Skip to content

Commit 8549b9f

Browse files
fix: resolve npm audit high severity vulnerabilities (#1347)
- Upgrade fast-xml-parser to 5.10.1 (fixes GHSA-8r6m-32jq-jx6q) - Add package.json override to force brace-expansion >=5.0.8 across all transitive dependencies (fixes GHSA-mh99-v99m-4gvg) without downgrading jest/ts-jest - Refresh .licenses/npm cache to match updated dependency tree - Rebuild dist/setup and dist/cache-save npm audit now reports 0 vulnerabilities. Pre-existing test suite failures (7 suites, ESM/jest teardown issue) verified unrelated to this change - identical on unmodified main with node 24. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 5fda3b9 commit 8549b9f

15 files changed

Lines changed: 2368 additions & 1611 deletions

.licenses/npm/@nodable/entities.dep.yml

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.licenses/npm/balanced-match-1.0.2.dep.yml

Lines changed: 0 additions & 55 deletions
This file was deleted.
File renamed without changes.

.licenses/npm/brace-expansion-1.1.15.dep.yml

Lines changed: 0 additions & 55 deletions
This file was deleted.

.licenses/npm/brace-expansion-5.0.6.dep.yml renamed to .licenses/npm/brace-expansion.dep.yml

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.licenses/npm/concat-map.dep.yml

Lines changed: 0 additions & 31 deletions
This file was deleted.

.licenses/npm/fast-xml-parser.dep.yml

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.licenses/npm/is-unsafe.dep.yml

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.licenses/npm/path-expression-matcher.dep.yml

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)