ac5ad39515
- Dependency job is now 16 days (service env + script default); a separate weekly scan-only timer reports npm/OSV findings without changing the lockfile. - TimeoutStartSec=30min on the deps job and 20min on the deploy job (systemd's 90s default could kill a legitimate run); both scripts resolve the newest nvm Node instead of hardcoding v22.23.1. - npm override pins @tanstack/query-core to $@tanstack/react-query so a blanket npm update cannot create a second copy (the Oct 26 tsc failure). - Failed runs keep test/smoke logs + attempted package files in failures/ (rotated, 8 kept) and a last-failure marker; reports rotate (12 kept). - scripts/release.sh: notes check -> npm test -> bump -> Android build -> zsp publish -> relay verify -> commit/push + tag. - Deploy/deps systemd units are tracked under scripts/systemd/.
10 lines
342 B
Desktop File
10 lines
342 B
Desktop File
[Unit]
|
|
Description=SkateSpots scheduled dependency update + vulnerability scan
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
Environment=DEPS_INTERVAL_DAYS=16
|
|
# npm update + typecheck + tests + smoke can take several minutes; the default
|
|
# 90s systemd start timeout would kill a legitimate run.
|
|
TimeoutStartSec=30min
|
|
ExecStart=%h/SkateSpots/scripts/update-deps.sh
|