

Author SHA1 Message Date
minori cb73bbaa1c deps: update @types/node to 25.2.3
Node.js CI / CI (pull_request) Failing after 31s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m31s
2026-02-20 07:07:04 -08:00
minori 0833d4b40a deps: update @types/node to 25.2.2
Node.js CI / CI (pull_request) Failing after 31s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m25s
2026-02-18 07:07:01 -08:00
minori b25c201f68 deps: update @types/node to 25.2.1
Node.js CI / CI (pull_request) Failing after 30s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m26s
2026-02-15 07:06:43 -08:00
minori 70a69b0e1d deps: update @types/node to 25.2.0
Node.js CI / CI (pull_request) Failing after 30s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m27s
2026-02-12 07:06:50 -08:00
minori 7c9a7b0779 deps: update @types/node to 25.1.0
Node.js CI / CI (pull_request) Failing after 1m0s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 2m29s
2026-02-08 07:14:54 -08:00
minori 19a9013907 deps: update @types/node to 25.0.10
Node.js CI / CI (pull_request) Failing after 31s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m29s
2026-02-04 08:35:36 -08:00
4 changed files with 54 additions and 50 deletions
+25
View File
@@ -0,0 +1,25 @@
# Package Manager Configuration
# Force pnpm usage - breaks npm/yarn intentionally
node-linker=pnpm
# Security: Disable all lifecycle scripts
ignore-scripts=true
enable-pre-post-scripts=false
# Security: Require packages to be 10+ days old before installation
minimum-release-age=14400
# Security: Verify package integrity hashes
verify-store-integrity=true
# Security: Enforce strict trust policies
trust-policy=strict
# Security: Strict peer dependency resolution
strict-peer-dependencies=true
# Performance: Use symlinks for node_modules
symlink=true
# Lockfile: Ensure lockfile is not modified during install
frozen-lockfile=false
+1 -1
View File
@@ -17,7 +17,7 @@
"devDependencies": {
"@nhcarrigan/eslint-config": "5.2.0",
"@nhcarrigan/typescript-config": "4.0.0",
"@types/node": "24.2.1",
"@types/node": "25.2.3",
"@types/node-schedule": "2.1.8",
"eslint": "9.33.0",
"prisma": "6.14.0",
+28 -28
View File
@@ -26,13 +26,13 @@ importers:
devDependencies:
'@nhcarrigan/eslint-config':
specifier: 5.2.0
version: 5.2.0(@typescript-eslint/utils@8.39.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(playwright@1.54.2)(react@19.1.1)(typescript@5.9.2)(vitest@3.2.4(@types/node@24.2.1)(jiti@2.5.1))
version: 5.2.0(@typescript-eslint/utils@8.39.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(playwright@1.54.2)(react@19.1.1)(typescript@5.9.2)(vitest@3.2.4(@types/node@25.2.3)(jiti@2.5.1))
'@nhcarrigan/typescript-config':
specifier: 4.0.0
version: 4.0.0(typescript@5.9.2)
'@types/node':
specifier: 24.2.1
version: 24.2.1
specifier: 25.2.3
version: 25.2.3
'@types/node-schedule':
specifier: 2.1.8
version: 2.1.8
@@ -553,8 +553,8 @@ packages:
'@types/node-schedule@2.1.8':
resolution: {integrity: sha512-k00g6Yj/oUg/CDC+MeLHUzu0+OFxWbIqrFfDiLi6OPKxTujvpv29mHGM8GtKr7B+9Vv92FcK/8mRqi1DK5f3hA==}
'@types/node@24.2.1':
resolution: {integrity: sha512-DRh5K+ka5eJic8CjH7td8QpYEV6Zo10gfRkjHCO3weqZHWDtAaSTFtl4+VMqOJ4N5jcuhZ9/l+yy8rVgw7BQeQ==}
'@types/node@25.2.3':
resolution: {integrity: sha512-m0jEgYlYz+mDJZ2+F4v8D1AyQb+QzsNqRuI7xg1VQX/KlKS0qT9r1Mo16yo5F/MtifXFgaofIFsdFMox2SxIbQ==}
