Skip to content

fix: resolve open dependabot security alerts #974

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jonathannorris merged 5 commits into from
Apr 28, 2026
Merged

fix: resolve open dependabot security alerts #974

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
9ac7aa5
fix: resolve open dependabot security alerts
jonathannorris Apr 22, 2026
97b23a6
fix: add uuid 14.0.0 resolution to address remaining dependabot alert…
jonathannorris Apr 23, 2026
9a6ef58
fix: use ^ range style for uuid resolution
jonathannorris Apr 23, 2026
940fab5
fix: use ^ ranges for all resolutions
jonathannorris Apr 23, 2026
1c50334
fix: bump fast-xml-parser resolution to ^5.7.0
jonathannorris Apr 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 16 additions & 13 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,21 +75,24 @@
"resolutions": {
"send@0.18.0": "^0.19.0",
"serialize-javascript": "7.0.5",
"ajv@^8.0.0": "8.18.0",
"fast-xml-parser": "^5.5.7",
"ajv@^8.0.0": "^8.18.0",
"fast-xml-parser": "^5.7.0",
"path-to-regexp": "0.1.13",
"brace-expansion@^1.1.7": "1.1.13",
"brace-expansion@^2.0.1": "2.0.3",
"brace-expansion@^2.0.2": "2.0.3",
"brace-expansion@^1.1.7": "^1.1.13",
"brace-expansion@^2.0.1": "^2.0.3",
"brace-expansion@^2.0.2": "^2.0.3",
Comment thread
jonathannorris marked this conversation as resolved.
"axios": "1.15.0",
"lodash": "4.18.1",
"yaml@^1.10.0": "1.10.3",
"yaml@^2.3.4": "2.8.3",
"yaml@^2.7.0": "2.8.3",
"picomatch@^2.0.4": "2.3.2",
"picomatch@^2.2.1": "2.3.2",
"picomatch@^2.2.3": "2.3.2",
"picomatch@^2.3.1": "2.3.2",
"picomatch@^4.0.2": "4.0.4"
"yaml@^1.10.0": "^1.10.3",
"yaml@^2.3.4": "^2.8.3",
"yaml@^2.7.0": "^2.8.3",
"picomatch@^2.0.4": "^2.3.2",
"picomatch@^2.2.1": "^2.3.2",
"picomatch@^2.2.3": "^2.3.2",
"picomatch@^2.3.1": "^2.3.2",
"picomatch@^4.0.2": "^4.0.4",
"dompurify": "^3.4.0",
"follow-redirects": "^1.16.0",
Comment thread
jonathannorris marked this conversation as resolved.
"uuid": "^14.0.0"
}
}
121 changes: 68 additions & 53 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3597,6 +3597,13 @@ __metadata:
languageName: node
linkType: hard

"@nodable/entities@npm:^2.1.0":
version: 2.1.0
resolution: "@nodable/entities@npm:2.1.0"
checksum: 10/355c55e82aebe45d4b962d16530951df51e19e3e63a27ea61ad3260c0807064619b270b9c83db10e8394f42760abd5b7f7c5b5117678c4246ce8364a4aafc637
languageName: node
linkType: hard

"@nodelib/fs.scandir@npm:2.1.5":
version: 2.1.5
resolution: "@nodelib/fs.scandir@npm:2.1.5"
Expand Down Expand Up @@ -4879,18 +4886,6 @@ __metadata:
languageName: node
linkType: hard

"ajv@npm:8.18.0, ajv@npm:^8.9.0":
version: 8.18.0
resolution: "ajv@npm:8.18.0"
dependencies:
fast-deep-equal: "npm:^3.1.3"
fast-uri: "npm:^3.0.1"
json-schema-traverse: "npm:^1.0.0"
require-from-string: "npm:^2.0.2"
checksum: 10/bfed9de827a2b27c6d4084324eda76a4e32bdde27410b3e9b81d06e6f8f5c78370fc6b93fe1d869f1939ff1d7c4ae8896960995acb8425e3e9288c8884247c48
languageName: node
linkType: hard

"ajv@npm:^6.12.5":
version: 6.12.6
resolution: "ajv@npm:6.12.6"
Expand All @@ -4903,6 +4898,18 @@ __metadata:
languageName: node
linkType: hard

"ajv@npm:^8.18.0, ajv@npm:^8.9.0":
version: 8.18.0
resolution: "ajv@npm:8.18.0"
dependencies:
fast-deep-equal: "npm:^3.1.3"
fast-uri: "npm:^3.0.1"
json-schema-traverse: "npm:^1.0.0"
require-from-string: "npm:^2.0.2"
checksum: 10/bfed9de827a2b27c6d4084324eda76a4e32bdde27410b3e9b81d06e6f8f5c78370fc6b93fe1d869f1939ff1d7c4ae8896960995acb8425e3e9288c8884247c48
languageName: node
linkType: hard

"algoliasearch-helper@npm:^3.26.0":
version: 3.28.0
resolution: "algoliasearch-helper@npm:3.28.0"
Expand Down Expand Up @@ -5274,22 +5281,22 @@ __metadata:
languageName: node
linkType: hard

