Skip to content

fix: resolve open Dependabot security alerts - #93

Merged
abhijit-hota merged 2 commits into
mainfrom
ah-dependabot-fixes-20260925
Sep 27, 2026
Merged

abhijit-hota merged 2 commits into
mainfrom
ah-dependabot-fixes-20260925

Conversation

@abhijit-hota

Copy link
Copy Markdown
Member

No description provided.

Update package-lock.json to fix open Dependabot alerts, and rebuild dist/
for the bundled undici change.

- js-yaml 3.14.2 -> 3.15.2 and 4.1.1 -> 4.3.2 (#92)
- undici 6.27.0 -> 6.28.0 (#88)
- browserslist 4.28.2 -> 4.28.9 (#90)
- baseline-browser-mapping 2.10.23 -> 2.11.22 (#91)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@abhijit-hota
abhijit-hota added this pull request to stack #95 September 25, 2026 15:50
The direct parents (jest 29.7.0, eslint 8.57.1, eslint-plugin-github
5.1.8) are already at the latest version of their major, and ts-jest
29.4.13 does not change the nested versions. Refresh the nested
packages to the latest version their parents allow instead.

- js-yaml 3.14.2 -> 3.15.2 and 4.1.1 -> 4.3.2
- browserslist 4.28.2 -> 4.29.0
- baseline-browser-mapping 2.10.23 -> 2.11.25
- undici 6.27.0 -> 6.28.1 (under the existing override)

Rebuild dist/ for the bundled undici change.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017uNkb5GuQRPMyJA2WDbH8B
@abhijit-hota
abhijit-hota merged commit f111f01 into main Sep 27, 2026
14 of 19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants