ac5ad39515
- Dependency job is now 16 days (service env + script default); a separate weekly scan-only timer reports npm/OSV findings without changing the lockfile. - TimeoutStartSec=30min on the deps job and 20min on the deploy job (systemd's 90s default could kill a legitimate run); both scripts resolve the newest nvm Node instead of hardcoding v22.23.1. - npm override pins @tanstack/query-core to $@tanstack/react-query so a blanket npm update cannot create a second copy (the Oct 26 tsc failure). - Failed runs keep test/smoke logs + attempted package files in failures/ (rotated, 8 kept) and a last-failure marker; reports rotate (12 kept). - scripts/release.sh: notes check -> npm test -> bump -> Android build -> zsp publish -> relay verify -> commit/push + tag. - Deploy/deps systemd units are tracked under scripts/systemd/.
10 lines
169 B
SYSTEMD
10 lines
169 B
SYSTEMD
[Unit]
|
|
Description=Weekly SkateSpots npm/OSV vulnerability scan
|
|
|
|
[Timer]
|
|
OnCalendar=Mon 06:00
|
|
Persistent=true
|
|
RandomizedDelaySec=30min
|
|
|
|
[Install]
|
|
WantedBy=timers.target
|