Skip to content

chore: resolve open dependabot security alerts #977

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jonathannorris merged 9 commits into from
May 29, 2026
Merged

chore: resolve open dependabot security alerts #977

Show file tree
Hide file tree
Changes from 6 commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
16be102
chore: resolve open dependabot security alerts
jonathannorris May 8, 2026
968ca7c
chore: remove unused ip-address@npm:^9.0.5 resolution
jonathannorris May 11, 2026
2664cf4
chore: resolve remaining dependabot security alerts
jonathannorris May 13, 2026
09cb3cc
chore: remove redundant ip-address scoped resolution
jonathannorris May 13, 2026
c5bb8fb
chore: resolve webpack-dev-server dependabot alert #197
jonathannorris May 20, 2026
b3673bc
chore: add qs resolution to fix alert #198 (medium, DoS)
jonathannorris May 25, 2026
aff2277
chore: prefer lockfile-only bumps, keep only required resolutions
jonathannorris May 26, 2026
5af89a6
chore: add fast-xml-builder and fast-xml-parser resolutions to fix al…
jonathannorris May 27, 2026
cba57d0
fix: remove broken Bitbucket remote docs fetch (#978)
jonathannorris May 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 8 additions & 2 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@
"brace-expansion@^1.1.7": "^1.1.13",
"brace-expansion@^2.0.1": "^2.0.3",
"brace-expansion@^2.0.2": "^2.0.3",
"axios": "1.15.0",
"axios": "^1.15.2",
"lodash": "4.18.1",
"yaml@^1.10.0": "^1.10.3",
"yaml@^2.3.4": "^2.8.3",
Expand All @@ -94,6 +94,12 @@
"dompurify": "^3.4.0",
"follow-redirects": "^1.16.0",
"uuid": "^14.0.0",
"postcss": "^8.5.10"
"postcss": "^8.5.10",
"ip-address": "^10.1.1",
"fast-uri": "^3.1.2",
"fast-xml-builder": "^1.1.7",
"@babel/plugin-transform-modules-systemjs": "^7.29.4",
"webpack-dev-server": "^5.2.4",
"qs": "^6.15.2"
Comment thread
jonathannorris marked this conversation as resolved.
Outdated
}
}
191 changes: 150 additions & 41 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -225,6 +225,17 @@ __metadata:
languageName: node
linkType: hard

"@babel/code-frame@npm:^7.28.6, @babel/code-frame@npm:^7.29.0":
version: 7.29.0
resolution: "@babel/code-frame@npm:7.29.0"
dependencies:
"@babel/helper-validator-identifier": "npm:^7.28.5"
js-tokens: "npm:^4.0.0"
picocolors: "npm:^1.1.1"
checksum: 10/199e15ff89007dd30675655eec52481cb245c9fdf4f81e4dc1f866603b0217b57aff25f5ffa0a95bbc8e31eb861695330cd7869ad52cc211aa63016320ef72c5
languageName: node
linkType: hard

"@babel/compat-data@npm:^7.27.2, @babel/compat-data@npm:^7.27.7, @babel/compat-data@npm:^7.28.0":
version: 7.28.0
resolution: "@babel/compat-data@npm:7.28.0"
Expand Down Expand Up @@ -268,6 +279,19 @@ __metadata:
languageName: node
linkType: hard

"@babel/generator@npm:^7.29.0":
version: 7.29.1
resolution: "@babel/generator@npm:7.29.1"
dependencies:
"@babel/parser": "npm:^7.29.0"
"@babel/types": "npm:^7.29.0"
"@jridgewell/gen-mapping": "npm:^0.3.12"
"@jridgewell/trace-mapping": "npm:^0.3.28"
jsesc: "npm:^3.0.2"
checksum: 10/61fe4ddd6e817aa312a14963ccdbb5c9a8c57e8b97b98d19a8a99ccab2215fda1a5f52bc8dd8d2e3c064497ddeb3ab8ceb55c76fa0f58f8169c34679d2256fe0
languageName: node
linkType: hard

"@babel/helper-annotate-as-pure@npm:^7.27.1, @babel/helper-annotate-as-pure@npm:^7.27.3":
version: 7.27.3
resolution: "@babel/helper-annotate-as-pure@npm:7.27.3"
Expand Down Expand Up @@ -362,6 +386,16 @@ __metadata:
languageName: node
linkType: hard

"@babel/helper-module-imports@npm:^7.28.6":
version: 7.28.6
resolution: "@babel/helper-module-imports@npm:7.28.6"
dependencies:
"@babel/traverse": "npm:^7.28.6"
"@babel/types": "npm:^7.28.6"
checksum: 10/64b1380d74425566a3c288074d7ce4dea56d775d2d3325a3d4a6df1dca702916c1d268133b6f385de9ba5b822b3c6e2af5d3b11ac88e5453d5698d77264f0ec0
languageName: node
linkType: hard

"@babel/helper-module-transforms@npm:^7.27.1, @babel/helper-module-transforms@npm:^7.28.3":
version: 7.28.3
resolution: "@babel/helper-module-transforms@npm:7.28.3"
Expand All @@ -375,6 +409,19 @@ __metadata:
languageName: node
linkType: hard

"@babel/helper-module-transforms@npm:^7.28.6":
version: 7.28.6
resolution: "@babel/helper-module-transforms@npm:7.28.6"
dependencies:
"@babel/helper-module-imports": "npm:^7.28.6"
"@babel/helper-validator-identifier": "npm:^7.28.5"
"@babel/traverse": "npm:^7.28.6"
peerDependencies:
"@babel/core": ^7.0.0
checksum: 10/2e421c7db743249819ee51e83054952709dc2e197c7d5d415b4bdddc718580195704bfcdf38544b3f674efc2eccd4d29a65d38678fc827ed3934a7690984cd8b
languageName: node
linkType: hard

"@babel/helper-optimise-call-expression@npm:^7.27.1":
version: 7.27.1
resolution: "@babel/helper-optimise-call-expression@npm:7.27.1"
Expand All @@ -391,6 +438,13 @@ __metadata:
languageName: node
linkType: hard

"@babel/helper-plugin-utils@npm:^7.28.6":
version: 7.28.6
resolution: "@babel/helper-plugin-utils@npm:7.28.6"
checksum: 10/21c853bbc13dbdddf03309c9a0477270124ad48989e1ad6524b83e83a77524b333f92edd2caae645c5a7ecf264ec6d04a9ebe15aeb54c7f33c037b71ec521e4a
languageName: node
linkType: hard

"@babel/helper-remap-async-to-generator@npm:^7.27.1":
version: 7.27.1
resolution: "@babel/helper-remap-async-to-generator@npm:7.27.1"
Expand Down Expand Up @@ -441,6 +495,13 @@ __metadata:
languageName: node
linkType: hard

"@babel/helper-validator-identifier@npm:^7.28.5":
version: 7.28.5
resolution: "@babel/helper-validator-identifier@npm:7.28.5"
checksum: 10/8e5d9b0133702cfacc7f368bf792f0f8ac0483794877c6dca5fcb73810ee138e27527701826fb58a40a004f3a5ec0a2f3c3dd5e326d262530b119918f3132ba7
languageName: node
linkType: hard

"@babel/helper-validator-option@npm:^7.27.1":
version: 7.27.1
resolution: "@babel/helper-validator-option@npm:7.27.1"
Expand Down Expand Up @@ -480,6 +541,17 @@ __metadata:
languageName: node
linkType: hard

"@babel/parser@npm:^7.28.6, @babel/parser@npm:^7.29.0":
version: 7.29.3
resolution: "@babel/parser@npm:7.29.3"
dependencies:
"@babel/types": "npm:^7.29.0"
bin:
parser: ./bin/babel-parser.js
checksum: 10/10e8f34e0fdaa495b9db8be71f4eb29b16d8a57e0818c1bb1c4084015b0383803fd77812ed41597760cbf3d9ab3ae9f4af54f39ff5e5d8e081ba43593232f0ca
languageName: node
linkType: hard