"brace-expansion@npm:1.1.13":
version: 1.1.13
resolution: "brace-expansion@npm:1.1.13"
"brace-expansion@npm:^1.1.13":
version: 1.1.14
resolution: "brace-expansion@npm:1.1.14"
dependencies:
balanced-match: "npm:^1.0.0"
concat-map: "npm:0.0.1"
checksum: 10/b5f4329fdbe9d2e25fa250c8f866ebd054ba946179426e99b86dcccddabdb1d481f0e40ee5430032e62a7d0a6c2837605ace6783d015aa1d65d85ca72154d936
checksum: 10/2de747a5891ea0d3a1946ea1ae26e056a47f7ea8d42a3009e1736ec3a31a5aa69a3c5da59d998426773553afe4c258e5b12d7953b534fa7f2cf12ce92eed4931
languageName: node
linkType: hard

"brace-expansion@npm:2.0.3":
version: 2.0.3
resolution: "brace-expansion@npm:2.0.3"
"brace-expansion@npm:^2.0.3":
version: 2.1.0
resolution: "brace-expansion@npm:2.1.0"
dependencies:
balanced-match: "npm:^1.0.0"
checksum: 10/e9dd66caaf0784126e1654f1bc19adb28f3ef86f39f2226f833f7700ec727c141f6cd85eaa47bacf3426beda01c9fbc3a2f28174cf59330dc9b58ffaf9e09d96
checksum: 10/c77a7a64aabf94b8d5913955adb4f36957917565374461355bb4276830c027a313d981f32410cea9e38f52573e7eb776d02fe05091c3a79a061958d97e4d2b43
languageName: node
linkType: hard

Expand Down Expand Up @@ -6714,15 +6721,15 @@ __metadata:
languageName: node
linkType: hard

"dompurify@npm:^3.0.6":
version: 3.3.3
resolution: "dompurify@npm:3.3.3"
"dompurify@npm:^3.4.0":
version: 3.4.1
resolution: "dompurify@npm:3.4.1"
dependencies:
"@types/trusted-types": "npm:^2.0.7"
dependenciesMeta:
"@types/trusted-types":
optional: true
checksum: 10/4cc9c539ed7136d46c6577613b8e20871c2b6165db01dfbd2a3c11c75f9e339c496ac6519a1c3190115def8cadae3720bef0417fc43fa28802c7407bab174da9
checksum: 10/dcaf945376eff2a61841b205501b163b2c8ae9afe7251e68276b561d9fcf943cefc67e2631fdeae080b52a8b37c96e6beb7e6ae80ad8a83692ff67965dd6b4db
languageName: node
linkType: hard

Expand Down Expand Up @@ -7332,25 +7339,26 @@ __metadata:
languageName: node
linkType: hard

"fast-xml-builder@npm:^1.1.4":
version: 1.1.4
resolution: "fast-xml-builder@npm:1.1.4"
"fast-xml-builder@npm:^1.1.5":
version: 1.1.5
resolution: "fast-xml-builder@npm:1.1.5"
dependencies:
path-expression-matcher: "npm:^1.1.3"
checksum: 10/32937866aaf5a90e69d1f4ee6e15e875248d5b5d2afd70277e9e8323074de4980cef24575a591b8e43c29f405d5f12377b3bad3842dc412b0c5c17a3eaee4b6b
checksum: 10/377c4ef816972e67192fd32757c50d2a9d4cccf352ceac48bda6681a0ee24fb0b1f1c892810f77886db760681f23fe0b8f62c7c0cc9469c0d2863c5c529ac1d2
languageName: node
linkType: hard

"fast-xml-parser@npm:^5.5.7":
version: 5.5.9
resolution: "fast-xml-parser@npm:5.5.9"
"fast-xml-parser@npm:^5.7.0":
version: 5.7.2
resolution: "fast-xml-parser@npm:5.7.2"
dependencies:
fast-xml-builder: "npm:^1.1.4"
path-expression-matcher: "npm:^1.2.0"
strnum: "npm:^2.2.2"
"@nodable/entities": "npm:^2.1.0"
fast-xml-builder: "npm:^1.1.5"
path-expression-matcher: "npm:^1.5.0"
strnum: "npm:^2.2.3"
bin:
fxparser: src/cli/cli.js
checksum: 10/5f1a1a8b524406af21e9adb24f846b0da6b629c86b1eeedb54757cc293c24ed4f79ff9570b82206265b6951d68acd2dc93e74687ea5d7da0beafa09536cee73f
checksum: 10/7f32d77127dbd5eb1b4c9f7f6ad81972527049905cebe8926c88d102b84c2a56468180dd7541384c93bfc8dad2cef0b1b82b097a931893d3cab3989bd1cf83e1
languageName: node
linkType: hard

Expand Down Expand Up @@ -7476,13 +7484,13 @@ __metadata:
languageName: node
linkType: hard

"follow-redirects@npm:^1.0.0, follow-redirects@npm:^1.15.11":
version: 1.15.11
resolution: "follow-redirects@npm:1.15.11"
"follow-redirects@npm:^1.16.0":
version: 1.16.0
resolution: "follow-redirects@npm:1.16.0"
peerDependenciesMeta:
debug:
optional: true
checksum: 10/07372fd74b98c78cf4d417d68d41fdaa0be4dcacafffb9e67b1e3cf090bc4771515e65020651528faab238f10f9b9c0d9707d6c1574a6c0387c5de1042cde9ba
checksum: 10/3fbe3d80b3b544c22705d837aa5d4a0d07a740d913534a2620b0a004c610af4148e3b58723536dd099aaa1c9d3a155964bde9665d6e5cb331460809a1fc572fd
languageName: node
linkType: hard

Expand Down Expand Up @@ -10844,13 +10852,20 @@ __metadata:
languageName: node
linkType: hard

"path-expression-matcher@npm:^1.1.3, path-expression-matcher@npm:^1.2.0":
"path-expression-matcher@npm:^1.1.3":
version: 1.2.0
resolution: "path-expression-matcher@npm:1.2.0"
checksum: 10/eab23babd9a97d6cf4841a99825c3e990b70b2b29ea6529df9fb6a1f3953befbc68e9e282a373d7a75aff5dc6542d05a09ee2df036ff9bfddf5e1627b769875b
languageName: node
linkType: hard

"path-expression-matcher@npm:^1.5.0":
version: 1.5.0
resolution: "path-expression-matcher@npm:1.5.0"
checksum: 10/28303bb9ee6831e6df14c10cd3f3f7b2d7c8d7f788d8bdb7440136fd696064c82a3e264999a0764d28e39f698275fc03a5493bec93c57ef4a22566280367dd64
languageName: node
linkType: hard

"path-is-inside@npm:1.0.2":
version: 1.0.2
resolution: "path-is-inside@npm:1.0.2"
Expand Down Expand Up @@ -10910,14 +10925,14 @@ __metadata:
languageName: node
linkType: hard

"picomatch@npm:2.3.2":
"picomatch@npm:^2.3.2":
version: 2.3.2
resolution: "picomatch@npm:2.3.2"
checksum: 10/b788ef8148a2415b9dec12f0bb350ae6a5830f8f1950e472abc2f5225494debf7d1b75eb031df0ceaea9e8ec3e7bad599e8dbf3c60d61b42be429ba41bff4426
languageName: node
linkType: hard

"picomatch@npm:4.0.4":
"picomatch@npm:^4.0.4":
version: 4.0.4
resolution: "picomatch@npm:4.0.4"
checksum: 10/f6ef80a3590827ce20378ae110ac78209cc4f74d39236370f1780f957b7ee41c12acde0e4651b90f39983506fd2f5e449994716f516db2e9752924aff8de93ce
Expand Down Expand Up @@ -13831,10 +13846,10 @@ __metadata:
languageName: node
linkType: hard

"strnum@npm:^2.2.2":
version: 2.2.2
resolution: "strnum@npm:2.2.2"
checksum: 10/c55813cfded750dc84556b4881ffc7cee91382ff15a48f1fba0ff7a678e1640ed96ca40806fbd55724940fd7d51cf752469b2d862e196e4adefb6c7d5d9cd73b
"strnum@npm:^2.2.3":
version: 2.2.3
resolution: "strnum@npm:2.2.3"
checksum: 10/fb70206301858c319f59ed34fecedf90ac3b821692c2accd403d9d4a3384223a09df8fd92b130bbd4e885b67b7790715c003405ce5f959d9cabbf07d41d62aa8
languageName: node
linkType: hard

Expand Down Expand Up @@ -14630,12 +14645,12 @@ __metadata:
languageName: node
linkType: hard

"uuid@npm:^8.3.2":
version: 8.3.2
resolution: "uuid@npm:8.3.2"
"uuid@npm:^14.0.0":
version: 14.0.0
resolution: "uuid@npm:14.0.0"
bin:
uuid: dist/bin/uuid
checksum: 10/9a5f7aa1d6f56dd1e8d5f2478f855f25c645e64e26e347a98e98d95781d5ed20062d6cca2eecb58ba7c84bc3910be95c0451ef4161906abaab44f9cb68ffbdd1
uuid: dist-node/bin/uuid
checksum: 10/8ee9b98f9650e25555515f7a28d3c3ae9364e72f7bb19b9e08b681bc135338beba5509b2830f6ae1cfaba4d45401da0d16d4d109b977097bc3d6ba0c5583341b
languageName: node
linkType: hard

Expand Down Expand Up @@ -15079,14 +15094,14 @@ __metadata:
languageName: node
linkType: hard

"yaml@npm:1.10.3":
"yaml@npm:^1.10.3":
version: 1.10.3
resolution: "yaml@npm:1.10.3"
checksum: 10/e2ef2feb92c708138f016c69777a0f1e45f6d3c5e7cbcda30807a98a37eda2e008bd4fa57352b043c65245a4c799d0c99d1f9b3425de40e70929e26d2ea38215
languageName: node
linkType: hard

"yaml@npm:2.8.3":
"yaml@npm:^2.8.3":
version: 2.8.3
resolution: "yaml@npm:2.8.3"
bin:
Expand Down
Loading