Skip to content

chore: hard npm audit gate and Dependabot - #15

Merged
gRoussac merged 1 commit into
devfrom
chore/npm-audit-dependabot
Sep 12, 2026
Merged

gRoussac merged 1 commit into
devfrom
chore/npm-audit-dependabot

Conversation

@Interchouette

Copy link
Copy Markdown
Collaborator

Summary

  • Add a hard npm audit gate and Dependabot configuration for the frontend workspace.

Test plan

  • CI job that runs npm audit passes on this PR
  • Dependabot config is present and valid
  • Local lint/build still green

Made with Cursor

Bump Nx to 23.2.1 and pin transitive overrides so npm audit
--audit-level=high is clean; fail CI on highs and add Dependabot.

Co-authored-by: Cursor <cursoragent@cursor.com>
@gRoussac
gRoussac merged commit acac1e7 into dev Sep 12, 2026
1 check passed
@gRoussac
gRoussac deleted the chore/npm-audit-dependabot branch September 12, 2026 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants