Skip to content

MLE-27299 Upgrade dependencies to remove vulnerability warnings.#1066

Merged
stevebio merged 1 commit intodevelopfrom
27299-upgrade-deps
Feb 24, 2026
Merged

MLE-27299 Upgrade dependencies to remove vulnerability warnings.#1066
stevebio merged 1 commit intodevelopfrom
27299-upgrade-deps

Conversation

@stevebio
Copy link
Collaborator

No description provided.

Copilot AI review requested due to automatic review settings February 24, 2026 17:26
@github-actions
Copy link

github-actions bot commented Feb 24, 2026

Copyright Validation Results
Total: 2 | Passed: 0 | Failed: 0 | Skipped: 2 | at: 2026-02-24 18:49:59 UTC | commit: 076b9ac

⏭️ Skipped (Excluded) Files

  • package-lock.json
  • package.json

✅ All files have valid copyright headers!

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates Node.js development dependencies to address vulnerability warnings in the MarkLogic Node client’s build/lint/test toolchain.

Changes:

  • Bumped several dev tool dependencies (e.g., ESLint, AJV, gulp-eslint-new) and updated package-lock.json accordingly.
  • Updated minimatch to 10.2.1 (via overrides) to mitigate vulnerability warnings.
  • Adjusted Mocha versioning in package.json and updated the resolved dependency tree in the lockfile.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 4 comments.

File Description
package.json Updates dev dependency versions/ranges and overrides (notably eslint, ajv, mocha, minimatch).
package-lock.json Re-locks the dependency tree to match the updated dev dependencies and overrides.

@stevebio stevebio merged commit 91bbfbc into develop Feb 24, 2026
4 of 5 checks passed
@stevebio stevebio deleted the 27299-upgrade-deps branch February 24, 2026 22:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants