File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -17,7 +17,7 @@ permissions:
1717jobs :
1818 ci :
1919 name : Run CI Pipeline
20- uses : SocketDev/socket-registry/.github/workflows/ci.yml@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
20+ uses : SocketDev/socket-registry/.github/workflows/ci.yml@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
2121 with :
2222 fail-fast : false
2323 lint-script : ' pnpm run lint --all'
Original file line number Diff line number Diff line change @@ -45,14 +45,14 @@ jobs:
4545 echo "Sleeping for $delay seconds..."
4646 sleep $delay
4747
48- - uses : SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
48+ - uses : SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
4949
5050 - name : Configure push credentials
5151 env :
5252 GH_TOKEN : ${{ github.token }}
5353 run : git remote set-url origin "https://x-access-token:${GH_TOKEN}@github.com/${{ github.repository }}.git"
5454
55- - uses : SocketDev/socket-registry/.github/actions/setup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
55+ - uses : SocketDev/socket-registry/.github/actions/setup-git-signing@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
5656 with :
5757 gpg-private-key : ${{ secrets.BOT_GPG_PRIVATE_KEY }}
5858
@@ -122,5 +122,5 @@ jobs:
122122 gh pr reopen "$pr_number"
123123 fi
124124
125- - uses : SocketDev/socket-registry/.github/actions/cleanup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
125+ - uses : SocketDev/socket-registry/.github/actions/cleanup-git-signing@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
126126 if : always()
Original file line number Diff line number Diff line change 3030 permissions :
3131 contents : write # To create GitHub releases
3232 id-token : write # For npm trusted publishing via OIDC
33- uses : SocketDev/socket-registry/.github/workflows/provenance.yml@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
33+ uses : SocketDev/socket-registry/.github/workflows/provenance.yml@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
3434 with :
3535 debug : ${{ inputs.debug }}
3636 dist-tag : ${{ inputs.dist-tag }}
Original file line number Diff line number Diff line change 2424 outputs :
2525 has-updates : ${{ steps.check.outputs.has-updates }}
2626 steps :
27- - uses : SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
27+ - uses : SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
2828
2929 - name : Check for npm updates
3030 id : check
4848 contents : write
4949 pull-requests : write
5050 steps :
51- - uses : SocketDev/socket-registry/.github/actions/setup-and-install@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
51+ - uses : SocketDev/socket-registry/.github/actions/setup-and-install@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
5252
5353 - name : Create update branch
5454 id : branch
6060 git checkout -b "$BRANCH_NAME"
6161 echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
6262
63- - uses : SocketDev/socket-registry/.github/actions/setup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
63+ - uses : SocketDev/socket-registry/.github/actions/setup-git-signing@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
6464 with :
6565 gpg-private-key : ${{ secrets.BOT_GPG_PRIVATE_KEY }}
6666
@@ -306,7 +306,7 @@ jobs:
306306 test-output.log
307307 retention-days : 7
308308
309- - uses : SocketDev/socket-registry/.github/actions/cleanup-git-signing@96c2a403934488b2b1d6127e44f65fd2c36c1150 # main
309+ - uses : SocketDev/socket-registry/.github/actions/cleanup-git-signing@b86b2cb3fefa4ffa6c1a702476f9785f6c3bb887 # main
310310 if : always()
311311
312312 notify :
Original file line number Diff line number Diff line change 1- # Block all install scripts (no native dependencies)
2- ignore-scripts = true
3-
4- # Workspace configuration
5- link-workspace-packages = false
6- prefer-workspace-packages = false
7-
8- # Logging
9- loglevel = error
10-
111# Minimum release age for npm v11+ (days).
12- # pnpm equivalent is in pnpm-workspace.yaml (minimumReleaseAge).
132min-release-age = 7
143
154# Trust policy - prevent downgrade attacks
16- trust-policy = no-downgrade
5+ trust-policy = no-downgrade
Original file line number Diff line number Diff line change 109109 },
110110 "engines" : {
111111 "node" : " >=18.20.8" ,
112- "pnpm" : " >=10.33 .0"
112+ "pnpm" : " >=11.0.0-rc .0"
113113 },
114- "packageManager" : " pnpm@10.33.0" ,
115- "pnpm" : {
116- "ignoredBuiltDependencies" : [
117- " esbuild" ,
118- " unrs-resolver"
119- ],
120- "overrides" : {
121- "defu" : " >=6.1.7" ,
122- "vite" : " 7.3.2"
123- }
124- }
114+ "packageManager" : " pnpm@11.0.0-rc.0"
125115}
You can’t perform that action at this time.
0 commit comments