Skip to content

chore: resolve open dependabot security alerts - #1007

Open
jonathannorris wants to merge 1 commit into
mainfrom
chore/dependabot-alerts
Open

jonathannorris wants to merge 1 commit into
mainfrom
chore/dependabot-alerts

Conversation

@jonathannorris

Copy link
Copy Markdown
Member

Summary

  • Resolved 19 open Dependabot security alerts by bumping vulnerable transitive dependencies via yarn resolutions

Dependabot Alerts Resolved

Alerts Package Severity Fix
#288-#299 (12) axios high / medium Bumped resolution to ^1.20.0 (1.20.0)
#281-#286 (6) brace-expansion high / medium Bumped 1.x resolutions to ^1.1.21 and 2.x to ^2.1.7
#287 fast-uri medium Bumped resolution to ^3.1.8 (3.1.8)

yarn build passes.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Deploying devcycle-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: fe35e88
Status: ✅  Deploy successful!
Preview URL: https://5abbc633.devcycle-docs.pages.dev
Branch Preview URL: https://chore-dependabot-alerts.devcycle-docs.pages.dev

View logs

Copilot AI balanced review requested due to automatic review settings October 5, 2026 20:50

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@jonathannorris
jonathannorris enabled auto-merge (squash) October 5, 2026 20:53

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants