fix(deploy): patch audited frontend dependencies

2026-10-17 21:02:45 +02:00
parent e7dba9a2f7
commit 2278473763
7 changed files with 329 additions and 184 deletions
@@ -191,11 +191,13 @@ jobs:
                 && npm_cache="$(mktemp -d)" \
                 && npm ci --no-audit --no-fund --cache "$npm_cache" )

-      # Moderate React Router advisories remain documented and mitigated; high/critical findings
-      # in either production or test/browser tooling block the build.
+      # High/critical findings remain blocking except the owner's expiring dev-only
+      # GHSA-vfj7-8cjw-p6xm exception; raw audit results are retained and the policy is tested.
      - name: Audit frontend dependencies
        working-directory: job-tracker-ui
-        run: npm audit --audit-level=high
+        run: |
+          node --test scripts/audit-dependencies.test.mjs
+          node scripts/audit-dependencies.mjs

      - name: Lint frontend
        working-directory: job-tracker-ui