scripts/update-deps.sh (systemd user timer skatespots-deps.timer, daily tick, self-gated to 20 days): scans npm outdated + npm audit, applies non-breaking updates only, gates on npm test + smoke, then commits+pushes on green or restores the lockfile on red. Never --force; skips on a dirty tree; bounds the signed push.
6 lines
150 B
Desktop File
6 lines
150 B
Desktop File
[Unit]
|
|
Description=SkateSpots scheduled dependency update + vulnerability scan
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=%h/SkateSpots/scripts/update-deps.sh
|