Skip to content

chore(deps): override uuid to fix moderate vuln (GHSA-w5hq-g745-h8pq)#202

Merged
shunei-web merged 1 commit into
v1.2from
chore/markuplint-update-uuid-fix
May 1, 2026
Merged

chore(deps): override uuid to fix moderate vuln (GHSA-w5hq-g745-h8pq)#202
shunei-web merged 1 commit into
v1.2from
chore/markuplint-update-uuid-fix

Conversation

@shunei-web
Copy link
Copy Markdown
Collaborator

概要

monthly review Issue #381 のセキュリティ対応。pnpm audit で検出された markuplint > @markuplint/file-resolver > @markuplint/parser-utils > uuid (<14.0.0) の moderate 脆弱性を pnpm.overrides で解消する。

変更内容

  • markuplint^4.14.1 → ^4.18.1 に更新(minor)
  • package.jsonpnpm.overrides.uuid >=14.0.0 を追加(transitive deps の uuid を v14 系に強制)

検証

  • pnpm install で overrides 反映確認 ✅
  • pnpm audit で 0 vulnerabilities 確認 ✅
  • pnpm lint:html 動作確認 PASS ✅(全 3 HTML ファイル passed)
  • vite モジュール loadable 確認 OK ✅
  • lockfile に uuid@14.0.0 のみ参照(13.x 排除済) ✅

AR

PASS(必須修正なし、変更スコープ: package.json + pnpm-lock.yaml のみ)

関連

…5-h8pq

- Bump markuplint 4.14.1 -> 4.18.1
- Add pnpm.overrides for uuid >=14.0.0 to resolve transitive moderate vulnerability
  (path: markuplint > @markuplint/file-resolver > @markuplint/parser-utils > uuid)
- pnpm audit: 0 vulnerabilities
- Verified: pnpm lint:html (3 files passed), pnpm dev (vite ready), pnpm build (success)

Refs: monthly review Issue shunei-web/issues#381

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@shunei-web shunei-web merged commit 3a42efd into v1.2 May 1, 2026
2 checks passed
@shunei-web shunei-web deleted the chore/markuplint-update-uuid-fix branch May 1, 2026 03:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant