chore(npm): restrict npm installs + package bumps for a week (try to prevent 0-days from upstream dependency changes)

2026-07-02 00:17:40 +08:00 · 2026-04-21 19:22:09 +01:00
parent 2980ca97a3
commit 7729bd0590
4 changed files with 5 additions and 2 deletions
@@ -16,3 +16,5 @@ updates:
    directory: "/"
    schedule:
      interval: "weekly"
+    cooldown:
+      default-days: 7
@@ -46,7 +46,7 @@ jobs:
          node-version-file: .node-version

      - name: Install Dependencies
-        run: npm i
+        run: npm ci --ignore-scripts

      - name: Run linters
        run: make lint-prettier
@@ -1 +1 @@
-24.11.0
+24.15.0
@@ -0,0 +1 @@
+min-release-age=7
@@ -1 +1 @@
 .11.0
 .15.0