Skip to content

fix: resolve open Dependabot security alerts - #44

Merged
abhijit-hota merged 2 commits into
masterfrom
ah-dependabot-fixes-20260925
Sep 27, 2026
Merged

abhijit-hota merged 2 commits into
masterfrom
ah-dependabot-fixes-20260925

Conversation

@abhijit-hota

Copy link
Copy Markdown
Member

No description provided.

@abhijit-hota
abhijit-hota changed the base branch from master to ah-upstream-sync-20260925 September 25, 2026 13:18
@abhijit-hota
abhijit-hota added this pull request to stack #46 September 25, 2026 13:18
@abhijit-hota
abhijit-hota force-pushed the ah-dependabot-fixes-20260925 branch 2 times, most recently from aa97672 to ec161e8 Compare September 25, 2026 16:56
Base automatically changed from ah-upstream-sync-20260925 to master September 27, 2026 15:26
abhijit-hota and others added 2 commits September 27, 2026 20:56
- vitest and @vitest/coverage-v8 ^4.0.18 -> ^4.1.11 (fixes vitest and
  @vitest/mocker advisories)
- esbuild ^0.28.0 -> ^0.28.1 in both workspaces
- refresh minimatch, brace-expansion, socks and ip-address in yarn.lock
  within their existing ranges
- rebuild dist

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
- esbuild ^0.28.1 -> ^0.28.2 in both workspaces
- js-yaml 5.4.1 -> 5.4.2 and postcss-selector-parser 7.1.5 -> 7.1.6
- rebuild dist

vitest, @vitest/coverage-v8 and the other alerted packages were already
at the latest version their ranges allow.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017uNkb5GuQRPMyJA2WDbH8B
@abhijit-hota
abhijit-hota force-pushed the ah-dependabot-fixes-20260925 branch from ec161e8 to ae95c4a Compare September 27, 2026 15:26
@abhijit-hota
abhijit-hota merged commit c3327b5 into master Sep 27, 2026
21 of 57 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants