fix(security): resolve CRITICAL and HIGH Dependabot vulnerabilities - #1729
Merged
DCO-2 / DCO
succeeded
Sep 6, 2026 in 1s
Check passed!
All commits are signed off, the check passed.
Summary
| Sha | Message | Pass or fail reason | |
|---|---|---|---|
| 🟢 | 01da638 | fix(deps): remove unused direct dependencies (hand... | Valid sign-off found |
| 🟢 | 67299df | fix(deps): bump axios to ^1.20.0, fix 8 Dependabot... | Valid sign-off found |
| 🟢 | c0d6781 | fix(deps): update opentelemetry and socket.io-clie... | Valid sign-off found |
| 🟢 | 87aec98 | fix(deps): add pnpm.overrides for transitive vulne... | Valid sign-off found |
| 🟢 | 247cc35 | fix(security): override transitive deps for CRITIC... | Valid sign-off found |
| 🟢 | 47844eb | fix(security): override transitive deps for remain... | Valid sign-off found |
| 🟢 | dd05381 | fix(security): P0+P1 — rebuild base images, bump... | Valid sign-off found |
| 🟢 | 5521b0f | fix(security): correct sha512 hash for pnpm 9.15.9... | Valid sign-off found |
| 🟢 | 8dcf9c6 | test(api-gateway): add tracer, dependency-integrit... | Valid sign-off found |
| 🟢 | 0780100 | fix(test): address CodeRabbit review on test specs | Valid sign-off found |
| 🟢 | 7a6d946 | fix(docker): run agent-provisioning image as non-r... | Valid sign-off found |
Loading