9543b3c9f6
ci: Consistent NPM versions via Corepack ( #20400 )
...
* core: add .npmrc baseline to block dependency lifecycle scripts
Set ignore-scripts=true at the repo root, plus engine-strict, save-exact,
audit, and prefer-offline. This neutralizes the dominant npm supply-chain
attack vector — postinstall scripts in transitive dependencies — at the
cost of requiring an explicit rebuild for the handful of packages that
legitimately need install scripts (esbuild, chromedriver, tree-sitter,
tree-sitter-json). The next commit wires that rebuild into the Makefile.
Co-Authored-By: Playpen Agent <279763771+playpen-agent@users.noreply.github.com >
* core: route node installs through make to retire website preinstall hook
Make docs-install depend on a new root-node-install so the root deps
are guaranteed before the website install runs, removing the need for
the website/preinstall lifecycle script. Rebuild the small audited list
of trusted packages (esbuild, chromedriver, tree-sitter, tree-sitter-json)
after the web install so ignore-scripts=true remains the only path that
needs maintenance. web/README documents the new workflow.
Co-Authored-By: Playpen Agent <279763771+playpen-agent@users.noreply.github.com >
* Clean up install scripts.
* Track .npmrc in CODEOWNERS
* Fix formatter config. Reformat.
* Fix mounted references.
* Flesh out node scripts.
* Bump engines.
* Prep containers.
* Update makefile.
* Flesh out github actions.
* Clean up docs container.
* lint.
Bump.
Lint.
Bump NPM version.
* Add limits.
* collapse the composite's three setup-node calls to one cache restore
* Add SHA.
* Bump NPM range.
* Run formatter.
* Bump NPM.
* Remove extra install.
* Fix website deps.
* Use local prettier. Fix drift in CI.
* ci: build frontend in CI with node_env production
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Install docusaurus config.
* Fix linter warning, order.
* Add linter commands.
* Add timeout.
* Remove pre install check.
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Playpen Agent <279763771+playpen-agent@users.noreply.github.com >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2026-05-13 22:05:07 +00:00
dec8a03560
core: bump library/node from 74ff139 to 7a99c60 in /website ( #22213 )
...
Bumps library/node from `74ff139` to `7a99c60`.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.9.0-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 13:19:13 +02:00
a8e69b391e
core: bump library/nginx from 6e23479 to 1881968 in /website ( #22214 )
...
Bumps library/nginx from `6e23479` to `1881968`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 13:19:05 +02:00
6d274d1e3d
core: bump library/nginx from 3acc8b9 to 6e23479 in /website ( #21794 )
...
Bumps library/nginx from `3acc8b9` to `6e23479`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-23 11:20:09 +02:00
8d5489e441
core: bump library/node from b272ff1 to 74ff139 in /website ( #21795 )
...
Bumps library/node from `b272ff1` to `74ff139`.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.9.0-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-23 11:19:56 +02:00
3f4c0fb35d
core: bump library/nginx from 7f0adca to 3acc8b9 in /website ( #21775 )
...
Bumps library/nginx from `7f0adca` to `3acc8b9`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 17:32:46 +02:00
42d87072cf
core: bump library/node from f57f0c7 to b272ff1 in /website ( #21776 )
...
core: bump library/node from `f57f0c7` to `7e77811` in /website
Bumps library/node from `f57f0c7` to `7e77811`.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.9.0-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 17:32:36 +02:00
cc62f2b3f8
lifecycle/container: fix OCI image labels ( #21574 )
...
Co-authored-by: Dominic R <dominic@sdko.org >
Co-authored-by: Erwan Hervé <erwan@herve.tech >
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2026-04-14 14:47:16 +02:00
1ba4746274
core: bump library/nginx from e2e661b to 7f0adca in /website ( #21502 )
...
Bumps library/nginx from `e2e661b` to `7f0adca`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-09 11:33:03 +01:00
6415c54882
core: bump library/nginx from 7150b3a to e2e661b in /website ( #21462 )
...
