From 72d3d3fc9f497a31a24ebb9161c62f5ef90c8dad Mon Sep 17 00:00:00 2001 From: Ahmed Mahmud Date: Mon, 5 Oct 2026 20:56:45 +0100 Subject: [PATCH 1/3] fix(ci): pin TypeScript and make lint non-mutating --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 81cfbe13..5b182f0a 100644 --- a/package.json +++ b/package.json @@ -16,7 +16,7 @@ "start:dev": "nest start --watch", "start:debug": "nest start --debug --watch", "start:prod": "node dist/main", - "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix", + "lint": "eslint \"{src,apps,libs,test}/**/*.ts\"", "type-check": "tsc --noEmit", "test": "jest", "test:watch": "jest --watch", @@ -112,7 +112,7 @@ "ts-loader": "^9.6.2", "ts-node": "^10.9.2", "tsconfig-paths": "^4.2.0", - "typescript": "^7.0.2", + "typescript": "6.0.3", "typescript-eslint": "^8.70.1" } } From 8b2f5720f8203a9db3826151c91fca3f159b2624 Mon Sep 17 00:00:00 2001 From: Ahmed Mahmud Date: Mon, 5 Oct 2026 20:56:47 +0100 Subject: [PATCH 2/3] fix(ci): lock TypeScript 6.0.3 deterministically --- package-lock.json | 36 ++++++++---------------------------- 1 file changed, 8 insertions(+), 28 deletions(-) diff --git a/package-lock.json b/package-lock.json index 91824e7d..630830e2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -86,7 +86,7 @@ "ts-loader": "^9.6.2", "ts-node": "^10.9.2", "tsconfig-paths": "^4.2.0", - "typescript": "^7.0.2", + "typescript": "6.0.3", "typescript-eslint": "^8.70.1" }, "engines": { @@ -16576,37 +16576,17 @@ } }, "node_modules/typescript": { - "version": "7.0.2", - "resolved": "https://registry.npmjs.org/typescript/-/typescript-7.0.2.tgz", - "integrity": "sha512-8FYau96o3NKOhbjKi/qNvG/W5jhzxkbdm5sj9AbZ/5T5sWqn3hJgLfGx27sRKZWTvyzCP8dLRBTf5tBTSRVUNA==", + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/typescript/-/typescript-6.0.3.tgz", + "integrity": "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==", + "dev": true, "license": "Apache-2.0", "bin": { - "tsc": "bin/tsc" + "tsc": "bin/tsc", + "tsserver": "bin/tsserver" }, "engines": { - "node": ">=16.20.0" - }, - "optionalDependencies": { - "@typescript/typescript-aix-ppc64": "7.0.2", - "@typescript/typescript-darwin-arm64": "7.0.2", - "@typescript/typescript-darwin-x64": "7.0.2", - "@typescript/typescript-freebsd-arm64": "7.0.2", - "@typescript/typescript-freebsd-x64": "7.0.2", - "@typescript/typescript-linux-arm": "7.0.2", - "@typescript/typescript-linux-arm64": "7.0.2", - "@typescript/typescript-linux-loong64": "7.0.2", - "@typescript/typescript-linux-mips64el": "7.0.2", - "@typescript/typescript-linux-ppc64": "7.0.2", - "@typescript/typescript-linux-riscv64": "7.0.2", - "@typescript/typescript-linux-s390x": "7.0.2", - "@typescript/typescript-linux-x64": "7.0.2", - "@typescript/typescript-netbsd-arm64": "7.0.2", - "@typescript/typescript-netbsd-x64": "7.0.2", - "@typescript/typescript-openbsd-arm64": "7.0.2", - "@typescript/typescript-openbsd-x64": "7.0.2", - "@typescript/typescript-sunos-x64": "7.0.2", - "@typescript/typescript-win32-arm64": "7.0.2", - "@typescript/typescript-win32-x64": "7.0.2" + "node": ">=14.17" } }, "node_modules/typescript-eslint": { From 2759d9e1ee5c6a05d32763d5dcbe44a450984a54 Mon Sep 17 00:00:00 2001 From: Ahmed Mahmud Date: Mon, 5 Oct 2026 20:56:49 +0100 Subject: [PATCH 3/3] fix(ci): checkout before sensitive path evaluation --- .github/workflows/ci.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ffde14da..76ff5f7b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -153,6 +153,11 @@ jobs: contents: read runs-on: ubuntu-latest steps: + - name: Checkout code + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + fetch-depth: 0 + - name: Check for sensitive changes uses: dorny/paths-filter@v4 id: filter