From 9f26e2239d8573268f513842fa7c4c2b9d22db38 Mon Sep 17 00:00:00 2001 From: Gary Schaetz Date: Wed, 21 Oct 2026 22:13:06 -0500 Subject: [PATCH] Run npm audit with npm 11 in CI The npm bundled with Node 22 calls an audit endpoint that the registry is retiring and now answers HTTP 400, which fails every CI run regardless of the change. npm 11 uses the bulk advisory endpoint. Co-Authored-By: Claude Sonnet 5.5 Signed-off-by: Gary Schaetz --- .github/workflows/ci.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b70d194..dbfaf07 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,5 +16,7 @@ jobs: node-version: 22 - run: npm ci - run: npm test - - run: npm audit --audit-level=moderate + # The npm bundled with Node 22 calls an audit endpoint the registry is retiring (HTTP 400); npm 11 uses the + # bulk advisory endpoint. + - run: npx --yes npm@11 audit --audit-level=moderate - run: npm run license-check