pbakaus_impeccable/tests/oracle/workspaces/live-astro/package.json at b0738a8e068aeba8d0ea59fd2d6817b79f492ae0 - pbakaus_impeccable - Gitea: Git with a cup of tea

skills/pbakaus_impeccable

mirror of https://github.com/pbakaus/impeccable.git synced 2026-09-11 21:57:14 +03:00

Files

T

b0738a8e06 Oracle fixtures: move the astro pins past the open advisories (#727 )

Dependabot has 16 open alerts on main, all of them the astro ^5.0.0 pin
in two oracle workspace fixtures. Both files move to ^7.1.0, which clears
every advisory's first-patched version (the highest is 7.1.0 for
GHSA-4g3v-8h47-v7g6).

These are test fixtures, not shipped code. Nothing a user installs reads
them: the oracle stages the workspace tree as plain files and never runs
a package install, and the engine's astro detection keys on the presence
of the dependency, not its version. The live-e2e astro fixture is a
separate tree and already pins ^7.1.0, so it is untouched.

Verified with the oracle replay (zero unreviewed differences, so no
golden moved and DELTAS.md gains no entry), plus bun run build and the
default suite with IMPECCABLE_BIN set.


Claude-Session: https://claude.ai/code/session_01Vau2X53xGTjjTCXWMVBoNY

Co-authored-by: Claude Code <noreply@anthropic.com>

2026-09-04 12:30:20 -07:00

2 lines

106 B

JSON

Raw Blame History

{ "name": "oracle-live-astro", "private": true, "type": "module", "dependencies": { "astro": "^7.1.0" } }