Repository navigation
fix(deps): patch vulnerable build dependency chains - #469
Conversation
|
Important Review skippedReview was skipped due to path filters ⛔ Files ignored due to path filters: 1
CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info
📝 Walkthrough
Merge Risk: ⚪ Minimal · up to
|
|
[INFO] dist diff |
ae2e544 to
fe25742
Compare
|
[INFO] dist diff |
|
[INFO] dist diff |
Depends on #468. This layer fixes the remaining open Dependabot glob alert (32): update the build-time glob copies from 10.4.5 to 10.5.0 and from 11.0.1 to 11.1.0 within their existing dependency ranges, addressing GHSA-5j98-mcp5-4vw2.
Upgrade ts-morph from 26.0.0 to 27.0.2 to remove the fast-glob/micromatch/braces dependency chain flagged by GHSA-vfj7-8cjw-p6xm. This uses ts-morph's TypeScript 5.9 generation and does not require a TypeScript 6 migration.
Summary by CodeRabbit