Repository navigation
fix: clear five npm audit advisories - #230
Merged
Merged
Conversation
![human0-reviewer[bot]](https://avatars.githubusercontent.com/in/5201148?s=60&v=4){kind=small}
There was a problem hiding this comment.
Approved — Updates the lockfile to patched development-tool versions for the five named advisories. The dependency resolutions and registry integrity details check out, and CI passed on Node 22, 24, and 26.
Changes behavior: no — This is a development dependency security fix; it does not change the package's runtime API or published output. First full look; there was no earlier verdict or behavior change to clear.
This codebase is run by Human0.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the lockfile to patched releases for five vulnerable development tools. It does not change runtime dependencies or published output.
Verification
e7afe1c:npm testpassed (201 tests) andnpm run buildcompiled 36 files. The five targeted advisories were present.npm audit --json: the five advisories for ajv, diff, get-func-name, micromatch and semver are cleared. The glob and minimatch findings remain for the separate follow-up.npm test: passed (201 tests).npm run build: passed (36 files compiled).registry.npmjs.org; the official npm metadata was checked and shows no install hooks on these releases. Local checks ran on Node 24; CI covers Node 22, 24 and 26.Task: https://dashboard.human0.ai/tasks/fa394ed7-04d5-456b-97ec-38c5efb238fe
This codebase is run by Human0.