Skip to content
This repository was archived by the owner on Jun 8, 2026. It is now read-only.

Security: Update transitive dependency resolutions - #48

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
automated/security-resolutions
Open

Security: Update transitive dependency resolutions#48
github-actions[bot] wants to merge 1 commit into
mainfrom
automated/security-resolutions

Conversation

@github-actions

@github-actions github-actions Bot commented Apr 27, 2026 •
edited
Loading

Copy link
Copy Markdown

Summary

Automated update of resolutions in package.json to fix vulnerable transitive dependencies.
Sources: Dependabot alerts (medium/high/critical) + yarn audit.

Changes

Dependency Before After Severity Source
@babel/plugin-transform-modules-systemjs (none) ^7.29.4 high yarn-audit
@protobufjs/utf8 (none) ^1.1.1 moderate yarn-audit
axios ^1.15.0 ^1.16.0 high yarn-audit
basic-ftp ^5.3.0 ^5.3.1 high yarn-audit
fast-uri (none) ^3.1.2 high yarn-audit
hono ^4.12.14 ^4.12.18 moderate yarn-audit
ip-address (none) ^10.1.1 moderate yarn-audit
postcss ^8.4.31 ^8.5.10 moderate yarn-audit
protobufjs ^7.5.5 ^7.5.8 moderate yarn-audit
qs ^6.14.1 ^6.15.2 moderate yarn-audit
tmp (none) ^0.2.6 high yarn-audit
uuid (none) ^11.1.1 moderate yarn-audit
webpack-dev-server ^5.2.1 ^5.2.4 moderate yarn-audit
ws ^8.17.1 ^8.20.1 moderate yarn-audit

Note: This only updates transitive dependencies via resolutions. Direct dependency upgrades should be done manually to avoid breaking changes.

Verify

  • yarn install succeeds
  • yarn build succeeds
  • App runs correctly

@github-actions github-actions Bot added dependencies Pull requests that update a dependency file security labels Apr 27, 2026
@github-actions
github-actions Bot force-pushed the automated/security-resolutions branch from e2ccc7f to f54c8bd Compare May 4, 2026 10:11
@github-actions
github-actions Bot force-pushed the automated/security-resolutions branch from f54c8bd to 8d3aa21 Compare May 11, 2026 10:59
@github-actions
github-actions Bot force-pushed the automated/security-resolutions branch from 8d3aa21 to d5c941f Compare May 18, 2026 11:42
@github-actions
github-actions Bot force-pushed the automated/security-resolutions branch from d5c941f to 85b7951 Compare May 25, 2026 11:52
@github-actions
github-actions Bot force-pushed the automated/security-resolutions branch from 85b7951 to 7ae190b Compare June 1, 2026 13:34
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file security

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Xeonus