Skip to content

chore: hard npm audit gate and Dependabot - #14

Closed
Interchouette wants to merge 1 commit into
InterINNL:devfrom
Interchouette:chore/npm-audit-dependabot
Closed

chore: hard npm audit gate and Dependabot#14
Interchouette wants to merge 1 commit into
InterINNL:devfrom
Interchouette:chore/npm-audit-dependabot

Conversation

@Interchouette

Copy link
Copy Markdown
Collaborator

Summary

  • Add a hard npm audit gate and Dependabot configuration for the frontend workspace.

Test plan

  • CI job that runs npm audit passes on this PR
  • Dependabot config is present and valid
  • Local lint/build still green

Bump Nx to 23.2.1 and pin transitive overrides so npm audit
--audit-level=high is clean; fail CI on highs and add Dependabot.

Co-authored-by: Cursor <cursoragent@cursor.com>
@Interchouette

Copy link
Copy Markdown
Collaborator Author

Superseded by same-repo branch now that Interchouette has write access (avoids fork workflow approval).

@Interchouette
Interchouette deleted the chore/npm-audit-dependabot branch September 12, 2026 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants