Skip to content

Conversation

@BMVenly
Copy link
Contributor

@BMVenly BMVenly commented Dec 18, 2025

No description provided.

Copilot AI review requested due to automatic review settings December 18, 2025 16:09
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR addresses security vulnerabilities by updating dependencies and adding package overrides to ensure secure versions of transitive dependencies are used.

Key Changes:

  • Updated core dependencies (TypeScript, Webpack, Webpack CLI) to more recent patch versions
  • Added overrides section to enforce secure versions of 8 transitive dependencies with known vulnerabilities
Comments suppressed due to low confidence (1)

package.json:1

  • The brace-expansion package version ^2.0.1 does not exist. The v2 line starts at 2.0.0 with the latest being 2.0.0. Use '^2.0.0' instead.
{

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@BMVenly BMVenly merged commit d9521ab into develop Dec 24, 2025
4 checks passed
@BMVenly BMVenly deleted the VENLY-9033-security-findings branch December 24, 2025 13:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants