Julien Gautier
eb6aa6e8bb
CI / commits (pull_request) Successful in 2m48s
CI / scan (pull_request) Successful in 2m49s
CI / a11y (pull_request) Successful in 2m10s
CI / check (pull_request) Successful in 5m30s
Docs site / build (pull_request) Successful in 2m52s
CI / perf (pull_request) Successful in 5m55s
Bump the existing pnpm override for tmp from >=0.2.4 to >=0.2.6 to cover GHSA-ph9p-34f9-6g65, a path-traversal vulnerability via unsanitized prefix/postfix in tmp <0.2.6. Surfaced by pnpm ci:audit. Both consuming paths in the tree (nx and @lhci/cli) still depend on tmp <0.2.6 at their latest releases, so an upstream upgrade is not an option. Same override pattern that was already in place for the prior tmp advisory, with the lower bound widened. Side effect of pnpm install: @scalar/nestjs-api-reference bumped 1.1.16 -> 1.1.19, both within the existing ^1.1.14 range. Natural transitive resolution, not a deliberate change. Risk: patch bump on a tiny library with a stable API; the 0.2.5 and 0.2.6 releases are sanitization-only fixes.
Documentation index
This is the entry point to all project documentation. It is maintained automatically: any addition, rename, or removal of a .md file under docs/ must be reflected here in the same change.
Conventions
- Documentation is written in English.
- One topic per file. Group related files into a folder when there are three or more.
- Cross-reference with relative links so they keep working in GitHub, IDEs, and exported sites.
- For architectural decisions, do not add them here — they belong in decisions/ as MADR 4.0.0 ADRs.
Sections
Daily development
- development.md — repo layout, prerequisites, initial setup, daily commands, observability dev-loop (Jaeger UI, log ↔ trace correlation), dependency updates (Renovate), conventional commit cycle. Day-to-day reference for working on the project.
Architecture
- architecture.md — cross-cutting Mermaid diagrams: C4 system context, C4 containers, Nx module boundaries, CI/CD pipeline. Single-decision diagrams (auth sequence, ERD, etc.) live inline in their ADR.
Onboarding & environment
Setup guides for new contributors:
- setup/01-wsl-terminal-setup.md — modern WSL terminal (Zsh + Powerlevel10k + CLI tools)
- setup/02-dev-web-stack.md — Node via nvm, pnpm via corepack, Docker
- setup/03-angular-nx-monorepo.md — Angular + Nx monorepo bootstrap
Operations & runbooks
Empty — to be populated when we deploy.
Security, performance, accessibility
Empty — placeholders to be filled with rationale docs alongside their corresponding ADRs.