Files
Andre Landgraf d0189b0b1d chore: pin every dependency to an exact version and un-break the lockfile
Review feedback asked for exact version pins. Two things were unpinned:
`npm run fmt` resolved prettier at runtime via `npx`, and the eval package
declared `@types/bun: "latest"`. Both now pin exact versions, and `.npmrc`
sets `save-exact=true` so future installs can't reintroduce a range.

Also fixes package-lock.json resolving every tarball from an internal npm
mirror rather than registry.npmjs.org. That breaks `npm ci` for anyone
outside that network and is why Dependabot's weekly npm job has been
failing with private_source_timed_out since it was committed.
2026-07-27 11:33:56 -07:00
..