Commit 587ee45
Fix npm audit vulnerabilities and unblock Renovate lockfile maintenance
Sets minimumReleaseAge to null for lockFileMaintenance, matching the
config already proven in tanem/react-svg. The repo-wide 3-day release
soak was also applying to weekly lock refreshes, and since a full
refresh always pulls in something published within 3 days, the
resulting PR's renovate/stability-days check could never pass -
deadlocking #2929 since 2025-11-24 and leaving 23 transitive dev
dependency alerts unaddressed.
Also:
- Bump @babel/core to 7.29.7 (pinned exact, so the lockfile refresh
alone couldn't reach the patched version).
- Add an override pinning brace-expansion to ^5.0.8, fixing
GHSA-mh99-v99m-4gvg (a DoS newly published 2026-07-24) in nested
copies that eslint/jest/ts-jest otherwise keep on 1.x/2.x.
- Migrate examples/react-router-v6 to react-router-dom 7.18.2,
fixing GHSA-jjmj-jmhj-qwj2 (open redirect/XSS), which has no fix in
the 6.x line. Renamed to examples/react-router since the version
is no longer relevant. Verified with a headless browser that
navigation and the progress bar animation still work correctly.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>1 parent 14fffc7 commit 587ee45
17 files changed
Lines changed: 5660 additions & 6330 deletions
File tree
- examples/react-router
- .codesandbox
- .devcontainer
- src
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
101 | 101 | | |
102 | 102 | | |
103 | 103 | | |
104 | | - | |
| 104 | + | |
105 | 105 | | |
106 | 106 | | |
107 | 107 | | |
| |||
File renamed without changes.
File renamed without changes.
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| |||
File renamed without changes.
Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | | - | |
3 | | - | |
| 2 | + | |
| 3 | + | |
4 | 4 | | |
5 | 5 | | |
6 | 6 | | |
| |||
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
14 | | - | |
| 14 | + | |
15 | 15 | | |
16 | 16 | | |
17 | 17 | | |
| |||
File renamed without changes.
File renamed without changes.
File renamed without changes.
0 commit comments