From ab352835454732ddd74ff859faf5b1975a9e2c5b Mon Sep 17 00:00:00 2001 From: Evan Vetere Date: Thu, 10 Sep 2026 14:07:27 -0400 Subject: [PATCH] chore: remove dead Snyk policy file Snyk is switched off across the org (account disabled, billing cancelled, OAuth grants removed), so this policy file, which lists ignored findings for a scanner that no longer runs, is dead. No Snyk check is a required status check on this repository, so this changes no merge gate. Claude-Session: https://claude.ai/code/session_01UKsqfTMazR7wf4NVS7qeXg --- .snyk | 15 --------------- 1 file changed, 15 deletions(-) delete mode 100644 .snyk diff --git a/.snyk b/.snyk deleted file mode 100644 index c41cdf2bf..000000000 --- a/.snyk +++ /dev/null @@ -1,15 +0,0 @@ -# Snyk (https://snyk.io) policy file -version: v1.25.0 -ignore: - SNYK-JS-HONONODESERVER-18170429: - - '*': - reason: >- - False positive for this repo: @hono/node-server resolves to 2.1.0 - (patched; fix is >=2.0.10) via a direct dependency and an overrides - floor of ^2.1.0. react-router-hono-server@3.0.0 declares an exact - "@hono/node-server": "2.0.6" dependency, and the Snyk manifest-only - scan reports that declared version because it cannot read bun.lock, - where the override resolves the single installed copy to 2.1.0. - Verified against node_modules: only 2.1.0 is installed. - Re-evaluate on expiry or when Snyk supports Bun lockfiles. - expires: 2026-11-01T00:00:00.000Z