3 Commits

Include renames

Author	SHA1	Message	Date
Lucas Berger	6eb51078e3	feat(16-02): add check-audit.mjs blocking wrapper + unit tests ... - Exports selectBlocking() and partitionAdvisories() as pure functions for unit testing - Main body guarded by import.meta.url check (only runs when invoked directly) - Uses pnpm audit --json (no --audit-level — Pitfall 1 honored) - Exits 1 on unwaived High/Critical; exits 0 with advisory report on moderate/low - All 5 unit tests pass (node --test)	2026-06-13 05:18:19 -04:00
Lucas Berger	7ac8b19a76	test(16-02): add failing tests for check-audit.mjs filter logic ... - Tests four behavioral cases: unwaived High → blocking, waived High → not blocking, moderate/low only → not blocking, no advisories → not blocking - Uses node:test + node:assert (no extra dependencies) - Fails at RED: check-audit.mjs does not yet exist	2026-06-13 05:17:36 -04:00
Lucas Berger	0f101bdd39	chore(16-02): seed audit allowlist (esbuild GHSA waiver) + outdated pin reasons ... - audit-allowlist.json: GHSA-gv7w-rqvm-qjhr waiver (esbuild dev transitive via drizzle-kit/vitest/vite; not in production runtime) - outdated-pins.json: intentional pin reasons for eslint, @eslint/js, zod, @types/node	2026-06-13 05:17:13 -04:00