authentik

mirror of https://github.com/goauthentik/authentik.git synced 2026-06-17 19:09:11 +03:00

Files

T

History

Teffen Ellis 72eb609f62 ci: install netlify-cli via npx, pinned to a major

Replace `npm install -g netlify-cli` with `npx --yes --package=netlify-cli@26`
in the source-docs publish workflow.

Two reasons:

1. A `-g` install bypasses the repo `.npmrc` (npm only walks up from the
   cwd of the install, not from the global prefix), so `ignore-scripts=true`
   and `save-exact=true` do not apply — install scripts run and a fresh
   `latest` is resolved on every CI run. `npx` invoked inside the repo
   honors the project `.npmrc`.

2. Without a version pin, every run pulls whatever `latest` happens to
   be at that moment, which is exactly the resolution behavior that the
   recent npm "Mini Shai-Hulud" incident weaponized. Pinning to `@26`
   bounds the major and lets Dependabot manage upgrades through the same
   cooldown window as everything else.

Co-authored-by: Agent <279763771+playpen-agent@users.noreply.github.com>

2026-05-19 13:30:51 +02:00

actions

ci: bump taiki-e/install-action from 2.77.6 to 2.78.1 in /.github/actions/setup (#22434 )

2026-05-18 12:48:30 +02:00

ISSUE_TEMPLATE

github: converts issue templates to forms (#18133 )

2025-11-14 14:30:05 +01:00

workflows

ci: install netlify-cli via npx, pinned to a major

2026-05-19 13:30:51 +02:00

codecov.yml

core: Defer status posts until GitHub Actions finishes. (#22340 )