Merge pull request #44 from openstax/template-sync-2026-07-24

Update from template (fe19832...6888012) + fix syncpack CI and non-linux frontend builds

Author: P-Gill97

.github/workflows/sbom-pr-check.yml

@@ -5,6 +5,7 @@ on:
 
 permissions:
   contents: read
+  packages: read
 
 jobs:
   check:
@@ -29,6 +30,8 @@ jobs:
       - run: npm sbom --sbom-format=cyclonedx > /tmp/head-sbom.json
 
       - name: Generate base SBOM
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
           git fetch origin "${{ github.base_ref }}"

.github/workflows/sbom.yml

@@ -21,6 +21,7 @@ on:
 
 permissions:
   contents: read
+  packages: read
 
 jobs:
   emit:

.lastsync

@@ -1 +1 @@
-fe19832d1486dd59a48692801a85f804ae3bbd4f
+688801270cf105aee8b9436059e7449647674ee4

.syncignore

@@ -3,3 +3,4 @@ docs/*
 example/*
 packages/utils/*
 .claude/skills/*
+scripts/audit-downstream-sync.bash

.syncpackrc

@@ -4,7 +4,7 @@
       "label": "use exact versions",
       "packages": ["**"],
       "dependencyTypes": ["**"],
-      "dependencies": ["@openstax/orn", "@openstax/ts-utils", "typescript", "@project/*", "@openstax/ui-components"],
+      "dependencies": ["@openstax/orn", "@openstax/ts-utils", "typescript", "@project/*"],
       "range": ""
     },
     {