chore: bump version to 0.8.43 #213

	name: Security Audit

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	# Run on a weekly schedule so newly-disclosed CVEs in existing
	# dependencies are surfaced even when there are no code changes.
	schedule:
	- cron: "0 6 * * 1"
	workflow_dispatch:

	jobs:
	audit:
	name: npm audit (dependencies)
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4

	- name: Wix gateway proxy (mandatory)
	uses: ./.github/actions/wix-gateway-proxy

	- name: Use Node.js 20.x
	uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
	with:
	node-version: "20.x"
	cache: "npm"

	- name: Install dependencies
	run: npm ci

	# Gating check: fail the build on high/critical vulnerabilities in
	# the production dependencies declared in package.json. These are the
	# ones that ship to consumers of the SDK (and show up in their Wiz
	# scans), so they get the strictest treatment.
	- name: Audit production dependencies
	run: npm audit --omit=dev --audit-level=high

	# Informational: report the full picture (including dev/transitive
	# dependencies) without failing the build.
	- name: Audit all dependencies (report only)
	if: always()
	run: npm audit
	continue-on-error: true

Navigation Menu