Repository navigation
chore(deps): patch example, handbook and tooling advisories - #130
Merged
Merged
Conversation
Clears the open Dependabot alerts, all in build tooling or example apps: - react-app: next 16.1.3 -> 16.4.2 (two critical advisories). - vue-app, angular-app: lockfiles refreshed within their ranges. - angular-app: uuid and postcss-selector-parser overrides (built CSS is byte-identical). - handbook: vite ^6.4.5 override for vitepress 1.6 (same 44 pages). - root: Angular build 21.2.28 (vite 7.3.7), follow-redirects 1.16.1, uuid override for sockjs; smoke declares vite ^8.3.5.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Clears the ~110 open Dependabot alerts. None are in a published package: all sit in the example apps, the handbook or the root dev tooling.
uuid(sockjs, dev server only) andpostcss-selector-parser(tailwind 3 / postcss-nested; no 6.x fix exists). The built CSS is byte-identical before and after.vite ^6.4.5override (vitepress 1.6 asks for vite 5, which has no fix). The build gives the same 44 pages with the same content.uuidoverride for sockjs.smokenow declaresvite ^8.3.5itself, as@vitejs/plugin-react6 needs vite 8.Checked locally: format check, all workspace tests and smoke tests,
npm audit(onlybraces, which has no fix and no Dependabot alert), builds of react/vue/angular examples and the handbook, and the three demos clicked through in a browser. The three 404s for__next.*.__PAGE__.txtprefetches in the React demo also happen on develop today.Empty changeset: no package is released by this.