Skip to content

Updating dependencies with critical vulnerabilities and fixing a test case with timezones issues#62

Closed
faocampo wants to merge 2 commits intokrodak:mainfrom
faocampo:main
Closed

Updating dependencies with critical vulnerabilities and fixing a test case with timezones issues#62
faocampo wants to merge 2 commits intokrodak:mainfrom
faocampo:main

Conversation

@faocampo
Copy link
Copy Markdown

  1. Updating dependencies with npm audit fix after pulling the repo and running npm install and getting the following:
$npm install

added 199 packages, and audited 200 packages in 6s

57 packages are looking for funding
  run `npm fund` for details

4 vulnerabilities (1 moderate, 3 high)

To address all issues, run:
  npm audit fix
  1. Fixing the 'formats date as locale string' test case, which is not adapted to negative timezones, as it uses a strict Unix epoch timestamp for 2024-01-01 00:00 UTC.

@krodak
Copy link
Copy Markdown
Owner

krodak commented Apr 22, 2026

Thanks for flagging both issues - both are real and verified independently:

  1. npm audit: 4 vulnerabilities (3 high severity) in dev dependencies. Fixed via npm audit fix in 739ffeb.
  2. Timezone test: Confirmed 1704067200000 (UTC midnight Jan 1) renders as "Dec 31, 2023" in negative UTC timezones. Fixed with local Date constructor in 50e6725.

Fixed independently on main rather than merging this PR directly. Shipping in v1.25.1. Appreciate the report.

@krodak krodak closed this Apr 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants