Skip to content

fix: body-parser / brace-expansion のセキュリティアラートを pnpm overrides で解消 - #165

Merged
ara-ta3 merged 1 commit into
mainfrom
devin/1784684188-security-alerts
Jul 22, 2026
Merged

fix: body-parser / brace-expansion のセキュリティアラートを pnpm overrides で解消#165
ara-ta3 merged 1 commit into
mainfrom
devin/1784684188-security-alerts

Conversation

@devin-ai-integration

Copy link
Copy Markdown
Contributor

Summary

Dependabot の open アラート 2 件を pnpm overrides の更新で解消しました。

  • body-parser (GHSA-v422-hmwv-36x6, low): >= 2.0.0, < 2.3.0 が脆弱。override を追加し >=2.3.0 に固定 (2.2.2 → 2.3.0)。
  • brace-expansion (GHSA-3jxr-9vmj-r5cp, high): >= 3.0.0, < 5.0.7 が脆弱。既存 override <5.0.6: '>=5.0.6'<5.0.7: '>=5.0.7' に更新 (5.0.6 → 5.0.7)。

pnpm-workspace.yaml の overrides 更新 + pnpm install による pnpm-lock.yaml 反映のみ。いずれも推移的依存。

Link to Devin session: https://app.devin.ai/sessions/2c68d16cb6884e5383b19db8e2734d59
Requested by: @ara-ta3

Co-Authored-By: ara-ta3 <2089153+ara-ta3@users.noreply.github.com>
@ara-ta3 ara-ta3 self-assigned this Jul 22, 2026
@ara-ta3
ara-ta3 self-requested a review July 22, 2026 01:36
@devin-ai-integration

Copy link
Copy Markdown
Contributor Author

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment, CI, and merge conflict monitoring

@ara-ta3
ara-ta3 merged commit b957eb1 into main Jul 22, 2026
1 check passed
@ara-ta3
ara-ta3 deleted the devin/1784684188-security-alerts branch July 22, 2026 03:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant