Skip to content

build(deps): resolve audit vulnerabilities via overrides - #2472

Merged
madhavilosetty-intel merged 1 commit into
mainfrom
fix/audit-vulnerabilities-overrides
Jun 30, 2026
Merged

build(deps): resolve audit vulnerabilities via overrides#2472
madhavilosetty-intel merged 1 commit into
mainfrom
fix/audit-vulnerabilities-overrides

Conversation

@madhavilosetty-intel

@madhavilosetty-intel madhavilosetty-intel commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

Pin vulnerable transitive build-tool dependencies to patched versions through npm overrides.

PR Checklist

  • Unit Tests have been added for new changes
  • API tests have been updated if applicable
  • All commented code has been removed
  • If you've added a dependency, you've ensured license is compatible with Apache 2.0 and clearly outlined the added dependency.

What are you changing?

Anything the reviewer should know when reviewing this PR?

If the there are associated PRs in other repositories, please link them here (i.e. device-management-toolkit/repo#365 )

@madhavilosetty-intel
madhavilosetty-intel force-pushed the fix/audit-vulnerabilities-overrides branch from e7e4fca to 220ad57 Compare June 30, 2026 19:05
Pin vulnerable transitive build-tool dependencies to patched versions
through npm overrides.
@madhavilosetty-intel
madhavilosetty-intel force-pushed the fix/audit-vulnerabilities-overrides branch from 220ad57 to 26648c0 Compare June 30, 2026 19:08
@madhavilosetty-intel madhavilosetty-intel changed the title fix(deps): resolve audit vulnerabilities via overrides build(deps): resolve audit vulnerabilities via overrides Jun 30, 2026
@madhavilosetty-intel
madhavilosetty-intel enabled auto-merge (squash) June 30, 2026 19:09
@madhavilosetty-intel
madhavilosetty-intel merged commit f70316d into main Jun 30, 2026
6 checks passed
@madhavilosetty-intel
madhavilosetty-intel deleted the fix/audit-vulnerabilities-overrides branch June 30, 2026 19:21
@RosieAMT

RosieAMT commented Jul 1, 2026

Copy link
Copy Markdown

🎉 This PR is included in version 11.1.6 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants