Skip to content

chore: update dependencies to remove all security issues#22

Merged
hammonda merged 3 commits into
masterfrom
2026-06-package-updates
Jun 4, 2026
Merged

chore: update dependencies to remove all security issues#22
hammonda merged 3 commits into
masterfrom
2026-06-package-updates

Conversation

@richardms

Copy link
Copy Markdown
Contributor

Originally: 11 vulnerabilities (1 low, 4 moderate, 5 high, 1 critical)
Now: found 0 vulnerabilities

Copilot AI review requested due to automatic review settings June 2, 2026 17:37

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates Node.js dependencies/lockfile to remediate reported vulnerabilities and bring the dev toolchain up to newer patched versions.

Changes:

  • Bumps dev dependencies (chai and prettier) in package.json.
  • Regenerates/updates package-lock.json (including patch version bump to 1.0.9) with updated transitive dependency graph.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates direct dev dependency versions (chai, prettier).
package-lock.json Captures the resulting dependency tree updates and package version bump.
Comments suppressed due to low confidence (1)

package.json:34

  • prettier@3.8.3 (and jest@28.1.3) require newer Node versions than the project currently declares in engines.node (>=6). Contributors running npm run fmt (or npm test) on older Node versions will hit engine incompatibilities/warnings or failures. Consider updating engines.node (and/or CI matrix) to reflect the minimum supported Node version, or pin tooling to versions compatible with the intended engine range.
    "prettier": "^3.8.3"
  },
  "engines": {
    "node": ">=6.0.0"
  },

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@hammonda
hammonda merged commit cbc5bee into master Jun 4, 2026
8 checks passed
@hammonda
hammonda deleted the 2026-06-package-updates branch June 4, 2026 10:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants