RileyJJY
34b72d1fce
fix(scripts): bound dependency pin git lookups ( #110570 )
...
* fix(scripts): bound dependency pin git lookups
* fix(scripts): address dependency pin review
* Update dependency pin helper types
* fix(scripts): terminate stalled dependency pin Git commands
Bound both dependency-pin Git subprocesses and terminate SIGTERM-resistant children. Preserve sparse-index reads, Windows-native Git, exact timeout errors, and script declaration contracts.
Co-authored-by: RileyJJY <0668000974@xydigit.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-29 13:11:23 -04:00
Vincent Koc
7ff3f2dbf9
refactor(deadcode): localize UI and script symbols ( #101858 )
2026-07-07 11:55:57 -07:00
Peter Steinberger
978fdd7d2a
docs: document root guard scripts
2026-06-04 23:30:59 -04:00
Peter Steinberger
27dde7a4d6
chore(lint): enable stricter error rules
2026-06-01 01:12:21 +01:00
Peter Steinberger
6f57286678
refactor: use Rastermill for image processing ( #86621 )
...
* refactor: use Rastermill for image processing
* docs: clarify autoreview heartbeat patience
* refactor: use simplified rastermill api
* fix: preserve rastermill media safety boundaries
* build: update rastermill api pin
* build: use published rastermill package
2026-05-26 02:54:49 +01:00
Vincent Koc
bc0def52af
fix(ci): read sparse package manifests from index
2026-05-14 13:11:42 +08:00
Josh Avant
bd4db5ee62
Add dependency release safety evidence and PR awareness ( #81325 )
...
* test: cover dependency pin guard
* build: add dependency vulnerability gate
* build: add dependency risk report
* build: add dependency drift reports
* build: include dependency ownership surface evidence
* build: rename dependency report commands
* build: respect release age exclusions in risk report
* build: clarify transitive risk accounting
* build: remove transitive risk exception registry
* build: clarify transitive risk signal wording
* ci: attach dependency evidence to release preflight
* ci: extract dependency release evidence generator
* build: rename ownership surface dependency report
* ci: clarify release evidence naming
* build: clarify recently published risk report
* build: reorder transitive risk report sections
* build: fix ownership surface pluralization
* ci: surface dependency changes on PRs
* ci: harden dependency change awareness
* ci: use dependency changed PR label
* build: fix dependency report lint
* docs: add dependency safety changelog
2026-05-13 03:05:09 -05:00
Peter Steinberger
f6d787cc5c
build: hard-pin dependency specs
2026-05-12 07:10:13 +01:00
