CI

April 13, 2026
in Security, CI, Maintenance
2 min read

April 13: Security Quick Wins and Dependabot Hardening

Landed the security quick-wins bundle (password complexity, private-by-default for targets, proxy trust config), hardened the Dependabot pipeline, and merged the React 19.2.5 bump along with a clutch of smaller dep bumps.

April 2, 2026
in Bug Fix, CI, Process
3 min read

April 2: Timers, Path Filters, and TDD

Split the hardcoded job timeout into configurable per-stage timers, added per-stack path filtering to skip unrelated CI jobs, and — because a friend in the channel kept needling about TDD — tried having Claude write the tests first for one of the fixes. It worked well enough to be a little annoying.