From 015030a29fdb4fc76a14e1526eba3284be671c46 Mon Sep 17 00:00:00 2001 From: David Date: Tue, 28 Apr 2026 10:24:32 +0000 Subject: [PATCH 1/2] fix(PLT-3359): harden yarn configuration --- .github/dependabot.yml | 11 ++++++++--- .yarnrc | 2 ++ 2 files changed, 10 insertions(+), 3 deletions(-) create mode 100644 .yarnrc diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 51928d7b..c6266186 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,4 @@ version: 2 - registries: npm-github: type: npm-registry @@ -10,7 +9,6 @@ registries: url: https://github.com username: x-access-token password: '${{ secrets.GH_TOKEN }}' - updates: - package-ecosystem: npm schedule: @@ -27,7 +25,14 @@ updates: registries: - npm-github - git-github - + cooldown: + default-days: 7 + exclude: + - '@typeform/*' + ignore: + - dependency-name: semantic-release + versions: + - '>=25.0.0' - package-ecosystem: github-actions schedule: interval: weekly diff --git a/.yarnrc b/.yarnrc new file mode 100644 index 00000000..e5e34646 --- /dev/null +++ b/.yarnrc @@ -0,0 +1,2 @@ +ignore-scripts true +save-exact true From 4af4b53ad822f8a12e782736841727a4be87310c Mon Sep 17 00:00:00 2001 From: promiseNwafor Date: Fri, 1 May 2026 11:25:29 +0100 Subject: [PATCH 2/2] fix(PLT-3359): Update workflows --- .github/workflows/pull-request.yml | 3 +++ .github/workflows/visual.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index a023f1b4..9c254fbb 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -76,6 +76,9 @@ jobs: if: steps.yarn-cache.outputs.cache-hit != 'true' run: yarn install --frozen-lockfile + - name: Install Cypress binary + run: yarn cypress install + - run: yarn build - run: yarn test:functional diff --git a/.github/workflows/visual.yml b/.github/workflows/visual.yml index 72410829..8849fcbe 100644 --- a/.github/workflows/visual.yml +++ b/.github/workflows/visual.yml @@ -33,6 +33,9 @@ jobs: if: steps.yarn-cache.outputs.cache-hit != 'true' run: yarn install --frozen-lockfile + - name: Install Cypress binary + run: yarn cypress install + - run: yarn build - run: yarn test:visual