Skip to content

[security] run npm audit fix to update dependencies#3331

Merged
Dave Shoup (shouples) merged 3 commits intomainfrom
djs/security-deps
Mar 20, 2026
Merged

[security] run npm audit fix to update dependencies#3331
Dave Shoup (shouples) merged 3 commits intomainfrom
djs/security-deps

Conversation

@shouples
Copy link
Copy Markdown
Contributor

Before:

29 vulnerabilities (3 low, 5 moderate, 20 high, 1 critical)

After:

15 vulnerabilities (2 low, 3 moderate, 10 high)

(via npm audit)

Copilot AI review requested due to automatic review settings March 18, 2026 20:04
@shouples Dave Shoup (shouples) requested a review from a team as a code owner March 18, 2026 20:04
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


You can also share your feedback on Copilot code review. Take the survey.

Comment thread package.json
"rollup-plugin-copy": "^3.5.0",
"rollup-plugin-esbuild": "^6.1.1",
"rollwright": "^0.0.6",
"rollwright": "^0.0.7",
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Had to update rollwright since the hono version bump introduced a breaking change that resulted in invalid default ipv6 addresses when hostname wasn't provided.

This is present in the current version of rollwright: https://github.com/UnknownPrinciple/rollwright/blob/ab6b27a071d9789979f647e2d8faf8a0bebddf9c/packages/rollwright/fixture.js#L116-L118

@sonarqube-confluent
Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

@shouples Dave Shoup (shouples) merged commit 0d66c06 into main Mar 20, 2026
14 checks passed
@shouples Dave Shoup (shouples) deleted the djs/security-deps branch March 20, 2026 20:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants