SkateSpots/scripts/install-deps-timer.sh
SkateSpots ac5ad39515 chore(ops): 16-day deps gate, weekly CVE scan, overrides, release helper
- Dependency job is now 16 days (service env + script default); a separate
  weekly scan-only timer reports npm/OSV findings without changing the lockfile.
- TimeoutStartSec=30min on the deps job and 20min on the deploy job (systemd's
  90s default could kill a legitimate run); both scripts resolve the newest nvm
  Node instead of hardcoding v22.23.1.
- npm override pins @tanstack/query-core to $@tanstack/react-query so a blanket
  npm update cannot create a second copy (the Oct 26 tsc failure).
- Failed runs keep test/smoke logs + attempted package files in failures/
  (rotated, 8 kept) and a last-failure marker; reports rotate (12 kept).
- scripts/release.sh: notes check -> npm test -> bump -> Android build ->
  zsp publish -> relay verify -> commit/push + tag.
- Deploy/deps systemd units are tracked under scripts/systemd/.
2026-10-27 09:09:45 +07:00

18 lines
624 B
Bash
Executable file

#!/usr/bin/env bash
#
# Install the dependency-update + vulnerability-scan systemd user timers.
# scripts/install-deps-timer.sh
set -euo pipefail
SRC="$(cd "$(dirname "$0")/systemd" && pwd)"
DEST="$HOME/.config/systemd/user"
mkdir -p "$DEST"
cp "$SRC/skatespots-deps.service" "$DEST/"
cp "$SRC/skatespots-deps.timer" "$DEST/"
cp "$SRC/skatespots-deps-scan.service" "$DEST/"
cp "$SRC/skatespots-deps-scan.timer" "$DEST/"
systemctl --user daemon-reload
systemctl --user enable --now skatespots-deps.timer skatespots-deps-scan.timer
systemctl --user list-timers skatespots-deps.timer skatespots-deps-scan.timer --no-pager