Two fixes to make main ship an image again: 1. The image job used docker/login-action + build-push-action, which need a docker binary the runner's default job container does not have (the exact failure tenant-registry hit in run 5441). Rebuilt on the proven compliance build-push-deploy pattern: container docker:27-cli, plain docker login/build/push, cosign, then the HMAC-signed orca webhook over plain http like the proven compliance trigger-orca job. 2. trivy gate: postcss 8.4.31 (CVE-2026-45623, CVE-2026-73646) and sharp 0.34.5 (GHSA-f88m-g3jw-g9cj) via pnpm overrides; lockfile resolves postcss 8.5.26 / sharp 0.35.4. Local trivy scan is clean; lint, typecheck, 100% coverage and build all pass locally. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CNdLL9BdsWm7MCyui5ffPD
61 lines
1.5 KiB
JSON
61 lines
1.5 KiB
JSON
{
|
|
"name": "@breakpilot/portal",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"description": "Customer-facing portal + platform-staff backstage. Next.js + Auth.js v5.",
|
|
"license": "UNLICENSED",
|
|
"engines": {
|
|
"node": ">=20",
|
|
"pnpm": ">=9"
|
|
},
|
|
"scripts": {
|
|
"dev": "next dev --port 3000",
|
|
"build": "next build",
|
|
"start": "next start --port 3000",
|
|
"lint": "eslint . --max-warnings 0",
|
|
"typecheck": "tsc --noEmit",
|
|
"test": "vitest run --coverage",
|
|
"e2e": "playwright test",
|
|
"e2e:install": "playwright install --with-deps chromium"
|
|
},
|
|
"dependencies": {
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"geist": "^1.7.2",
|
|
"lucide-react": "^1.17.0",
|
|
"next": "16.2.11",
|
|
"next-auth": "5.0.0-beta.32",
|
|
"react": "19.0.0",
|
|
"react-dom": "19.0.0",
|
|
"tailwind-merge": "^3.6.0"
|
|
},
|
|
"devDependencies": {
|
|
"@playwright/test": "^1.60.0",
|
|
"@tailwindcss/postcss": "^4.3.0",
|
|
"@types/node": "20.16.10",
|
|
"@types/react": "19.0.1",
|
|
"@types/react-dom": "19.0.1",
|
|
"@vitest/coverage-v8": "2.1.8",
|
|
"eslint": "9.15.0",
|
|
"eslint-config-next": "16.2.6",
|
|
"msw": "^2.14.6",
|
|
"postcss": "^8.5.15",
|
|
"tailwindcss": "^4.3.0",
|
|
"typescript": "5.7.2",
|
|
"vitest": "2.1.8"
|
|
},
|
|
"msw": {
|
|
"workerDirectory": [
|
|
"public"
|
|
]
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"nanoid@<3.3.18": ">=3.3.18",
|
|
"postcss@<8.5.18": ">=8.5.18",
|
|
"@auth/core@<0.41.3": ">=0.41.3",
|
|
"sharp@<0.35.0": ">=0.35.0"
|
|
}
|
|
}
|
|
}
|