invisi/gotenberg
1
0
Fork 0
mirror of https://github.com/gotenberg/gotenberg.git synced 2026-07-02 00:17:40 +08:00
Code Issues Packages Projects Releases Wiki Activity

chore(npm): restrict npm installs + package bumps for a week (try to prevent 0-days from upstream dependency changes)

Browse Source
This commit is contained in:
Pieter Oliver
2026-04-21 19:22:09 +01:00
committed by GitHub
parent 2980ca97a3
commit 7729bd0590
4 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/dependabot.yml
+2
View File
@@ -16,3 +16,5 @@ updates:
directory: "/" directory: "/"
schedule: schedule:
interval: "weekly" interval: "weekly"
cooldown:
default-days: 7
.github/workflows/continuous-integration.yml
+1 -1
View File
@@ -46,7 +46,7 @@ jobs:
node-version-file: .node-version node-version-file: .node-version
- name: Install Dependencies - name: Install Dependencies
run: npm i run: npm ci --ignore-scripts
- name: Run linters - name: Run linters
run: make lint-prettier run: make lint-prettier
.node-version
+1 -1
View File
@@ -1 +1 @@
24.11.0 24.15.0
.npmrc
+1
View File
@@ -0,0 +1 @@
min-release-age=7