Skip to content

fix(security): resolve Dependabot alerts#11

Merged
jmgasper merged 1 commit into
developfrom
security_july_2026
Jul 22, 2026
Merged

fix(security): resolve Dependabot alerts#11
jmgasper merged 1 commit into
developfrom
security_july_2026

Conversation

@jmgasper

Copy link
Copy Markdown
Contributor

Summary

  • resolve vulnerable transitive dependency ranges
  • update the Trivy action
  • regenerate the dependency lockfile with patched resolutions

Validation

  • pnpm audit --audit-level=low — no known vulnerabilities
  • pnpm lint — passed
  • pnpm build — passed
  • focused runtime and test checks were run for dependency major-version transitions

This PR is intentionally left as a draft for review and deployment sequencing.

@jmgasper
jmgasper marked this pull request as ready for review July 22, 2026 05:57
@jmgasper
jmgasper merged commit b6ee81d into develop Jul 22, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant