Daily Autohealing Report — 2026-03-28 (UTC)

[fro-bot]

Daily Autohealing Report — 2026-03-28 (UTC)

Errored PRs

None. All open PRs have passing CI checks:

• #3028: Update pnpm to v10.33.0 (SUCCESS)
• #3025: Update picomatch override to >=4.0.4 (SUCCESS)

Security

• Fixed: Created #3030 to address GHSA-v6vh-hvxj-x9wh (MEDIUM) for brace-expansion.
  • Vulnerability: Zero-step sequence causes process hang and memory exhaustion
  • Fix: Added `brace-expansion: >=5.0.5` override to package.json
  • brace-expansion is a transitive dependency via minimatch > eslint
• Open: #3025 addresses picomatch CVE-2026-33671 (HIGH) and CVE-2026-33672 (MEDIUM) - awaiting merge
• Previously Resolved: #3022 (yaml CVE-2026-33532) - merged on 2026-03-26

Health & Maintenance

• Workflow Actions: All actions are pinned to commit SHAs with version comments. No unpinned actions found.
• Open Dependency Update PRs (awaiting review):
  • #3028: Update pnpm to v10.33.0
• Recently Merged:
  • #3014: Update eslint to v10.1.0 (merged 2026-03-27)
  • #2997: Update @types/node to v24.12.0 (merged 2026-03-27)

Developer Experience

All validation commands pass on main:

• `pnpm bootstrap` ✓
• `pnpm check-types` ✓
• `pnpm lint` ✓
• `pnpm check-format` ✓

Needs Human Attention

1. #3025: HIGH severity security fix for picomatch (CVE-2026-33671) - needs review and merge.
2. #3030: MEDIUM severity security fix for brace-expansion - needs review and merge.
3. #3028: Dependency update (pnpm v10.33.0) needs review approval.