chore: sync main into main-convert + fold in the dependency advisory work - #426

Open

abbaseya wants to merge 14 commits into

main-convertfrom

sync/merge-main-into-main-convert

Commits on Jul 24, 2026

chore(ci): enforce minimum release age via Yarn's native gate + freeze qa install

Ahmed Abbas
and
claude
committed
26f295e

Commits on Jul 27, 2026

Merge branch 'main' into chore/supply-chain-age-gate
JosephSamirL
authored
0c86659
Merge pull request #421 from convertcom/chore/supply-chain-age-gate
JosephSamirL
authored
028e65c
chore(deps): force tar >=7.5.21 and shell-quote >=1.9.0 to clear CVEs

JosephSamirL
and
claude
committed
e326414
Merge pull request #424 from convertcom/chore/security-tar-shell-quote-cve-fix
abbaseya
authored
565b1d5
Merge branch 'main' into main-convert
abbaseya
committed
800473a

Commits on Aug 8, 2026

chore(deps): upgrade dependencies to clear Dependabot advisories

abbaseya
and
claude
committed
b31c14b
fix(build): bump rollup-plugin-typescript2 to 0.37 for picomatch 2.3.2

abbaseya
and
claude
committed
15633da
fix(deps): restore published peerDependencies and resync lockfile

abbaseya
and
claude
committed
ee679bf
fix(deps): drop build-generated peerDependency churn from the diff

abbaseya
and
claude
committed
4b6bbdd

Commits on Aug 9, 2026