Skip to content

fix(deps): clear production audit advisories - #246

Merged
pshkv merged 1 commit into
mainfrom
codex/july-dependency-audit
Jul 23, 2026
Merged

fix(deps): clear production audit advisories#246
pshkv merged 1 commit into
mainfrom
codex/july-dependency-audit

Conversation

@pshkv

@pshkv pshkv commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Summary

  • raise direct Hono, Hono node-server, and ws ranges used by gateway/badge/client surfaces
  • add pnpm override floors for July production advisories: Hono, @hono/node-server, ws, fast-uri, express-rate-limit, body-parser, qs, and ip-address
  • refresh pnpm lockfile so production audit reports zero advisories

Validation

  • pnpm audit --prod --json summary: all severities 0, no actions
  • pnpm --filter @pshkv/gateway-server typecheck
  • pnpm --filter @pshkv/badge-server typecheck
  • pnpm --filter @pshkv/client typecheck
  • pnpm run build
  • pnpm run test
  • git diff --check

Refs #191

@pshkv
pshkv merged commit 2f99731 into main Jul 23, 2026
3 checks passed
@pshkv
pshkv deleted the codex/july-dependency-audit branch July 23, 2026 04:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant