forked from cartsnitch/cartsnitch
a7a55bbf79
- Remove .mcp.json (scope creep, unrelated to CAR-1078) - Bump vitest to ^4.1.8 (fixes GHSA-5xrq-8626-4rwp critical) - Run npm audit fix for non-breaking vulns - Pin actions/checkout and actions/setup-node to commit SHAs in .gitea/workflows/ci.yml to force a clean cache fetch on the act runner (workaround for corrupted /root/.cache/act cache) Refs CAR-1162, CAR-1122, CAR-1078