From 24c980e6c5214d5d4eb4304ac119726ca6b8cc5d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Timo=20H=C3=BCgel?= Date: Fri, 7 Aug 2026 16:21:38 +0200 Subject: [PATCH 1/3] Add dependency security maintenance --- .../workflows/dependency-security-maintenance.yml | 14 ++++++++++++++ .nsprc | 1 + 2 files changed, 15 insertions(+) create mode 100644 .github/workflows/dependency-security-maintenance.yml create mode 100644 .nsprc diff --git a/.github/workflows/dependency-security-maintenance.yml b/.github/workflows/dependency-security-maintenance.yml new file mode 100644 index 000000000..f8b431928 --- /dev/null +++ b/.github/workflows/dependency-security-maintenance.yml @@ -0,0 +1,14 @@ +name: Dependency Security Maintenance + +on: + schedule: + - cron: "0 2 * * 2" # every Tuesday at 02:00 UTC + workflow_dispatch: + +permissions: {} + +jobs: + npm-audit: + uses: js-soft/github-actions/.github/workflows/dependency-security-maintenance.yml@main + secrets: + github-token: ${{ secrets.GH_PAT }} diff --git a/.nsprc b/.nsprc new file mode 100644 index 000000000..0967ef424 --- /dev/null +++ b/.nsprc @@ -0,0 +1 @@ +{} From c6f84beaa3c818532cd25332a5590b042cfe2426 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Timo=20H=C3=BCgel?= Date: Fri, 7 Aug 2026 16:26:31 +0200 Subject: [PATCH 2/3] chore: npm audit fix --- package-lock.json | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/package-lock.json b/package-lock.json index 342d297c8..60e3a24a1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -206,9 +206,9 @@ "dev": true }, "node_modules/brace-expansion": { - "version": "1.1.16", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.16.tgz", - "integrity": "sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==", + "version": "1.1.18", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", + "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", "dev": true, "license": "MIT", "dependencies": { @@ -805,9 +805,9 @@ } }, "node_modules/readdir-glob/node_modules/brace-expansion": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz", - "integrity": "sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==", + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz", + "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==", "dev": true, "license": "MIT", "dependencies": { @@ -1212,9 +1212,9 @@ "dev": true }, "brace-expansion": { - "version": "1.1.16", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.16.tgz", - "integrity": "sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==", + "version": "1.1.18", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz", + "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==", "dev": true, "requires": { "balanced-match": "^1.0.0", @@ -1726,9 +1726,9 @@ }, "dependencies": { "brace-expansion": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz", - "integrity": "sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==", + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz", + "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==", "dev": true, "requires": { "balanced-match": "^1.0.0" From 0a8f0119cc77ac93c5783ba8bc08467937829b74 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Timo=20H=C3=BCgel?= Date: Fri, 7 Aug 2026 16:28:14 +0200 Subject: [PATCH 3/3] chore: move exception to .nsprc --- .github/workflows/test.yml | 2 +- .nsprc | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index c81d7934d..0e4e84b5e 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -23,5 +23,5 @@ jobs: steps: - uses: actions/checkout@v4 - run: npx prettier -c . - - run: npx better-npm-audit audit --exclude 1119441 + - run: npx better-npm-audit audit - run: npx markdownlint-cli **/*.md diff --git a/.nsprc b/.nsprc index 0967ef424..9fe7dc17f 100644 --- a/.nsprc +++ b/.nsprc @@ -1 +1,3 @@ -{} +{ + "1119441": {} +}