Skip to content

fix(deps): resolve npm audit findings - #234

Merged
kellenmurphy merged 2 commits into
mainfrom
fix/npm-audit-deps
Jul 27, 2026
Merged

fix(deps): resolve npm audit findings#234
kellenmurphy merged 2 commits into
mainfrom
fix/npm-audit-deps

Conversation

@kellenmurphy

Copy link
Copy Markdown
Owner

Summary

  • Resolves 4 high-severity npm audit findings (DoS in brace-expansion, libvips CVEs in sharp, transitive miniflare/wrangler)
  • npm audit fix bumped wrangler 4.113.0→4.114.0, miniflare, sharp 0.34.5→0.35.2, brace-expansion 5.0.7→5.0.8
  • package-lock.json only — no source changes

Test plan

  • npm audit reports 0 vulnerabilities
  • npx tsc --noEmit clean
  • npx eslint . --quiet clean
  • npm run coverage — 382 tests passing, 100% coverage

Bumps wrangler, miniflare, sharp, and brace-expansion to patched
versions to clear 4 high-severity advisories flagged by npm audit.
@kellenmurphy
kellenmurphy enabled auto-merge July 27, 2026 12:21
@kellenmurphy kellenmurphy self-assigned this Jul 27, 2026
@codecov

codecov Bot commented Jul 27, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@kellenmurphy
kellenmurphy merged commit 93c5926 into main Jul 27, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant