mirror of
https://github.com/renovatebot/renovate.git
synced 2026-11-02 10:33:39 +00:00
09ff8d22b6
* test: validate minimumReleaseAge does not apply to security updates * test: add end-to-end coverage for security-update minimumReleaseAge bypass Drive the real vulnerability flow (appendVulnerabilityPackageRules) through the real lookupUpdates, instead of only simulating the generated packageRule. Also reword the inline comment and use luxon/asTimestamp for timestamps. * test: fix type-check on e2e lookup config Cast the spread config to satisfy partial() overload resolution, matching the existing `getConfig() as never` idiom in the lookup spec. * test: drop redundant inline lookup test in favor of end-to-end coverage The simulated lookup test hand-built the security packageRule; the end-to-end test plus the generated-rule assertion in vulnerabilities.spec.ts cover the same behavior against the real flow, so the inline test added no unique coverage. * test(vulnerability): align lookup config types