ehoandClaude Opus 5
1866947438
CI / changes (push) Successful in 7s
CI / lint (push) Successful in 1m57s
CI / frontend (push) Successful in 2m45s
CI / backend (push) Successful in 1m57s
CI / e2e (push) Failing after 4m10s
CI / semgrep (push) Successful in 1m18s
CI / api-client-drift (push) Successful in 2m9s
CI / storybook-a11y (push) Successful in 11m5s
Angular 22.1.x emits `var(--%NS%name)` for every CSS custom property in a component `styles:` block. No `@angular/core` release substitutes the placeholder, so all `--rhc-*` tokens resolve to nothing and the UI breaks. `npm run ci` does not catch it; only the Storybook axe job does. Pin every `@angular*` entry to the exact version 22.0.5, so a plain `npm install` cannot pull 22.1.x back in. Holding at 22.0.5 leaves three moderate advisories open, which made the audit step fail: GHSA-p297-fm68-3q8c and GHSA-hh8m-fm6v-7cvg. Neither is reachable. The app calls no `withRequestsMadeViaParent` and no `provideClientHydration`, and binds no untrusted value into a directive host binding. The audit gate therefore runs at `--audit-level=high`. A high advisory still fails the build. Restore the default audit level together with the upgrade, after an Angular release substitutes the placeholder. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
103 lines
5.0 KiB
JSON
103 lines
5.0 KiB
JSON
{
|
|
"name": "atomic-design-poc",
|
|
"version": "0.0.0",
|
|
"scripts": {
|
|
"ng": "ng",
|
|
"lint": "eslint .",
|
|
"typecheck": "tsc --noEmit -p apps/ssp/tsconfig.spec.json --rootDir . && tsc --noEmit -p apps/behandelportal/tsconfig.spec.json --rootDir . && tsc --noEmit -p libs/shared/tsconfig.spec.json --rootDir . && tsc --noEmit -p libs/beheer/tsconfig.spec.json --rootDir .",
|
|
"format:check": "prettier --check .",
|
|
"format": "prettier --write .",
|
|
"start": "ng serve ssp",
|
|
"start:behandelportal": "ng serve behandelportal",
|
|
"gen:api": "cd backend && dotnet tool restore && dotnet build src/BigRegister.Api -v q && ASPNETCORE_ENVIRONMENT=Development dotnet swagger tofile --output swagger.json src/BigRegister.Api/bin/Debug/net10.0/BigRegister.Api.dll v1 && cd .. && nswag run nswag.json",
|
|
"build": "ng build ssp && ng build behandelportal",
|
|
"watch": "ng build ssp --watch --configuration development",
|
|
"test": "ng test ssp && ng test behandelportal && ng test shared && ng test beheer",
|
|
"test:coverage": "ng test ssp --configuration coverage && ng test behandelportal --configuration coverage && ng test shared --configuration coverage && ng test beheer --configuration coverage",
|
|
"storybook": "ng run ssp:storybook",
|
|
"storybook:behandelportal": "ng run behandelportal:storybook",
|
|
"build-storybook": "ng run ssp:build-storybook",
|
|
"build-storybook:behandelportal": "ng run behandelportal:build-storybook",
|
|
"test-storybook": "test-storybook --config-dir .storybook-ssp",
|
|
"test-storybook:behandelportal": "test-storybook --config-dir .storybook-behandelportal",
|
|
"test-storybook:ci": "concurrently -k -s first -n sb,axe \"http-server storybook-static -p 6006 --silent\" \"wait-on tcp:127.0.0.1:6006 && test-storybook --config-dir .storybook-ssp --url http://127.0.0.1:6006 --maxWorkers=2\"",
|
|
"test-storybook:ci:behandelportal": "concurrently -k -s first -n sb,axe \"http-server storybook-static-behandelportal -p 6007 --silent\" \"wait-on tcp:127.0.0.1:6007 && test-storybook --config-dir .storybook-behandelportal --url http://127.0.0.1:6007 --maxWorkers=2\"",
|
|
"check:tokens": "bash scripts/check-tokens.sh",
|
|
"check:seam": "bash scripts/check-seam.sh",
|
|
"dep:check": "depcruise apps/ssp/src libs --config .dependency-cruiser.ssp.js && depcruise apps/behandelportal/src libs --config .dependency-cruiser.behandelportal.js",
|
|
"dep:graph": "bash scripts/dep-graph.sh",
|
|
"gen:snippets": "node scripts/gen-snippets.mjs",
|
|
"gen:behaviour-spec": "node scripts/gen-behaviour-spec.mjs",
|
|
"gen": "plop",
|
|
"gen:value-object": "plop value-object",
|
|
"gen:form-machine": "plop form-machine",
|
|
"gen:context": "plop context",
|
|
"create-frontend": "node scripts/create-frontend.mjs",
|
|
"serve:i18n": "ng build ssp --configuration development --localize && node scripts/serve-i18n.mjs",
|
|
"ci": "bash scripts/ci-local.sh",
|
|
"e2e": "playwright test",
|
|
"extract-i18n": "ng extract-i18n ssp --output-path apps/ssp/src/locale",
|
|
"extract-i18n:behandelportal": "ng extract-i18n behandelportal --output-path apps/behandelportal/src/locale"
|
|
},
|
|
"private": true,
|
|
"packageManager": "npm@11.12.1",
|
|
"dependencies": {
|
|
"@angular/common": "22.0.5",
|
|
"@angular/compiler": "22.0.5",
|
|
"@angular/core": "22.0.5",
|
|
"@angular/forms": "22.0.5",
|
|
"@angular/platform-browser": "22.0.5",
|
|
"@angular/router": "22.0.5",
|
|
"rxjs": "~7.8.0",
|
|
"tslib": "^2.3.0"
|
|
},
|
|
"devDependencies": {
|
|
"@angular-devkit/architect": "0.2200.5",
|
|
"@angular-devkit/build-angular": "22.0.5",
|
|
"@angular-devkit/core": "22.0.5",
|
|
"@angular/build": "22.0.5",
|
|
"@angular/cli": "22.0.5",
|
|
"@angular/compiler-cli": "22.0.5",
|
|
"@angular/localize": "22.0.5",
|
|
"@angular/platform-browser-dynamic": "22.0.5",
|
|
"@compodoc/compodoc": "^1.2.1",
|
|
"@playwright/test": "^1.61.1",
|
|
"@storybook/addon-a11y": "^10.4.6",
|
|
"@storybook/addon-docs": "^10.4.6",
|
|
"@storybook/addon-onboarding": "^10.4.6",
|
|
"@storybook/angular": "^10.4.6",
|
|
"@storybook/test-runner": "^0.24.4",
|
|
"@vitest/coverage-v8": "^4.1.9",
|
|
"angular-eslint": "^22.0.0",
|
|
"axe-playwright": "^2.2.2",
|
|
"concurrently": "^10.0.3",
|
|
"dependency-cruiser": "^18.1.0",
|
|
"eslint": "^10.6.0",
|
|
"http-server": "^14.1.1",
|
|
"jsdom": "^29.0.0",
|
|
"nswag": "^14.7.1",
|
|
"plop": "^4.0.5",
|
|
"prettier": "^3.8.1",
|
|
"remark-gfm": "^4.0.1",
|
|
"storybook": "^10.4.6",
|
|
"typescript": "~6.0.2",
|
|
"typescript-eslint": "^8.62.0",
|
|
"vitest": "^4.0.8",
|
|
"wait-on": "^9.0.10"
|
|
},
|
|
"comment-overrides": "Pin patched versions of vulnerable DEV/BUILD-only transitive deps (Storybook + build chain). The shipped app already audits clean; this clears the dev-tooling advisories without downgrading Angular 22.",
|
|
"overrides": {
|
|
"@babel/core": "^7.29.7",
|
|
"picomatch": "^4.0.4",
|
|
"esbuild": "^0.28.1",
|
|
"http-proxy-middleware": "^3.0.7",
|
|
"ajv": "^8.20.0",
|
|
"webpack-dev-server": "^5.2.5",
|
|
"sockjs": "^0.3.24",
|
|
"uuid": "^11.1.1",
|
|
"eslint": {
|
|
"ajv": "^6.12.6"
|
|
}
|
|
}
|
|
}
|