Sprint 5 gateway baseline and dependency refresh - #14
Merged
Conversation
on-behalf-of: @Azure opensource@microsoft.com
…ub.com/simonhagger/angulectron into feat/sprint5-gateway-registry-baseline
- move js-yaml/immutable pins from npm-style top-level overrides into pnpm.overrides so they are actually honored by pnpm - scope the js-yaml override to the vulnerable 4.x range so existing js-yaml@3 consumers keep their major - regenerate lockfile and dedupe stale @angular/core@21.2.9 peer-resolution variants left behind by the partial upgrade - declare electron-updater explicitly: the strict refreshed graph no longer carries it transitively and updates-handlers.ts imports it - remove unused Azure Static Web Apps workflow whose Build and Deploy job failed on every PR for this desktop-only workspace - result: pnpm audit --prod reports no known vulnerabilities
Formatting-only changes (verified with git diff --ignore-all-space: no content delta) resolving repo-wide prettier drift that failed the format:check CI gate on PR #14.
…list The overrides introduced for js-yaml/immutable were added as a second top-level pnpm key, which JSON parsing resolves in favor of the last occurrence and silently dropped onlyBuiltDependencies. Without the allowlist, Electron's postinstall is skipped on clean installs and desktop-main unit tests fail on CI with 'Electron failed to install correctly'.
10 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
What Changed
Validation
pnpm run typecheckpnpm run lintpnpm unit-testpnpm integration-testpnpm e2e-smoke(not run in this session)pnpm a11y-e2e(not run in this session)Security (Required For Sensitive Changes)
Threat Model Note