Peter Steinberger f6131a4fbf build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006) ... * build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks npm 12 removed shrinkwrap (command + tarball/root loading). Delete all 82 committed npm-shrinkwrap.json files and stop publishing lockfiles; keep pnpm-lock.yaml as the single reviewed dependency boundary. The generator becomes scripts/generate-npm-package-lock.mjs and feeds plugin bundling via a transient package-lock.json + npm ci (works on npm 11 and 12). Tarball validation treats the published 2026.7.2 beta train as a shrinkwrap transition; self-update npm detection now uses install topology instead of the shipped shrinkwrap. * fix(deps): repair lint, deadcode, and test-type lanes for the npm 12 migration - sort integrity comparisons with an explicit comparator (oxlint) - keep resolveBunGlobalNodeModules module-local (knip unused-export gate) - model npm pack --json as npm<=11 array / npm 12 name-keyed object - default calver destructuring in the tarball test fixture		2026-07-26 01:29:55 -04:00
..
audit-checks.md	docs: retire config keys that strict validation rejects (#113956)	2026-07-25 18:24:02 -07:00
dependency-locking.md	build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)	2026-07-26 01:29:55 -04:00
exposure-runbook.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
index.md	build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)	2026-07-26 01:29:55 -04:00
rate-limiting.md	docs(gateway): expand rate limiting into a full reference page	2026-07-16 22:36:23 -07:00
secure-file-operations.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00