"@babel/plugin-bugfix-firefox-class-in-computed-class-key@npm:^7.27.1":
version: 7.27.1
resolution: "@babel/plugin-bugfix-firefox-class-in-computed-class-key@npm:7.27.1"
Expand Down Expand Up @@ -911,17 +983,17 @@ __metadata:
languageName: node
linkType: hard

"@babel/plugin-transform-modules-systemjs@npm:^7.27.1":
version: 7.27.1
resolution: "@babel/plugin-transform-modules-systemjs@npm:7.27.1"
"@babel/plugin-transform-modules-systemjs@npm:^7.29.4":
version: 7.29.4
resolution: "@babel/plugin-transform-modules-systemjs@npm:7.29.4"
dependencies:
"@babel/helper-module-transforms": "npm:^7.27.1"
"@babel/helper-plugin-utils": "npm:^7.27.1"
"@babel/helper-validator-identifier": "npm:^7.27.1"
"@babel/traverse": "npm:^7.27.1"
"@babel/helper-module-transforms": "npm:^7.28.6"
"@babel/helper-plugin-utils": "npm:^7.28.6"
"@babel/helper-validator-identifier": "npm:^7.28.5"
"@babel/traverse": "npm:^7.29.0"
peerDependencies:
"@babel/core": ^7.0.0-0
checksum: 10/06d7bf76ac4688a36ae8e8d2dde1c3b8bab4594362132b74a00d5a32e6716944d68911b9bc53df60e59f4f9c7f1796525503ce3e3eed42f842d7775ccdfd836e
checksum: 10/79269e6ec8ec831bb63bf1c7cc1a980e28da785e92b36d42612f0139e4044499b99aa109fca849e1a156c092aabf6c24d145f4cabf2ac9ea84ef468852fe4c03
languageName: node
linkType: hard

Expand Down Expand Up @@ -1458,6 +1530,17 @@ __metadata:
languageName: node
linkType: hard

"@babel/template@npm:^7.28.6":
version: 7.28.6
resolution: "@babel/template@npm:7.28.6"
dependencies:
"@babel/code-frame": "npm:^7.28.6"
"@babel/parser": "npm:^7.28.6"
"@babel/types": "npm:^7.28.6"
checksum: 10/0ad6e32bf1e7e31bf6b52c20d15391f541ddd645cbd488a77fe537a15b280ee91acd3a777062c52e03eedbc2e1f41548791f6a3697c02476ec5daf49faa38533
languageName: node
linkType: hard

"@babel/traverse@npm:^7.25.9, @babel/traverse@npm:^7.27.1, @babel/traverse@npm:^7.28.0, @babel/traverse@npm:^7.28.3":
version: 7.28.3
resolution: "@babel/traverse@npm:7.28.3"
Expand All @@ -1473,6 +1556,21 @@ __metadata:
languageName: node
linkType: hard

"@babel/traverse@npm:^7.28.6, @babel/traverse@npm:^7.29.0":
version: 7.29.0
resolution: "@babel/traverse@npm:7.29.0"
dependencies:
"@babel/code-frame": "npm:^7.29.0"
"@babel/generator": "npm:^7.29.0"
"@babel/helper-globals": "npm:^7.28.0"
"@babel/parser": "npm:^7.29.0"
"@babel/template": "npm:^7.28.6"
"@babel/types": "npm:^7.29.0"
debug: "npm:^4.3.1"
checksum: 10/3a0d0438f1ba9fed4fbe1706ea598a865f9af655a16ca9517ab57bda526e224569ca1b980b473fb68feea5e08deafbbf2cf9febb941f92f2d2533310c3fc4abc
languageName: node
linkType: hard

"@babel/types@npm:^7.21.3, @babel/types@npm:^7.27.1, @babel/types@npm:^7.27.3, @babel/types@npm:^7.28.2, @babel/types@npm:^7.4.4":
version: 7.28.2
resolution: "@babel/types@npm:7.28.2"
Expand All @@ -1483,6 +1581,16 @@ __metadata:
languageName: node
linkType: hard

"@babel/types@npm:^7.28.6, @babel/types@npm:^7.29.0":
version: 7.29.0
resolution: "@babel/types@npm:7.29.0"
dependencies:
"@babel/helper-string-parser": "npm:^7.27.1"
"@babel/helper-validator-identifier": "npm:^7.28.5"
checksum: 10/bfc2b211210f3894dcd7e6a33b2d1c32c93495dc1e36b547376aa33441abe551ab4bc1640d4154ee2acd8e46d3bbc925c7224caae02fcaf0e6a771e97fccc661
languageName: node
linkType: hard

"@colors/colors@npm:1.5.0":
version: 1.5.0
resolution: "@colors/colors@npm:1.5.0"
Expand Down Expand Up @@ -5099,14 +5207,14 @@ __metadata:
languageName: node
linkType: hard

"axios@npm:1.15.0":
version: 1.15.0
resolution: "axios@npm:1.15.0"
"axios@npm:^1.15.2":
version: 1.16.0
resolution: "axios@npm:1.16.0"
dependencies:
follow-redirects: "npm:^1.15.11"
follow-redirects: "npm:^1.16.0"
form-data: "npm:^4.0.5"
proxy-from-env: "npm:^2.1.0"
checksum: 10/d39a2c0ebc7ff4739401b282e726cc2673377949d6c46d60eb619458f8d7a2f7eadbcada7097f4dbc7d5c59abb4d3bf6fac33d474412bc3415d3f5aa7ed45530
checksum: 10/cf8b521ff732c21550b38c8739aef556ea5e14b268468bb89e4307416ab262b462e582474e810963a3d61c2392ab47ad35c11d05eff027de7c97113bc7411623
languageName: node
linkType: hard

Expand Down Expand Up @@ -7332,19 +7440,20 @@ __metadata:
languageName: node
linkType: hard

"fast-uri@npm:^3.0.1":
version: 3.1.0
resolution: "fast-uri@npm:3.1.0"
checksum: 10/818b2c96dc913bcf8511d844c3d2420e2c70b325c0653633f51821e4e29013c2015387944435cd0ef5322c36c9beecc31e44f71b257aeb8e0b333c1d62bb17c2
"fast-uri@npm:^3.1.2":
version: 3.1.2
resolution: "fast-uri@npm:3.1.2"
checksum: 10/1dff04865b2a38d3e0659deadfbf72efdf83a776bfbf9667e4aa9e5a3ec31bc341cda9622136b32b7652a857c8ba11896794186e8f876f8b2b72731fce8622f6
languageName: node
linkType: hard

"fast-xml-builder@npm:^1.1.5":
version: 1.1.5
resolution: "fast-xml-builder@npm:1.1.5"
"fast-xml-builder@npm:^1.1.7":
version: 1.2.0
resolution: "fast-xml-builder@npm:1.2.0"
dependencies:
path-expression-matcher: "npm:^1.1.3"
checksum: 10/377c4ef816972e67192fd32757c50d2a9d4cccf352ceac48bda6681a0ee24fb0b1f1c892810f77886db760681f23fe0b8f62c7c0cc9469c0d2863c5c529ac1d2
path-expression-matcher: "npm:^1.5.0"
xml-naming: "npm:^0.1.0"
checksum: 10/5948add7796879d03b6c779cbb17f2f203a41cdf23dfaaa4789c65078a36376cd0709a6586701e980e3d244ebd5fdb35db1235ccb5e4fb9e9abfd8c51e7b8813
languageName: node
linkType: hard

Expand Down Expand Up @@ -8404,10 +8513,10 @@ __metadata:
languageName: node
linkType: hard

"ip-address@npm:^10.0.1":
version: 10.0.1
resolution: "ip-address@npm:10.0.1"
checksum: 10/09731acda32cd8e14c46830c137e7e5940f47b36d63ffb87c737331270287d631cf25aa95570907a67d3f919fdb25f4470c404eda21e62f22e0a55927f4dd0fb
"ip-address@npm:^10.1.1":
version: 10.2.0
resolution: "ip-address@npm:10.2.0"
checksum: 10/12fec399e1af5753ac322e47a6d81a50d3a528b3abb17c09525b2a2edcaedcca628c40520706f7037bc4d8e951b0296c47e7b86d0a8e6e2335c8f0ba4afcfac1
languageName: node
linkType: hard

Expand Down Expand Up @@ -10852,13 +10961,6 @@ __metadata:
languageName: node
linkType: hard

"path-expression-matcher@npm:^1.1.3":
version: 1.2.0
resolution: "path-expression-matcher@npm:1.2.0"
checksum: 10/eab23babd9a97d6cf4841a99825c3e990b70b2b29ea6529df9fb6a1f3953befbc68e9e282a373d7a75aff5dc6542d05a09ee2df036ff9bfddf5e1627b769875b
languageName: node
linkType: hard

"path-expression-matcher@npm:^1.5.0":
version: 1.5.0
resolution: "path-expression-matcher@npm:1.5.0"
Expand Down Expand Up @@ -12357,12 +12459,12 @@ __metadata:
languageName: node
linkType: hard

"qs@npm:~6.14.0":
version: 6.14.2
resolution: "qs@npm:6.14.2"
"qs@npm:^6.15.2":
version: 6.15.2
resolution: "qs@npm:6.15.2"
dependencies:
side-channel: "npm:^1.1.0"
checksum: 10/682933a85bb4b7bd0d66e13c0a40d9e612b5e4bcc2cb9238f711a9368cd22d91654097a74fff93551e58146db282c56ac094957dfdc60ce64ea72c3c9d7779ac
checksum: 10/7a934b2dba40654cf9878dab7c1e7ad56c6186265509727fbece67dadc38fd5d67715b61b6ef938e5a0475faeee701d18ec0a7ce420ad64367caad7f1bdb66e2
languageName: node
linkType: hard

Expand Down Expand Up @@ -14761,9 +14863,9 @@ __metadata:
languageName: node
linkType: hard

"webpack-dev-server@npm:^5.2.2":
version: 5.2.3
resolution: "webpack-dev-server@npm:5.2.3"
"webpack-dev-server@npm:^5.2.4":
version: 5.2.4
resolution: "webpack-dev-server@npm:5.2.4"
dependencies:
"@types/bonjour": "npm:^3.5.13"
"@types/connect-history-api-fallback": "npm:^1.5.4"
Expand Down Expand Up @@ -14802,7 +14904,7 @@ __metadata:
optional: true
bin:
webpack-dev-server: bin/webpack-dev-server.js
checksum: 10/6a3d55c5d84d10b5e23a0638e0031ef85b262947fdacc86d96b7392538ad5894ac14aebef1e2b877f8d27302c71247215b7aa6713e01b1c37d31342415b1a150
checksum: 10/5e5382f8cc7a73e2957542de0c755769548cbca8e7c6d17ed6b526364f11af35025be74f03827afa6723ccbdcc93730b0a0a59882d332fb3c6694a6d290c41e7
languageName: node
linkType: hard

Expand Down Expand Up @@ -15048,6 +15150,13 @@ __metadata:
languageName: node
linkType: hard

"xml-naming@npm:^0.1.0":
version: 0.1.0
resolution: "xml-naming@npm:0.1.0"
checksum: 10/45abd94ba64a508bda3f4d0b70e49811a3c3542596252c213caf47c858bbe9bba365ebba8eeff68e2a876e22a1bf6855d90cd2019b2f28012cebb167a4df2293
languageName: node
linkType: hard

"y18n@npm:^5.0.5":
version: 5.0.8
resolution: "y18n@npm:5.0.8"
Expand Down
Loading