Anso 859839082c fix: pin brace-expansion to a patched version in both packages (#1658) ...

npm audit was failing CI with a high-severity DoS advisory
(GHSA-3jxr-9vmj-r5cp, plus GHSA-jxxr-4gwj-5jf2 on the frontend) for
brace-expansion, pulled in transitively through eslint -> minimatch.
It is a lint-only dev dependency, never bundled into the runtime
image, but the audit gate blocks on it regardless.

Pins it via overrides instead of accepting the wider dependency bump
npm audit fix proposes, since minimatch already declares a compatible
range for the patched version.

2026-07-20 19:16:32 -04:00

..

scripts

fix(fleet): resolve getSenchoVersion crash in Docker containers (#396)

2026-04-06 00:44:36 -04:00

src

fix(fleet): isolate corrupt snapshot file decrypt failures (#1650)

2026-07-19 20:08:31 -04:00

.npmrc

chore(deps): upgrade major dependencies (ESLint 10, recharts 3, TS 6, Vite 8) (#130)

2026-03-25 00:03:08 -04:00

eslint.config.mjs

refactor(backend): collapse entitlement provider abstraction back to LicenseService (#889)

2026-05-02 23:45:44 -04:00

package-lock.json

fix: pin brace-expansion to a patched version in both packages (#1658)

2026-07-20 19:16:32 -04:00

package.json

fix: pin brace-expansion to a patched version in both packages (#1658)

2026-07-20 19:16:32 -04:00

tsconfig.json

perf(build): enable incremental tsc (#827)

2026-04-28 09:15:54 -04:00

vitest.config.ts

perf(test): build baseline DB once via vitest globalSetup (#829)

2026-04-28 10:08:39 -04:00