build: package signage with ekklesia 0.2.3

2026-10-09 19:17:27 -05:00
parent 33bb146349
commit 6b1b29c5de
4 changed files with 849 additions and 187 deletions
@@ -11,15 +11,15 @@ allowBuilds:
 # these, are the train this lockfile pins (published by Ekklesia's release workflow, ADR 0053), so
 # they are exempt by version; a train bump replaces them, and everything else keeps the policy.
 minimumReleaseAgeExclude:
-  - '@ekklesia/[email protected].0'
-  - '@ekklesia/[email protected].0'
-  - '@ekklesia/[email protected].0'
-  - '@ekklesia/[email protected].0'
-  - '@ekklesia/[email protected].0'
-  - '@ekklesia/[email protected].0'
-  - '@ekklesia/[email protected].0'
-  - '@ekklesia/[email protected].0'
-  - '@ekklesia/[email protected].0'
+  - '@ekklesia/[email protected].3'
+  - '@ekklesia/[email protected].3'
+  - '@ekklesia/[email protected].3'
+  - '@ekklesia/[email protected].3'
+  - '@ekklesia/[email protected].3'
+  - '@ekklesia/[email protected].3'
+  - '@ekklesia/[email protected].3'
+  - '@ekklesia/[email protected].3'
+  - '@ekklesia/[email protected].3'

 # The narrowly scoped advisory remediation Signage had while it was built inside Ekklesia's workspace,
 # kept now that it is not. GHSA-67mh-4wv8-2f99 (moderate): the vulnerable esbuild 0.18.20 is reached