Bumps library/nginx from `7150b3a` to `e2e661b`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 11:45:38 +02:00
392d5099d3
core: bump library/node from 6caf08a to f57f0c7 in /website ( #21463 )
...
Bumps library/node from `6caf08a` to `f57f0c7`.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.9.0-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 11:45:27 +02:00
1c8a082760
core: bump library/node from 25.8.2-trixie to 25.9.0-trixie in /website ( #21372 )
...
Bumps library/node from 25.8.2-trixie to 25.9.0-trixie.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.9.0-trixie
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03 15:42:03 +02:00
412a7fbea5
core: bump library/node from 25.8.1-trixie to 25.8.2-trixie in /website ( #21163 )
...
Bumps library/node from 25.8.1-trixie to 25.8.2-trixie.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.8.2-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-26 10:18:30 +00:00
4a5902c3f2
core: bump library/nginx from dec7a90 to 7150b3a in /website ( #21137 )
...
Bumps library/nginx from `dec7a90` to `7150b3a`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-25 13:00:28 +00:00
acaf3d09a8
core: bump library/node from 407d745 to 394048f in /website ( #20973 )
...
Bumps library/node from `407d745` to `394048f`.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.8.1-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 10:04:36 +01:00
d60aa804f6
core: bump library/nginx from bc45d24 to dec7a90 in /website ( #20974 )
...
Bumps library/nginx from `bc45d24` to `dec7a90`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 10:04:25 +01:00
ac4a3884c1
core: bump library/nginx from d0913a1 to bc45d24 in /website ( #20853 )
...
Bumps library/nginx from `d0913a1` to `bc45d24`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 12:22:04 +01:00
7bca2255a8
core: bump library/node from d025db2 to 407d745 in /website ( #20943 )
...
Bumps library/node from `d025db2` to `407d745`.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.8.1-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 12:16:45 +01:00
9556528fd3
core: bump library/node from 25.8.0-trixie to 25.8.1-trixie in /website ( #20854 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-12 12:43:58 +00:00
4f94843fe3
core: bump library/nginx from 0236ee0 to d0913a1 in /website ( #20843 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-11 14:27:52 +01:00
1d78db87bf
core: bump library/node from 25.7.0-trixie to 25.8.0-trixie in /website ( #20706 )
...
Bumps library/node from 25.7.0-trixie to 25.8.0-trixie.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.8.0-trixie
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-04 09:46:31 +01:00
663a28ac84
core: bump library/node from 25.6.1-trixie to 25.7.0-trixie in /website ( #20591 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 18:47:30 +01:00
af5d235afd
core: bump library/nginx from 0d1b1f0 to 0236ee0 in /website ( #20592 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 18:47:28 +01:00
e59c380ac5
web: bump @types/node from 25.3.0 to 25.3.1 in /web ( #20596 )
...
* web: bump engine configs, paths.
* Fix mounted references.
* web: bump @types/node from 25.3.0 to 25.3.1 in /web
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.3.0 to 25.3.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* Fix package resolution.
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Teffen Ellis <592134+GirlBossRush@users.noreply.github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-26 19:11:12 +01:00
e0c36da8f9
core: bump library/nginx from 341bf0f to 0d1b1f0 in /website ( #20559 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 14:12:04 +01:00
b152cb4323
core: bump library/node from 43d1f7a to c58d9e7 in /website ( #20558 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 14:11:57 +01:00
5790316616
core: bump library/node from 25.6.0-trixie to 25.6.1-trixie in /website ( #20220 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-12 12:48:35 +01:00
17293735db
core: bump library/nginx from b17697e to 341bf0f in /website ( #20077 )
...
Bumps library/nginx from `b17697e` to `341bf0f`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-06 14:07:25 +01:00
5ec14ee0ae
core: bump library/nginx from 9dd2888 to b17697e in /website ( #20036 )
...
