| … | … | @@ -410,7 +410,9 @@ jobs: |
| 410 | 410 | working-directory: hiverelay |
| 411 | 411 | run: | |
| 412 | 412 | set -euo pipefail |
| 413 | npm audit | |
| 413 | # Match the protected CI audit gate: release artifacts contain production | |
| 414 | # dependencies only; the dev-only lint toolchain is exercised below. | |
| 415 | npm audit --omit=dev | |
| 414 | 416 | npm run lint |
| 415 | 417 | npm run audit:public-artifacts |
| 416 | 418 | npm run release:check-npm-packages |