ac5ad39515
- Dependency job is now 16 days (service env + script default); a separate weekly scan-only timer reports npm/OSV findings without changing the lockfile. - TimeoutStartSec=30min on the deps job and 20min on the deploy job (systemd's 90s default could kill a legitimate run); both scripts resolve the newest nvm Node instead of hardcoding v22.23.1. - npm override pins @tanstack/query-core to $@tanstack/react-query so a blanket npm update cannot create a second copy (the Oct 26 tsc failure). - Failed runs keep test/smoke logs + attempted package files in failures/ (rotated, 8 kept) and a last-failure marker; reports rotate (12 kept). - scripts/release.sh: notes check -> npm test -> bump -> Android build -> zsp publish -> relay verify -> commit/push + tag. - Deploy/deps systemd units are tracked under scripts/systemd/.
7 lines
196 B
Desktop File
7 lines
196 B
Desktop File
[Unit]
|
|
Description=SkateSpots weekly vulnerability scan (report only, no lockfile changes)
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
TimeoutStartSec=15min
|
|
ExecStart=%h/SkateSpots/scripts/update-deps.sh --scan-only
|