Skip to content

Update serve dependency from 14.0.1 to 14.2.5#17

Merged
anumol-baby merged 1 commit intomasterfrom
dev/anu/updgrade-on-header
Nov 18, 2025
Merged

Update serve dependency from 14.0.1 to 14.2.5#17
anumol-baby merged 1 commit intomasterfrom
dev/anu/updgrade-on-header

Conversation

@anumol-baby
Copy link
Copy Markdown

Summary

Updates the `serve` dependency from 14.0.1 to 14.2.5 to address security vulnerabilities.
https://github.com/github/Pac-tocat/security/dependabot/25

Changes

  • Updated `serve` from 14.0.1 to 14.2.5
  • Updated `compression` to v1.8.1 (transitive dependency)
  • Updated `@zeit/schemas` to v2.36.0
  • Updated `serve-handler` to v6.1.6
  • Resolves on-header security issue

Testing

  • All 267 tests pass
  • No breaking changes introduced
  • serve is a devDependency used only for local development

Impact

Low risk - this is a patch-level update with backward compatibility. The serve package is only used for local development and does not affect the game's runtime code.

Copilot AI review requested due to automatic review settings November 18, 2025 18:07
@anumol-baby anumol-baby changed the title chore: update serve dependency from 14.0.1 to 14.2.5 Update serve dependency from 14.0.1 to 14.2.5 Nov 18, 2025
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the serve devDependency from version 14.0.1 to 14.2.5 to address security vulnerabilities, specifically resolving an on-headers security issue. The update is low-risk as serve is only used for local development and doesn't affect the game's runtime code.

Key changes:

  • Updated serve package to version 14.2.5 (security patch)
  • Updated transitive dependencies including compression (1.7.4 → 1.8.1), @zeit/schemas (2.21.0 → 2.36.0), serve-handler (6.1.3 → 6.1.6), and on-headers (1.0.2 → 1.1.0)
  • Removed deprecated fast-url-parser dependency

Reviewed Changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates serve dependency version from ^14.0.1 to ^14.2.5
package-lock.json Updates serve and all transitive dependencies with new versions, integrity hashes, and dependency tree structure

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@anumol-baby anumol-baby merged commit dd18efd into master Nov 18, 2025
8 checks passed
@anumol-baby anumol-baby deleted the dev/anu/updgrade-on-header branch November 18, 2025 18:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants