With installs repaired (lock file re-synced in #1075), the remaining CI gates now run and expose several independent, pre-existing failures. Tracking them here so they can be triaged separately from the install/workflow cleanup.
1. Type-check (CI workflow Typecheck)
tsc --noEmit reports ~499 errors across 264 files. Tracked in detail in #1074.
2. Dependency Audit (npm run audit)
scripts/security-audit.js fails: high/critical vulnerabilities present in the dependency tree. Needs dependency upgrades (or an explicitly reviewed allowlist). This aligns with the Dependabot backlog.
3. Dependency boundaries (architecture:check)
The dependency-cruiser@18 upgrade was never finished:
- The workflow pins Node 20, but dependency-cruiser@18 requires Node >= 22.
dependency-cruiser.config.js is invalid under v18: enhancedResolveOptions must NOT have additional properties (the tsConfig key moved to the top-level options.tsConfig in v18).
- Once the config is migrated, real boundary violations (if any) still need resolving.
Fix atomically: bump the workflow to Node 22, migrate the config, then address violations.
4. Native Build (iOS & Android)
Both native builds fail; likely downstream of the type/config issues above. Re-evaluate after 1–3 are resolved.
None of these are caused by #1075 — that PR restores installs and trims redundant/flaky workflows so these real issues are visible and fixable.
With installs repaired (lock file re-synced in #1075), the remaining CI gates now run and expose several independent, pre-existing failures. Tracking them here so they can be triaged separately from the install/workflow cleanup.
1. Type-check (CI workflow
Typecheck)tsc --noEmitreports ~499 errors across 264 files. Tracked in detail in #1074.2. Dependency Audit (
npm run audit)scripts/security-audit.jsfails: high/critical vulnerabilities present in the dependency tree. Needs dependency upgrades (or an explicitly reviewed allowlist). This aligns with the Dependabot backlog.3. Dependency boundaries (
architecture:check)The
dependency-cruiser@18upgrade was never finished:dependency-cruiser.config.jsis invalid under v18:enhancedResolveOptions must NOT have additional properties(thetsConfigkey moved to the top-leveloptions.tsConfigin v18).Fix atomically: bump the workflow to Node 22, migrate the config, then address violations.
4. Native Build (iOS & Android)
Both native builds fail; likely downstream of the type/config issues above. Re-evaluate after 1–3 are resolved.
None of these are caused by #1075 — that PR restores installs and trims redundant/flaky workflows so these real issues are visible and fixable.