Skip to content

Staging#155

Merged
PromiseFru merged 3 commits intomainfrom
staging
Apr 2, 2026
Merged

Staging#155
PromiseFru merged 3 commits intomainfrom
staging

Conversation

@Vanessa-Kris
Copy link
Copy Markdown
Member

No description provided.

Vanessa-Kris and others added 3 commits April 2, 2026 13:44
- eslint 9.19.0 → 9.39.4 (fixes @eslint/plugin-kit ReDoS GHSA-xffm-g5w8-qvg7)
- @eslint/js 9.19.0 → 9.39.4
- react-router-dom ^7.9.6 → ^7.13.2 (fixes CSRF/XSS GHSA-h5cw-625j-3rxh, GHSA-2w69-qvjg-hvjx, GHSA-8v8x-cx79-35w7)
- brace-expansion resolution ^2.0.2 → ^2.0.3 (fixes DoS GHSA-f886-m6hf-6m8v)

Transitive deps fixed in yarn.lock:
- @eslint/plugin-kit 0.2.8 → 0.4.1
- ajv → 6.14.0 (GHSA-2g4f-4pwh-qvx6)
- brace-expansion → 2.0.3
- flatted → 3.4.2 (GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh)
- lodash → 4.18.1 (GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-f23m-r3pf-42rh)
- minimatch → 3.1.5 (GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74)
- picomatch → 2.3.2 / 4.0.4 (GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj)
- rollup → 4.60.1 (GHSA-mw96-cpmx-2vgc)
- smol-toml → 1.6.1 (GHSA-v3rj-xjv7-4jmq)
fix: resolve Dependabot security vulnerabilities
@PromiseFru PromiseFru merged commit 94873ec into main Apr 2, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants