Skip to content

chore: resolve open dependabot security alerts #979

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jonathannorris merged 4 commits into from
Jun 16, 2026
Merged

chore: resolve open dependabot security alerts #979

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
7579ac5
chore: resolve open dependabot security alerts
jonathannorris Jun 10, 2026
fe6fd9d
chore: pin ws and postcss resolutions to fixed versions
jonathannorris Jun 10, 2026
3cca3fd
chore: resolve critical shell-quote dependabot alert
jonathannorris Jun 11, 2026
083ae5a
chore: resolve joi dependabot alert #205
jonathannorris Jun 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,6 +76,10 @@
"serialize-javascript": "7.0.5",
"qs": "^6.15.2",
"fast-xml-parser": "^5.7.0",
"fast-xml-builder": "^1.1.7"
"fast-xml-builder": "^1.1.7",
"uuid": "^11.1.1",
"ws@^8.18.0": "^8.21.0",
"postcss": "^8.5.12",
"shell-quote": "^1.8.4"

@jonathannorris jonathannorris Jun 16, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated the PR description to reflect all 5 alerts resolved, including shell-quote (critical, alert #203) and joi (medium, alert #205).

}
}
61 changes: 15 additions & 46 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10439,16 +10439,7 @@ __metadata:
languageName: node
linkType: hard

"nanoid@npm:^3.3.11":
version: 3.3.11
resolution: "nanoid@npm:3.3.11"
bin:
nanoid: bin/nanoid.cjs
checksum: 10/73b5afe5975a307aaa3c95dfe3334c52cdf9ae71518176895229b8d65ab0d1c0417dd081426134eb7571c055720428ea5d57c645138161e7d10df80815527c48
languageName: node
linkType: hard

"nanoid@npm:^3.3.12, nanoid@npm:^3.3.7":
"nanoid@npm:^3.3.12":
version: 3.3.12
resolution: "nanoid@npm:3.3.12"
bin:
Expand Down Expand Up @@ -12367,18 +12358,7 @@ __metadata:
languageName: node
linkType: hard

"postcss@npm:8.4.49":
version: 8.4.49
resolution: "postcss@npm:8.4.49"
dependencies:
nanoid: "npm:^3.3.7"
picocolors: "npm:^1.1.1"
source-map-js: "npm:^1.2.1"
checksum: 10/28fe1005b1339870e0a5006375ba5ac1213fd69800f79e7db09c398e074421ba6e162898e94f64942fed554037fd292db3811d87835d25ab5ef7f3c9daacb6ca
languageName: node
linkType: hard

"postcss@npm:^8.4.21, postcss@npm:^8.4.24, postcss@npm:^8.4.33, postcss@npm:^8.4.45, postcss@npm:^8.4.47, postcss@npm:^8.5.4":
"postcss@npm:^8.5.12":
version: 8.5.15
resolution: "postcss@npm:8.5.15"
dependencies:
Expand All @@ -12389,17 +12369,6 @@ __metadata:
languageName: node
linkType: hard

"postcss@npm:^8.5.10":
version: 8.5.12
resolution: "postcss@npm:8.5.12"
dependencies:
nanoid: "npm:^3.3.11"
picocolors: "npm:^1.1.1"
source-map-js: "npm:^1.2.1"
checksum: 10/ec6b79b68c363eca3c8ffceb134a4ab637274aee6ac0857614bf7c18d40ce4ce5f9036edec57b7e0be99895724d2599d0ec7328dbd7f407204e7548697b322f1
languageName: node
linkType: hard

"pretty-error@npm:^4.0.0":
version: 4.0.0
resolution: "pretty-error@npm:4.0.0"
Expand Down Expand Up @@ -13572,10 +13541,10 @@ __metadata:
languageName: node
linkType: hard

"shell-quote@npm:^1.8.3":
version: 1.8.3
resolution: "shell-quote@npm:1.8.3"
checksum: 10/5473e354637c2bd698911224129c9a8961697486cff1fb221f234d71c153fc377674029b0223d1d3c953a68d451d79366abfe53d1a0b46ee1f28eb9ade928f4c
"shell-quote@npm:^1.8.4":
version: 1.8.4
resolution: "shell-quote@npm:1.8.4"
checksum: 10/a3e3796385f2cd5cf0b78207a4439f0c7395c0833fc75b2473084b5d298c109c5c0fa687fcd1c04e4b4484866e5bb8eaae7efae443b80fff71ea7e29baf11f0c
languageName: node
linkType: hard

Expand Down Expand Up @@ -14837,12 +14806,12 @@ __metadata:
languageName: node
linkType: hard

"uuid@npm:^8.3.2":
version: 8.3.2
resolution: "uuid@npm:8.3.2"
"uuid@npm:^11.1.1":
version: 11.1.1
resolution: "uuid@npm:11.1.1"
bin:
uuid: dist/bin/uuid
checksum: 10/9a5f7aa1d6f56dd1e8d5f2478f855f25c645e64e26e347a98e98d95781d5ed20062d6cca2eecb58ba7c84bc3910be95c0451ef4161906abaab44f9cb68ffbdd1
uuid: dist/esm/bin/uuid
checksum: 10/16411d3dc12a08d6691616c09a75e66a7f900ba1beef6628a76fe0602f82fae2ee537b564d0b7bc95c24f58d059ca9b58c75a1e806118efb50e17822ff00ddd2
languageName: node
linkType: hard

Expand Down Expand Up @@ -15209,9 +15178,9 @@ __metadata:
languageName: node
linkType: hard

"ws@npm:^8.18.0":
version: 8.19.0
resolution: "ws@npm:8.19.0"
"ws@npm:^8.21.0":
version: 8.21.0
resolution: "ws@npm:8.21.0"
peerDependencies:
bufferutil: ^4.0.1
utf-8-validate: ">=5.0.2"
Expand All @@ -15220,7 +15189,7 @@ __metadata:
optional: true
utf-8-validate:
optional: true
checksum: 10/26e4901e93abaf73af9f26a93707c95b4845e91a7a347ec8c569e6e9be7f9df066f6c2b817b2d685544e208207898a750b78461e6e8d810c11a370771450c31b
checksum: 10/088411956432c8f876158409d5a285cb9ad1382f593391f51d3a599bd0a5b277f876609ebd00fc3596321c4a4c9064d6fffe1ebad960e8ea7fd9ae25324f35c2
languageName: node
linkType: hard

Expand Down
Loading