Skip to content

fix(security): update postcss and glib dependencies to resolve Depend… - #14

Merged
vkshdev merged 1 commit into
mainfrom
fix/dependabot-security-updates
Jul 26, 2026
Merged

fix(security): update postcss and glib dependencies to resolve Depend…#14
vkshdev merged 1 commit into
mainfrom
fix/dependabot-security-updates

Conversation

@vkshdev

@vkshdev vkshdev commented Jul 26, 2026

Copy link
Copy Markdown
Owner

Summary:
This Pull Request resolves open Dependabot security vulnerabilities (PostCSS and glib) in a single grouped update, enforces safe package overrides across the workspace, and cleans up desktop CSS syntax.

Key Changes:

  1. Security Dependency Upgrades
  • PostCSS (High Severity): Enforced postcss >= 8.5.18 via package.json overrides and updated postcss from 8.5.15 to 8.5.23 in pnpm-lock.yaml.
  • glib (Moderate Severity): Updated Rust glib and related workspace dependencies in Cargo.lock.
  1. CSS Syntax Cleanup
  • apps/desktop/src/styles/globals.css: Removed duplicate .app-shell rule blocks to ensure clean stylesheet compilation for the desktop app.

@vkshdev
vkshdev merged commit e283db7 into main Jul 26, 2026
4 checks passed
@vkshdev
vkshdev deleted the fix/dependabot-security-updates branch July 26, 2026 20:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant