fix: add markdownlint config to resolve CI failures (PRI-589)

Cherry-picked from PR #9 original commit, removing out-of-scope tar/undici dependency changes that should not have been included. Co-Authored-By: Paperclip <noreply@paperclip.ing>
Cleanup: consolidate dual override blocks in package.json (#8 )
2026-05-04 21:19:09 +00:00 · 2026-05-04 21:03:17 +00:00 · 2026-05-04 18:59:37 +00:00 · 2026-05-04 18:26:45 +00:00 · 2026-05-04 03:24:00 +00:00
4 changed files with 10 additions and 5 deletions
@@ -2,9 +2,13 @@ name: CI

 on:
  push:
-    branches: [main]
+    branches: ['**']
  pull_request:
-    branches: [main]
+    branches: [main, dev]
+  workflow_dispatch:
+
+permissions:
+  contents: read

 jobs:
  ci:
@@ -32,3 +32,4 @@ gh workflow run Release --field version=0.1.0
 ## License

 Apache-2.0
+
@@ -55,4 +55,4 @@
    "typescript": "~5.6.2",
    "vitest": "^3.0.5"
  }
-}
+}
@@ -6229,7 +6229,7 @@ snapshots:
      jsdom: 24.1.3
      jsonpath-plus: 10.4.0
      lodash: 4.18.1
-      material-react-table: 2.13.3(330725fe5432f245d076f0c0dda1a7a7)
+      material-react-table: 2.13.3(0078ddeddc9e779fa84c03996c1db10e)
      monaco-editor: 0.52.2
      msw: 2.4.9(typescript@5.6.2)
      msw-storybook-addon: 2.0.3(msw@2.4.9(typescript@5.6.3))
@@ -9931,7 +9931,7 @@ snapshots:
      '@types/minimatch': 3.0.5
      minimatch: 3.1.5

-  material-react-table@2.13.3(330725fe5432f245d076f0c0dda1a7a7):
+  material-react-table@2.13.3(0078ddeddc9e779fa84c03996c1db10e):
    dependencies:
      '@emotion/react': 11.14.0(@types/react@18.3.28)(react@18.3.1)
      '@emotion/styled': 11.14.1(@emotion/react@11.14.0(@types/react@19.2.14)(react@18.3.1))(@types/react@18.3.28)(react@18.3.1)
Author	SHA1	Message	Date
Chris Farhood	de8a20f99a	fix: add markdownlint config to resolve CI failures (PRI-589) Cherry-picked from PR #9 original commit, removing out-of-scope tar/undici dependency changes that should not have been included. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-04 21:19:09 +00:00
privilegedescalation-engineer[bot]	320154f29b	Cleanup: consolidate dual override blocks in package.json (#8 ) Removed duplicate tar/undici devDeps (already pinned in pnpm.overrides), removed stale overrides.lodash block, regenerated lockfile. QA: privilegedescalation-qa ✅ \| CTO: privilegedescalation-cto ✅ \| CI: green ✅	2026-05-04 21:03:17 +00:00
privilegedescalation-engineer[bot]	34f6e0e13b	fix(ci): add dev branch to pull_request trigger Aligns PR trigger with push trigger. QA approved (PRI-547), CTO approved, CI green.	2026-05-04 18:59:37 +00:00
privilegedescalation-engineer[bot]	557a00a758	fix: enable CI on feature branches and add workflow_dispatch (#13 ) Fixes PRI-524. Changes push trigger from branches:[main] to branches:['**'] so CI fires on every branch. Adds workflow_dispatch for manual trigger. Adds permissions: contents: read for least-privilege hardening. All gates clear: CI green, UAT correctly skipped (YAML-only), QA approved (Regina), CTO approved (Nancy).	2026-05-04 18:26:45 +00:00
privilegedescalation-engineer[bot]	730f7cbe54	fix: override lodash >=4.18.0 to patch code injection vulnerability (#7 ) * fix: override lodash >=4.18.0 to patch code injection vulnerability GHSA-r5fr-rjxr-66jc is a code injection vulnerability in lodash below 4.18.0. The vulnerable transitive dependency comes through @kinvolk/headlamp-plugin. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * Regenerate lockfile for lodash override Co-Authored-By: Paperclip <noreply@paperclip.ing> --------- Co-authored-by: Gandalf the Greybeard <gandalf@privilegedescalation.dev> Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com> Co-authored-by: Chris Farhood <chris@farhood.org> Co-authored-by: Paperclip <noreply@paperclip.ing>	2026-05-04 03:24:00 +00:00