Mike Ryan 8bbce59ece fix(datasource/npm): tolerate non-string time entries in packument (#43779) ...

* fix(datasource/npm): tolerate non-string `time` entries in packument

JFrog Artifactory npm registries emit `"unpublished": null` under the
packument `time` field. Since the schema declared `time` values as
`z.string()`, the `null` failed validation and Zod rejected the entire
packument, so every package lookup returned no-result.

Strip non-string `time` entries via a shared `PackumentTime` transform so
a stray metadata key cannot invalidate the whole packument, while keeping
the real version->timestamp entries the datasource relies on.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* refactor(datasource/npm): use LooseRecord for packument time

Per PR review.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-04 14:04:51 +00:00

..

datasource

fix(datasource/npm): tolerate non-string time entries in packument (#43779)

2026-06-04 14:04:51 +00:00

manager

fix(mise): require allowlisting for lock updates (#43606)

2026-06-03 16:17:46 +00:00

platform

feat(platform/azure): add dependency dashboard support (#42758)

2026-06-03 15:56:14 +00:00

versioning

docs: ensure that config in documentation is error and warning free (#43727)

2026-06-02 13:29:48 +00:00