- Bump next 16.2.2 -> 16.2.3 (GHSA-q4gf-8mx6-v5v3 RSC DoS) - pnpm overrides: minimatch>=10.2.3, picomatch>=4.0.4, tar>=7.5.11 (CVE-2026-27903/27904, 33671, 29786, 31802) - Dockerfile runner: apk upgrade --no-cache pulls patched openssl 3.5.6-r0 and zlib 1.3.2-r0 before installing wget (CVE-2026-28390, 22184) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
72 lines
1.1 KiB
Plaintext
72 lines
1.1 KiB
Plaintext
# dependencies
|
|
node_modules/
|
|
.pnpm-store/
|
|
.pnp.*
|
|
.yarn/*
|
|
!.yarn/patches
|
|
!.yarn/plugins
|
|
!.yarn/releases
|
|
!.yarn/sdks
|
|
!.yarn/versions
|
|
|
|
# build output
|
|
.next/
|
|
out/
|
|
dist/
|
|
build/
|
|
*.tsbuildinfo
|
|
|
|
# env / secrets
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
*.pem
|
|
|
|
# runtime / logs
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
.pnpm-debug.log*
|
|
logs/
|
|
*.log
|
|
|
|
# OS / editor
|
|
.DS_Store
|
|
Thumbs.db
|
|
.vscode/
|
|
!.vscode/extensions.json
|
|
!.vscode/settings.json
|
|
.idea/
|
|
|
|
# testing
|
|
coverage/
|
|
.nyc_output/
|
|
playwright-report/
|
|
test-results/
|
|
|
|
# payload
|
|
media/
|
|
!design-samples/
|
|
!images/
|
|
|
|
# mosaic workspace state (runtime — committed scaffolds start empty)
|
|
.mosaic/orchestrator/state.json
|
|
.mosaic/orchestrator/matrix_state.json
|
|
.mosaic/orchestrator/tasks.json
|
|
.mosaic/orchestrator/state/
|
|
.mosaic/orchestrator/logs/
|
|
scripts/local/
|
|
|
|
# design samples zip (HTML + DESIGN.md kept as reference)
|
|
design-samples/*.zip
|
|
|
|
# QA/automation auto-generated reports (runtime artifacts)
|
|
docs/reports/qa-automation/
|
|
docs/reports/typecheck/
|
|
|
|
# Claude Code session state
|
|
.claude/scheduled_tasks.lock
|
|
.claude/todos/
|
|
.claude/shell-snapshots/
|
|
.claude/ide/
|