From fea89a7eceed190a4ad880828598f8eaf01b22af Mon Sep 17 00:00:00 2001
From: maziggy <mz@v8w.de>
Date: Fri, 20 Feb 2026 19:18:59 +0100
Subject: [PATCH] Updated CI

---
 .github/workflows/ci.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 57c8a6bed..d70d30c0a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -152,9 +152,9 @@ jobs:
       - name: Run npm audit
         working-directory: frontend
         run: |
-          # Only fail on fixable high/critical vulnerabilities.
-          # Unfixable issues (e.g. npm's bundled tar) are tracked via security.yml.
-          npm audit --json > /tmp/audit.json 2>/dev/null || true
+          # Only audit production dependencies — dev dependency vulnerabilities
+          # don't affect end users. Detailed audits are handled by security.yml.
+          npm audit --omit=dev --json > /tmp/audit.json 2>/dev/null || true
           python3 -c "
           import json, sys
           data = json.load(open('/tmp/audit.json'))