chore(security): cool down npm installs and freeze the dev lockfile - #8629

Closed

BridgeAR wants to merge 41 commits into

BridgeAR/2026-05-09-remove-yarnfrom

BridgeAR/2026-05-25-supply-chain-cooldown

Commits on May 24, 2026

ci: move root install paths off yarn to bun
BridgeAR
committed
35a3e4b
ci: replace yarn services chain with bun isolated install
BridgeAR
committed
9c4b29b
ci: drop yarn run from workflows and the license check
BridgeAR
committed
46d98c9
ci(docs): build TypeDoc docs with bun
BridgeAR
committed
8a6b30f
chore: remove dead yarn machinery and guard the migration
BridgeAR
committed
b4912ad
fix(ci): skip lifecycle scripts in package-size-report bun install
BridgeAR
committed
d51edd9
fix(test): switch versions/ workspace to bun's hoisted linker
BridgeAR
committed
9e624bf
fix(test): restore moleculer bluebird transitive
BridgeAR
committed
f06ddca
fix(test): revert versions/ workspace to bun's isolated linker
BridgeAR
committed
0a197de
fix(test): inject @grpc/grpc-js into pubsub sandboxes
BridgeAR
committed
9e95dcc
fix(langchain): pin @langchain/openai at the versions/ workspace root
BridgeAR
committed
8cda175
fix(test): drop yarn references from new plugin-fix comments
BridgeAR
committed
00a1d01
fix(test): adapt versions/ sandboxes to bun isolated linker
BridgeAR
committed
28bf5f4
ci(licenses): skip dd-license-attribution regen on bun.lock
BridgeAR
committed
3632a5c
fix(test): rebuild versions/ native bindings on Node ABI change
BridgeAR
committed
69bf63a
ci(licenses): drop yarn references from skip-comment
BridgeAR
committed
0067b8a
fix(test): drop yarn from Node-ABI cache-bust comment
BridgeAR
committed
e28b0b8
fix(test): match yarn classic resolution under bun isolated linker
BridgeAR
committed
51a8021
ci(bench): install bun for the GitLab microbenchmarks
BridgeAR
committed
6cacbbf
chore(codeowners): own the install-smoke workflow
BridgeAR
committed
2045a9e
ci(licenses): regenerate the CSV from bun.lock and auto-commit via octo-sts
BridgeAR
committed
a035d79
ci(install-smoke): push results to Test Optimization via dd-sts
BridgeAR
committed
da84433
fix(test): only prune ambiguous bun central symlinks
BridgeAR
committed
f953361
fix(test): override collections to 5.x for q@2.0.0
BridgeAR
committed
ad696e8
fix(licenses): strip name fields without regex on untrusted input
BridgeAR
committed
7071395
fix(test): inject google-auth-library into vertex-ai sandboxes
BridgeAR
committed
e8389a2
ci(bench): install unzip before bun-curl on the GitLab runner
BridgeAR
committed
30b4214
chore(codeowners): own the docs/ TypeDoc workspace
BridgeAR
committed
6e4719c
fix(test): pin the langchain-openai floor for its core transitive
BridgeAR
committed
6c8d452
fix(test): inject zod into the ai sandbox
BridgeAR
committed
4f808af

Commits on May 25, 2026