'@types/normalize-package-data@2.4.4':
resolution: {integrity: sha512-37i+OaWTh9qeK4LSHPsyRC7NahnGotNuZvjLSgcPzblpHB3rrCJxAOgI5gCdKm7coonsaX1Of0ILiTcnZjbfxA==}
@@ -2221,8 +2221,8 @@ packages:
resolution: {integrity: sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw==}
engines: {node: '>= 0.4'}
undici-types@7.10.0:
resolution: {integrity: sha512-t5Fy/nfn+14LuOc2KNYg75vZqClpAiqscVvMygNnlsHBFpSXdJaYtXMcdNLpl/Qvc3P2cB3s6lOV51nqsFq4ag==}
undici-types@7.16.0:
resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
undici@6.21.3:
resolution: {integrity: sha512-gBLkYIlEnSp8pFbT64yFgGE6UIB9tAkhukC23PmMDCe5Nd+cRqKxSjw5y54MK2AZMgZfJWMaNE4nYUHgi1XEOw==}
@@ -2608,7 +2608,7 @@ snapshots:
'@jridgewell/sourcemap-codec@1.5.5': {}
'@nhcarrigan/eslint-config@5.2.0(@typescript-eslint/utils@8.39.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(playwright@1.54.2)(react@19.1.1)(typescript@5.9.2)(vitest@3.2.4(@types/node@24.2.1)(jiti@2.5.1))':
'@nhcarrigan/eslint-config@5.2.0(@typescript-eslint/utils@8.39.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(playwright@1.54.2)(react@19.1.1)(typescript@5.9.2)(vitest@3.2.4(@types/node@25.2.3)(jiti@2.5.1))':
dependencies:
'@eslint-community/eslint-plugin-eslint-comments': 4.4.1(eslint@9.33.0(jiti@2.5.1))
'@eslint/compat': 1.2.4(eslint@9.33.0(jiti@2.5.1))
@@ -2617,7 +2617,7 @@ snapshots:
'@stylistic/eslint-plugin': 2.12.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)
'@typescript-eslint/eslint-plugin': 8.19.0(@typescript-eslint/parser@8.19.0(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)
'@typescript-eslint/parser': 8.19.0(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)
'@vitest/eslint-plugin': 1.1.24(@typescript-eslint/utils@8.39.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)(vitest@3.2.4(@types/node@24.2.1)(jiti@2.5.1))
'@vitest/eslint-plugin': 1.1.24(@typescript-eslint/utils@8.39.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)(vitest@3.2.4(@types/node@25.2.3)(jiti@2.5.1))
eslint: 9.33.0(jiti@2.5.1)
eslint-plugin-deprecation: 3.0.0(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)
eslint-plugin-import: 2.31.0(@typescript-eslint/parser@8.19.0(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))
@@ -2630,7 +2630,7 @@ snapshots:
playwright: 1.54.2
react: 19.1.1
typescript: 5.9.2
vitest: 3.2.4(@types/node@24.2.1)(jiti@2.5.1)
vitest: 3.2.4(@types/node@25.2.3)(jiti@2.5.1)
transitivePeerDependencies:
- '@typescript-eslint/utils'
- eslint-import-resolver-typescript
@@ -2791,17 +2791,17 @@ snapshots:
'@types/node-schedule@2.1.8':
dependencies:
'@types/node': 24.2.1
'@types/node': 25.2.3
'@types/node@24.2.1':
'@types/node@25.2.3':
dependencies:
undici-types: 7.10.0
undici-types: 7.16.0
'@types/normalize-package-data@2.4.4': {}
'@types/ws@8.18.1':
dependencies:
'@types/node': 24.2.1
'@types/node': 25.2.3
'@typescript-eslint/eslint-plugin@8.19.0(@typescript-eslint/parser@8.19.0(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)':
dependencies:
@@ -2970,13 +2970,13 @@ snapshots:
'@typescript-eslint/types': 8.39.1
eslint-visitor-keys: 4.2.1
'@vitest/eslint-plugin@1.1.24(@typescript-eslint/utils@8.39.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)(vitest@3.2.4(@types/node@24.2.1)(jiti@2.5.1))':
