Commit Graph
3 Commits
Author SHA1 Message Date
popertotsandSisyphus 96410c9f18 chore: remove minimatch override (no longer needed), keep cookie override (SvelteKit pinned dep)
CI / Go vulnerabilities (push) Successful in 57s
CI / Build & Vet (push) Successful in 1m14s
CI / Frontend build (gate) (push) Successful in 1m2s
CI / Tests (prod) (push) Has been cancelled
CI / Tests (dev) (push) Has been cancelled
CI / Race (prod) (push) Has been cancelled
CI / Race (dev) (push) Has been cancelled
CI / Frontend QC (audit) (push) Has been cancelled
CI / Frontend QC (typecheck) (push) Has been cancelled
CI / Frontend QC (lint) (push) Has been cancelled
npm update resolved minimatch transitively. cookie still pinned via override because SvelteKit <= 2.69.2 depends on vulnerable cookie < 0.7.0.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
2026-07-09 17:44:34 +01:00
popertotsandSisyphus 914f9993ec ci: remove test/race timeouts, add concurrency cancel-in-progress, fix npm audit vulns
CI / Go vulnerabilities (push) Successful in 35s
CI / Build & Vet (push) Successful in 49s
CI / Frontend build (gate) (push) Successful in 57s
CI / Tests (prod) (push) Has been cancelled
CI / Tests (dev) (push) Has been cancelled
CI / Race (prod) (push) Has been cancelled
CI / Race (dev) (push) Has been cancelled
CI / Frontend QC (audit) (push) Has been cancelled
CI / Frontend QC (typecheck) (push) Has been cancelled
CI / Frontend QC (lint) (push) Has been cancelled
- Remove -timeout 180s/240s from go test and race commands
- Add concurrency group to cancel stale pipelines on new pushes
- Run npm update to bump Vite 7.3.5 -> 7.3.6, fixing nested esbuild vuln
- npm audit now at 0 vulnerabilities

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
2026-07-09 17:43:13 +01:00
popertots 00c06ca79a ci: commit frontend package-lock.json for reproducible CI builds
Backend CI / Tests (push) Successful in 59s
Backend CI / Race detector (push) Failing after 22s
Backend CI / Lint & vulns (push) Failing after 52s
package-lock.json was gitignored, so CI checkouts didn't have it and
npm ci failed. Removing from .gitignore so it's tracked and CI can
install dependencies deterministically.
2026-06-25 13:07:20 +01:00