Skip to content

fix: resolve open Dependabot security alerts - #25

Merged
abhijit-hota merged 9 commits into
masterfrom
ah-dependabot-fixes-20260925
Sep 27, 2026
Merged

abhijit-hota merged 9 commits into
masterfrom
ah-dependabot-fixes-20260925

Conversation

@abhijit-hota

Copy link
Copy Markdown
Member

No description provided.

dependabot Bot and others added 9 commits May 24, 2026 11:08
…mitt#240)

Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.22.11 to 7.29.4.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Initial plan

* Update Node.js from 20 to 24 for action and CI/CD

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.22.11 to 7.29.6.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.29.6
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Changed the value of workflow_dispatch.inputs.default to a string since a boolean isn't an accepted argument
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.15.0 to 3.15.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.15.0...3.15.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Brings in the Node 24 runtime, the dependency refresh (@actions/core 3,
@actions/github 9, @actions/tool-cache 4, @octokit/rest 22, ncc 0.44) and
the js-yaml 3.15.2 bump. package-lock.json is taken from upstream since
package.json now matches upstream, and lib/ is rebuilt.

Keeps the WarpBuild action.yml defaults and check-run support. Drops the
undici override because the new dependencies resolve undici 6.28.0.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Bumps @vercel/ncc 0.44.1 -> 0.45.0 and refreshes nested browserslist
4.28.7 -> 4.29.0, undici 6.28.0 -> 6.28.1 and
@babel/plugin-transform-modules-systemjs 7.29.7 -> 7.29.8. Rebuilds lib/.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017uNkb5GuQRPMyJA2WDbH8B
@abhijit-hota
abhijit-hota merged commit bdb51a4 into master Sep 27, 2026
1 check passed
@abhijit-hota
abhijit-hota deleted the ah-dependabot-fixes-20260925 branch September 27, 2026 15:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants