Skip to content

Add npm policy, node 24, pin CI - #479

Merged
QSparks merged 2 commits into
masterfrom
node24-npm12-security-policy
Aug 27, 2026
Merged

Add npm policy, node 24, pin CI#479
QSparks merged 2 commits into
masterfrom
node24-npm12-security-policy

Conversation

@QSparks

@QSparks QSparks commented Aug 25, 2026

Copy link
Copy Markdown
Contributor
  • Require Node 24 and npm 12.
  • Add an .npmrc security policy to reduce npm supply-chain risk
  • Bump CI actions, pin commit SHAs

Before Merge:

return to tagged versions for pcic-react-external-text and pcic-react-components

@QSparks
QSparks requested a review from Nospamas August 25, 2026 17:36
@QSparks QSparks self-assigned this Aug 25, 2026

@Nospamas Nospamas left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good once the tagged version of the libs are used.

Comment thread package.json Outdated
"moment": "^2.29.4",
"pcic-react-components": "git+https://git@github.com/pacificclimate/pcic-react-components.git#3.3.0",
"pcic-react-external-text": "git+https://git@github.com/pacificclimate/pcic-react-external-text.git#1.0.0",
"pcic-react-components": "git+https://github.com/pacificclimate/pcic-react-components.git#node24-npm12-security-policy",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Update to tagged version

@QSparks
QSparks merged commit 4e2a1ea into master Aug 27, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants