Skip to content

chore: resolve open dependabot security alerts - #591

Merged
jonathannorris merged 1 commit into
mainfrom
chore/dependabot-alerts-2
Oct 5, 2026
Merged

jonathannorris merged 1 commit into
mainfrom
chore/dependabot-alerts-2

Conversation

@jonathannorris

Copy link
Copy Markdown
Member

Summary

  • Resolved 11 open Dependabot security alerts by bumping two yarn resolutions

Dependabot Alerts Resolved

Alert Package Severity Fix
#319, #322, #323, #325, #328 undici medium Resolution bumped to ^7.29.1 (locked 7.30.0)
#321, #326 undici high Resolution bumped to ^7.29.1 (locked 7.30.0)
#324, #327, #329 undici low Resolution bumped to ^7.29.1 (locked 7.30.0)
#320 ip-address medium Resolution bumped to ^10.5.1 (locked 10.7.3)

@jonathannorris
jonathannorris requested a review from a team as a code owner October 5, 2026 13:57
Copilot AI balanced review requested due to automatic review settings October 5, 2026 13:57

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The resolution ranges and lockfile entries are consistent with the stated security updates.

Review effort: Balanced
Findings: None

What changed in this PR

Updates dependency resolutions to address the documented Dependabot security alerts.

Changes:

  • Updates ip-address to resolve to 10.7.3.
  • Updates undici to resolve to 7.30.0.
File Description
package.json Raises secure minimum resolution ranges.
yarn.lock Locks updated dependency versions and checksums.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@jonathannorris
jonathannorris enabled auto-merge (squash) October 5, 2026 13:59
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
devcycle-mcp-server 63b74cf Oct 05 2026, 01:58 PM

@jonathannorris
jonathannorris merged commit a8227dc into main Oct 5, 2026
8 checks passed
@jonathannorris
jonathannorris deleted the chore/dependabot-alerts-2 branch October 5, 2026 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants