Repository navigation

fix(runtime-host): preserve Windows startup diagnostics #651

	name: Dependency audit

	on:
	schedule:
	# Offset from the hour to reduce peak-time scheduling delays.
	- cron: '17 3 * * *'
	workflow_dispatch:
	pull_request:
	paths:
	- .github/workflows/dependency-audit.yml
	- package.json
	- package-lock.json
	- 'apps/*/package.json'
	- 'packages/*/package.json'
	push:
	branches: [main]
	paths:
	- package.json
	- package-lock.json
	- 'apps/*/package.json'
	- 'packages/*/package.json'

	permissions:
	contents: read

	concurrency:
	group: dependency-audit-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	audit:
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- name: Check out the repository
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Set up Node.js
	uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
	with:
	node-version: '24'
	cache: npm

	- name: Install dependencies
	run: npm ci --ignore-scripts --omit=dev

	- name: Audit production dependencies
	run: npm audit --omit=dev --audit-level=moderate

	- name: Verify registry signatures
	run: npm audit signatures --omit=dev