From b78920b647cb0c4ad66984c52f1ffc912139aa81 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Timo=20H=C3=BCgel?= Date: Fri, 7 Aug 2026 16:22:00 +0200 Subject: [PATCH 1/2] Add dependency security maintenance --- .ci/runChecks.sh | 2 +- .../workflows/dependency-security-maintenance.yml | 14 ++++++++++++++ .nsprc | 4 ++++ 3 files changed, 19 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/dependency-security-maintenance.yml create mode 100644 .nsprc diff --git a/.ci/runChecks.sh b/.ci/runChecks.sh index ea931d86a..97a878843 100755 --- a/.ci/runChecks.sh +++ b/.ci/runChecks.sh @@ -6,4 +6,4 @@ npm run lint:eslint npm run lint:prettier npm run --workspaces cdep npx --workspaces license-check -npx better-npm-audit audit --exclude 1112030,1124298 +npx better-npm-audit audit \ No newline at end of file diff --git a/.github/workflows/dependency-security-maintenance.yml b/.github/workflows/dependency-security-maintenance.yml new file mode 100644 index 000000000..f8b431928 --- /dev/null +++ b/.github/workflows/dependency-security-maintenance.yml @@ -0,0 +1,14 @@ +name: Dependency Security Maintenance + +on: + schedule: + - cron: "0 2 * * 2" # every Tuesday at 02:00 UTC + workflow_dispatch: + +permissions: {} + +jobs: + npm-audit: + uses: js-soft/github-actions/.github/workflows/dependency-security-maintenance.yml@main + secrets: + github-token: ${{ secrets.GH_PAT }} diff --git a/.nsprc b/.nsprc new file mode 100644 index 000000000..905456536 --- /dev/null +++ b/.nsprc @@ -0,0 +1,4 @@ +{ + "1112030": {}, + "1124298": {} +} From feca3ce7ba8340e8fe975ed2b92a9038ff18882a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Timo=20H=C3=BCgel?= Date: Fri, 7 Aug 2026 17:31:18 +0200 Subject: [PATCH 2/2] chore: re-add newline --- .ci/runChecks.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.ci/runChecks.sh b/.ci/runChecks.sh index 97a878843..3192c5be4 100755 --- a/.ci/runChecks.sh +++ b/.ci/runChecks.sh @@ -6,4 +6,4 @@ npm run lint:eslint npm run lint:prettier npm run --workspaces cdep npx --workspaces license-check -npx better-npm-audit audit \ No newline at end of file +npx better-npm-audit audit