Bumps library/nginx from `9dd2888` to `b17697e`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-05 12:13:52 +01:00
c8c0c79106
core: bump library/node from 25.5.0-trixie to 25.6.0-trixie in /website ( #20007 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-04 13:50:52 +00:00
ab660c6f44
core: bump library/nginx from 7fe5dda to 9dd2888 in /website ( #20006 )
...
Bumps library/nginx from `7fe5dda` to `9dd2888`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-04 13:56:38 +01:00
83b6112f8d
core: bump library/nginx from c881927 to 7fe5dda in /website ( #19961 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 16:33:51 +01:00
90e65dbea4
core: bump library/node from 25.4.0-trixie to 25.5.0-trixie in /website ( #19805 )
...
Bumps library/node from 25.4.0-trixie to 25.5.0-trixie.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.5.0-trixie
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-28 14:45:19 +01:00
43fb92756c
core: bump library/node from 25.3.0-trixie to 25.4.0-trixie in /website ( #19632 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-21 13:57:52 +01:00
41e99b5d16
core: bump library/nginx from e3a22a7 to c881927 in /website ( #19469 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-15 12:18:40 +00:00
6e46b1ff3b
core: bump library/node from 25.2.1-trixie to 25.3.0-trixie in /website ( #19468 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-15 12:56:21 +01:00
59f762bc0a
core: bump library/nginx from 06eb0c8 to e3a22a7 in /website ( #19394 )
...
Bumps library/nginx from `06eb0c8` to `e3a22a7`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-14 14:44:12 +01:00
f50796d7d2
core: bump library/node from 03729a7 to 6222695 in /website ( #19393 )
...
Bumps library/node from `03729a7` to `6222695`.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.2.1-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-14 14:43:51 +01:00
4a01940236
core: bump library/nginx from 7272239 to 06eb0c8 in /website ( #19350 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 13:29:38 +01:00
a2f911deef
core: bump library/nginx from ca871a8 to 7272239 in /website ( #19334 )
...
Bumps library/nginx from `ca871a8` to `7272239`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-12 15:10:18 +01:00
79b01f8c56
core: bump library/node from ccfd9da to 03729a7 in /website ( #19125 )
...
Bumps library/node from `ccfd9da` to `03729a7`.
---
updated-dependencies:
- dependency-name: library/node
dependency-version: 25.2.1-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 15:08:32 +01:00
84fa4f9dc8
core: bump library/nginx from ad85427 to ca871a8 in /website ( #19126 )
...
Bumps library/nginx from `ad85427` to `ca871a8`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 14:06:53 +01:00
32cb16ec2f
core: bump library/nginx from fb01117 to ad85427 in /website ( #19112 )
...
Bumps library/nginx from `fb01117` to `ad85427`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-30 13:08:08 +01:00
646a0d3692
root: move docker files to lifecycle/containers and change docker-compose to compose ( #16624 )
2025-12-18 18:23:54 -06:00
49fafa1e7c
core: bump library/nginx from 325b00a to fb01117 in /website ( #18737 )
...
Bumps library/nginx from `325b00a` to `fb01117`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-11 12:51:18 +01:00
d78ae5c55e
core: bump library/nginx from e21f8d0 to 325b00a in /website ( #18724 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 14:07:54 +01:00
ca714d819c
core: bump library/node from 7942b33 to ccfd9da in /website ( #18725 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 14:07:46 +01:00
d728b74825
core: bump library/nginx from 553f64a to e21f8d0 in /website ( #18698 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-09 16:16:43 +00:00
1474c65e11
website: Docusaurus 3.9.2 ( #18506 )
2025-12-02 19:17:52 +00:00
31b7bada88
core: bump library/nginx from b5b9e01 to 553f64a in /website ( #18253 )
...
Bumps library/nginx from `b5b9e01` to `553f64a`.
---
updated-dependencies:
- dependency-name: library/nginx
dependency-version: 1.29-trixie
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-19 11:25:31 +01:00
Teffen Ellis
dependabot[bot]
Erwan Hervé
Connor Peshek