Skip to content

fix: resolve all Dependabot security alerts#39

Merged
arein merged 1 commit into
mainfrom
fix/dependabot-security-alerts
Mar 9, 2026
Merged

fix: resolve all Dependabot security alerts#39
arein merged 1 commit into
mainfrom
fix/dependabot-security-alerts

Conversation

@arein
Copy link
Copy Markdown
Contributor

@arein arein commented Mar 9, 2026

Summary

  • Updates lockfile to resolve all 8 open Dependabot security alerts
  • express-rate-limit 8.2.1 → 8.3.0
  • @hono/node-server 1.19.9 → 1.19.11
  • hono 4.12.3 → 4.12.5
  • minimatch 3.1.2 → 3.1.5, 9.0.5 → 9.0.9
  • rollup 4.57.1 → 4.59.0
  • All are transitive dependency updates (no direct dependency changes)

Test plan

  • npm run build — all 5 packages build successfully
  • npm run test — all 107 tests pass
  • Verify Dependabot alerts auto-close after merge

🤖 Generated with Claude Code

Resolves all 8 open Dependabot security alerts by updating lockfile:
- express-rate-limit 8.2.1 → 8.3.0
- @hono/node-server 1.19.9 → 1.19.11
- hono 4.12.3 → 4.12.5
- minimatch 3.1.2 → 3.1.5, 9.0.5 → 9.0.9
- rollup 4.57.1 → 4.59.0

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@arein arein merged commit ce0905c into main Mar 9, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant