Marcel e8057fe517 chore(ci): add npm audit --audit-level=high gate to CI pipeline ...

Blocks merges when any HIGH or CRITICAL advisory enters the production
dependency tree. Runs after npm ci (or cache restore) and before lint,
so a failing audit surfaces immediately without wasting test time.

Closes the systemic gap from pre-prod audit finding F-22 (dependency
hygiene). Renovate automation is tracked separately.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-19 13:56:03 +02:00

..

ci.yml

chore(ci): add npm audit --audit-level=high gate to CI pipeline

2026-05-19 13:56:03 +02:00

coverage-flake-probe.yml

ci(workflows): downgrade upload-artifact v4 → v3 — Gitea act_runner limitation (ADR-014)

2026-05-14 10:58:19 +02:00

nightly.yml

fix(ci): use Bash array for curl --resolve to fix smoke tests

2026-05-18 12:01:44 +02:00

release.yml

fix(ci): use Bash array for curl --resolve to fix smoke tests

2026-05-18 12:01:44 +02:00