7 Commits

Author	SHA1	Message	Date
Tom Moor	88d871e463	chore: Clear lodash _.template injection advisory from audit ignore list (#12180) ... Pin lodash and lodash-es to ^4.18.1 via resolutions so transitive deps pick up the patched versions, then drop the advisory ID. Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-27 10:13:15 -04:00
Tom Moor	c280bddab9	chore: Clear picomatch ReDoS advisories from audit ignore list (#12179) ... Pin picomatch to ^2.3.2 / ^4.0.4 via resolutions so transitive deps pick up the patched versions, then drop the advisory IDs.	2026-04-27 09:48:03 -04:00
Tom Moor	c6aacfeeeb	chore: Clear minimatch ReDoS advisories from audit ignore list (#12177) ... * chore: Resolve minimatch ReDoS advisories via dep bumps and resolutions Bump glob (8→11), rimraf (2→6), babel-jest, jest-environment-jsdom (29→30), and lint-staged (13→16) to drop several vulnerable transitive chains. Pin remaining minimatch and brace-expansion descriptors via resolutions so all in-tree copies are on their latest patched release. Removes 9 ignored advisory IDs from .yarnrc.yml. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix: Make routeHelpers.urlify origin testable for jsdom 26 jsdom 26 (jest-environment-jsdom@30) makes window.location and location.origin non-configurable, breaking the previous test that redefined them via Object.defineProperty. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * chore: Align jest-cli to ^30.3.0 with other jest packages Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-27 09:13:52 -04:00
Tom Moor	3f07771a7e	chore: Improve setup against supply chain attacks (#12170) ... * Add npm audit CI Remove postinstall Disable postinstall scripts Increase age gate to 3d * audit cleanup * Gate on dep changes	2026-04-26 21:23:26 -04:00
Tom Moor	03c3be4cf2	fix: npmMinimalAgeGate incorrectly set, upgrade axios, aws (#12057)	2026-04-15 08:45:55 -04:00
Tom Moor	1a893b0e45	Group sync framework (#11684) ... Adds group sync from external authentication providers, allowing team group memberships to be automatically managed based on provider data on sign-in in the future.	2026-03-14 23:02:20 -04:00
Copilot	7cbd06541c	Upgrade Yarn to 4.11.0 (#10865) ... * Initial plan * Upgrade Yarn to 4.11.0 with node-modules linker and security settings Co-authored-by: tommoor <380914+tommoor@users.noreply.github.com> * Restore rolldown resolution to package.json resolutions Co-authored-by: tommoor <380914+tommoor@users.noreply.github.com> * Enable Corepack in CI workflow for Yarn 4.11.0 support Co-authored-by: tommoor <380914+tommoor@users.noreply.github.com> * test * module resolution --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: tommoor <380914+tommoor@users.noreply.github.com> Co-authored-by: Tom Moor <tom@getoutline.com>	2025-12-25 08:46:08 -05:00