chore(deps-dev): bump @types/node from 22.20.1 to 26.1.2 #93
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # G1-B + ADR 0004: unit gates + contracts typecheck/test (no Codex/CDP/Windows install state). | |
| # Full doctor/smoke/probe remain local. See docs/plans/residual-g1-g3-g4-g5-2026-07-20.md | |
| name: themes-gate | |
| on: | |
| push: | |
| branches: [main, feat/u1-workspace] | |
| pull_request: | |
| # Base branches that should gate unit + contracts (feature trains included) | |
| branches: [main, feat/u1-workspace] | |
| jobs: | |
| themes: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 8 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v7 | |
| - name: Setup pnpm | |
| uses: pnpm/action-setup@v6 | |
| # version from package.json packageManager field (avoid dual version conflict) | |
| - name: Setup Node | |
| uses: actions/setup-node@v7 | |
| with: | |
| # pnpm 11.5+ needs Node >= 22.13 (node:sqlite); product engines remain >=20 for runtime | |
| node-version: "22" | |
| cache: pnpm | |
| - name: Install (dev plane) | |
| run: pnpm install --frozen-lockfile | |
| # Dependency audit — official registry only. | |
| # npmmirror / many private registries lack /-/npm/v1/security/advisories/bulk | |
| # (ERR_PNPM_AUDIT_ENDPOINT_NOT_EXISTS). Forcing registry.npmjs.org keeps the | |
| # signal real. Baseline 2026-07-28: 0 known vulns (prod npm deps = 0; ADR 0004). | |
| # Policy: hard-fail (no continue-on-error). Flaky advisory DB → maintainer | |
| # may temporarily add continue-on-error:true with a dated comment + recheck. | |
| # Local/mirror machines: npm run audit:deps (scripts/audit-local.mjs). | |
| # Evidence: docs/ops/cv-audit-registry-evidence-2026-07-28.md | |
| - name: Dependency audit (official registry) | |
| run: pnpm audit --registry=https://registry.npmjs.org --audit-level=high | |
| - name: Typecheck contracts | |
| run: pnpm run typecheck:contracts | |
| - name: Unit gates (legacy + contracts) | |
| run: pnpm run test |