Skip to content

v0.8.3: Dependency Modernization & Dependabot Configuration

Latest

Choose a tag to compare

@samuk190 samuk190 released this 26 Oct 13:07

What's Changed in v0.8.3

Maintenance & Security

  • Dependencies Upgraded:
    • Bumped localforage to ^1.10.0 (latest stable).
    • Bumped rollup to ^4.65.1 (latest stable).
    • Bumped vitest to ^5.0.5 (resolving prototype pollution and dev-server vulnerabilities).
    • Achieved 0 vulnerabilities across npm audit.
  • Dependabot Integration:
    • Unpaused GitHub Dependabot automated security fixes on the repository.
    • Added .github/dependabot.yml to schedule weekly automated npm dependency version updates.
    • Removed outdated 2020 yarn.lock artifact to eliminate phantom security alerts on GitHub.
    • Closed obsolete / superseded Dependabot PRs (#89, #98, #100) and merged PR #101 & PR #102.

Full Changelog: v0.8.2...v0.8.3