'@vitest/eslint-plugin@1.1.24(@typescript-eslint/utils@8.39.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2))(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)(vitest@3.2.4(@types/node@25.2.3)(jiti@2.5.1))':
dependencies:
'@typescript-eslint/utils': 8.39.1(eslint@9.33.0(jiti@2.5.1))(typescript@5.9.2)
eslint: 9.33.0(jiti@2.5.1)
optionalDependencies:
typescript: 5.9.2
vitest: 3.2.4(@types/node@24.2.1)(jiti@2.5.1)
vitest: 3.2.4(@types/node@25.2.3)(jiti@2.5.1)
'@vitest/expect@3.2.4':
dependencies:
@@ -2986,13 +2986,13 @@ snapshots:
chai: 5.2.1
tinyrainbow: 2.0.0
'@vitest/mocker@3.2.4(vite@7.1.2(@types/node@24.2.1)(jiti@2.5.1))':
'@vitest/mocker@3.2.4(vite@7.1.2(@types/node@25.2.3)(jiti@2.5.1))':
dependencies:
'@vitest/spy': 3.2.4
estree-walker: 3.0.3
magic-string: 0.30.17
optionalDependencies:
vite: 7.1.2(@types/node@24.2.1)(jiti@2.5.1)
vite: 7.1.2(@types/node@25.2.3)(jiti@2.5.1)
'@vitest/pretty-format@3.2.4':
dependencies:
@@ -4805,7 +4805,7 @@ snapshots:
has-symbols: 1.1.0
which-boxed-primitive: 1.1.1
undici-types@7.10.0: {}
undici-types@7.16.0: {}
undici@6.21.3: {}
@@ -4824,13 +4824,13 @@ snapshots:
spdx-correct: 3.2.0
spdx-expression-parse: 3.0.1
vite-node@3.2.4(@types/node@24.2.1)(jiti@2.5.1):
vite-node@3.2.4(@types/node@25.2.3)(jiti@2.5.1):
dependencies:
cac: 6.7.14
debug: 4.4.1
es-module-lexer: 1.7.0
pathe: 2.0.3
vite: 7.1.2(@types/node@24.2.1)(jiti@2.5.1)
vite: 7.1.2(@types/node@25.2.3)(jiti@2.5.1)
transitivePeerDependencies:
- '@types/node'
- jiti
@@ -4845,7 +4845,7 @@ snapshots:
- tsx
- yaml
vite@7.1.2(@types/node@24.2.1)(jiti@2.5.1):
vite@7.1.2(@types/node@25.2.3)(jiti@2.5.1):
dependencies:
esbuild: 0.25.9
fdir: 6.5.0(picomatch@4.0.3)
@@ -4854,15 +4854,15 @@ snapshots:
rollup: 4.46.2
tinyglobby: 0.2.14
optionalDependencies:
'@types/node': 24.2.1
'@types/node': 25.2.3
fsevents: 2.3.3
jiti: 2.5.1
vitest@3.2.4(@types/node@24.2.1)(jiti@2.5.1):
vitest@3.2.4(@types/node@25.2.3)(jiti@2.5.1):
dependencies:
'@types/chai': 5.2.2
'@vitest/expect': 3.2.4
'@vitest/mocker': 3.2.4(vite@7.1.2(@types/node@24.2.1)(jiti@2.5.1))
'@vitest/mocker': 3.2.4(vite@7.1.2(@types/node@25.2.3)(jiti@2.5.1))
'@vitest/pretty-format': 3.2.4
'@vitest/runner': 3.2.4
'@vitest/snapshot': 3.2.4
@@ -4880,11 +4880,11 @@ snapshots:
tinyglobby: 0.2.14
tinypool: 1.1.1
tinyrainbow: 2.0.0
vite: 7.1.2(@types/node@24.2.1)(jiti@2.5.1)
vite-node: 3.2.4(@types/node@24.2.1)(jiti@2.5.1)
vite: 7.1.2(@types/node@25.2.3)(jiti@2.5.1)
vite-node: 3.2.4(@types/node@25.2.3)(jiti@2.5.1)
why-is-node-running: 2.3.0
optionalDependencies:
'@types/node': 24.2.1
'@types/node': 25.2.3
transitivePeerDependencies:
- jiti
- less
-21
View File
@@ -1,21 +0,0 @@
# Security
# Do not execute any scripts of installed packages (project scripts still run)
ignoreDepScripts: true
# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
enablePrePostScripts: false
# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
minimumReleaseAge: 14400
# Fail if a package's trust level has decreased compared to previous releases
trustPolicy: no-downgrade
# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
trustPolicyIgnoreAfter: 525960
# Fail if there are missing or invalid peer dependencies
strictPeerDependencies: true
# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
blockExoticSubdeps: true
# Lockfile
# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
preferFrozenLockfile: false