trails

trails-cool/trails

Fork 0

Commit graph

Author	SHA1	Message	Date
Ullrich Schäfer	ba64b2cd57	mobile: realign native deps with Expo SDK 56 expectations Dependabot bumped react-native-reanimated (4.4.1), react-native- safe-area-context (5.8.0), and react-native-worklets (0.9.1) past the versions Expo SDK 56 pins, which broke the native iOS build: expo's Swift macro API drifted between expo-modules-core patches and expo-crypto stopped compiling (OptimizedFunction macro mismatch). CI never caught it because nothing compiles native code; the first EAS build since the SDK 56 upgrade (d627b3c1) failed with it. Applied `npx expo install --fix` (expo ~56.0.9, reanimated 4.3.1, safe-area-context ~5.7.0, worklets 0.8.3) + pnpm dedupe, and added the SDK-pinned native packages to the dependabot ignore list so they only move via SDK bumps. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-10 03:24:00 +02:00
Ullrich Schäfer	debaf769d5	Tighten dependabot ignore rules - Skip major bumps on @types/jest + @types/node so the types stay aligned with the runtime (jest 29 with @types/jest 29, not 30). - Skip react-native itself since it's pinned by the Expo SDK and should only move when we bump Expo. Community react-native-* libraries stay on the normal weekly cadence. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-19 10:58:05 +02:00
Ullrich Schäfer	be3e69c10b	Security hardening: headers, scanning, Docker, firewall - Caddy: HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy on all responses - Caddy: Block scanner paths (.env, .git, wp-config, etc.) with 403 - CI: Gitleaks secret scanning + pnpm audit for vulnerabilities - Dependabot: Weekly npm + GitHub Actions + monthly Docker updates - Docker: Non-root user in journal, planner, and brouter containers - Server: UFW firewall (22/80/443 only) + fail2ban (8 IPs already banned) - SECURITY.md: Vulnerability disclosure policy - Privacy page: Security practices section added Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-25 09:58:12 +01:00

Author

SHA1

Message

Date

Ullrich Schäfer

ba64b2cd57

mobile: realign native deps with Expo SDK 56 expectations

Dependabot bumped react-native-reanimated (4.4.1), react-native-
safe-area-context (5.8.0), and react-native-worklets (0.9.1) past the
versions Expo SDK 56 pins, which broke the native iOS build: expo's
Swift macro API drifted between expo-modules-core patches and
expo-crypto stopped compiling (OptimizedFunction macro mismatch).
CI never caught it because nothing compiles native code; the first
EAS build since the SDK 56 upgrade (d627b3c1) failed with it.

Applied `npx expo install --fix` (expo ~56.0.9, reanimated 4.3.1,
safe-area-context ~5.7.0, worklets 0.8.3) + pnpm dedupe, and added
the SDK-pinned native packages to the dependabot ignore list so they
only move via SDK bumps.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-10 03:24:00 +02:00

Ullrich Schäfer

debaf769d5

Tighten dependabot ignore rules

- Skip major bumps on @types/jest + @types/node so the types stay
  aligned with the runtime (jest 29 with @types/jest 29, not 30).
- Skip react-native itself since it's pinned by the Expo SDK and
  should only move when we bump Expo. Community react-native-*
  libraries stay on the normal weekly cadence.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-19 10:58:05 +02:00

Ullrich Schäfer

be3e69c10b

Security hardening: headers, scanning, Docker, firewall

- Caddy: HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy,
  Permissions-Policy on all responses
- Caddy: Block scanner paths (.env, .git, wp-config, etc.) with 403
- CI: Gitleaks secret scanning + pnpm audit for vulnerabilities
- Dependabot: Weekly npm + GitHub Actions + monthly Docker updates
- Docker: Non-root user in journal, planner, and brouter containers
- Server: UFW firewall (22/80/443 only) + fail2ban (8 IPs already banned)
- SECURITY.md: Vulnerability disclosure policy
- Privacy page: Security practices section added

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-25 09:58:12 +01:00

3 commits