Repository navigation
NYL-471: Patch vulnerable SDK tooling and example dependencies - #782
Merged
Merged
Conversation
…cy-audit # Conflicts: # CHANGELOG.md
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #782 +/- ##
=======================================
Coverage 98.69% 98.69%
=======================================
Files 43 43
Lines 1069 1069
Branches 100 100
=======================================
Hits 1055 1055
Misses 12 12
Partials 2 2 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
…407-1793824789 # Conflicts: # CHANGELOG.md
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Patch vulnerable glob/minimatch tooling and undici in the AWS Lambda and Cloudflare examples with scoped overrides that retain the configured Node engine support.
Tracks NYL-471.
Validation: 522 root tests and package checks on Node 18/24; lint, formatting, build and documentation generation pass. AWS type-check/archive integrity and 30 real built-handler assertions pass. Both Cloudflare examples pass production builds and native Worker/preview HTTP smoke checks. No deployments or external sends.
AWS and both Cloudflare example audits are clean; all production dependency audits are clean. Remaining root development-only deepmerge and TypeDoc/minimatch advisories are tracked in NYL-472. Forcing minimatch 11 breaks the current TypeDoc API, so its compatible version is retained. The markdown-it fix is separate in #769 / NYL-466.