Skip to content

Security: Update transitive dependency resolutions#45

Merged
Xeonus merged 1 commit intomainfrom
automated/security-resolutions
Mar 25, 2026
Merged

Security: Update transitive dependency resolutions#45
Xeonus merged 1 commit intomainfrom
automated/security-resolutions

Conversation

@github-actions
Copy link
Copy Markdown

Summary

Automated update of resolutions in package.json to fix vulnerable transitive dependencies.
Sources: Dependabot alerts (medium/high/critical) + yarn audit.

Changes

Dependency Before After Severity Source
file-type (none) ^21.3.1 moderate yarn-audit
h3 ^1.15.6 ^1.15.9 moderate yarn-audit
jsonpath ^1.2.1 ^1.3.0 high yarn-audit

Note: This only updates transitive dependencies via resolutions. Direct dependency upgrades should be done manually to avoid breaking changes.

Verify

  • yarn install succeeds
  • yarn build succeeds
  • App runs correctly

Copy link
Copy Markdown
Owner

@Xeonus Xeonus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

matches security alerts

@Xeonus Xeonus merged commit eea7a04 into main Mar 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant