Skip to content

fix(deps): Resolve Dependabot alerts - #101

Merged
MathurAditya724 merged 1 commit into
mainfrom
codex/fix-dependabot-alerts
Sep 4, 2026
Merged

fix(deps): Resolve Dependabot alerts#101
MathurAditya724 merged 1 commit into
mainfrom
codex/fix-dependabot-alerts

Conversation

@MathurAditya724

@MathurAditya724 MathurAditya724 commented Sep 4, 2026

Copy link
Copy Markdown
Member

Refreshes the Action Toolkit, build tooling, and both dependency lockfiles so the root Action and standalone website resolve the patched releases for the open Dependabot advisories. The Toolkit upgrade removes the affected runtime undici, Octokit, and glob dependency chains; the website remains on compatible Vite 7 while moving React Router to its patched release.

The generated Action bundle is rebuilt. The configuration-loader test now uses an ESM-safe @actions/core mock required by the upgraded toolkit, and the Vitest coverage provider is aligned with the runner.

Fixes VULN-2671 VULN-2672 VULN-2674 VULN-2747 VULN-2748
Fixes VULN-2863 VULN-2864 VULN-2865 VULN-2866 VULN-2869

Upgrade the Action Toolkit and refresh both dependency graphs with patched transitive resolutions.
@github-actions

github-actions Bot commented Sep 4, 2026

Copy link
Copy Markdown

Codecov Results 📊

205 passed | Total: 205 | Pass Rate: 100% | Execution Time: 377ms

📊 Comparison with Base Branch

Metric Change
Total Tests
Passed Tests
Failed Tests
Skipped Tests

✨ No test changes detected

All tests are passing successfully.

✅ Patch coverage is 100.00%. Project has 682 uncovered lines.
✅ Project coverage is 61.37%. Comparing base (0a35ce2) to head (502fb31).

Coverage diff
@@            Coverage Diff             @@
##          main       #PR       +/-##
==========================================
+ Coverage    61.37%    61.37%        —%
==========================================
  Files           24        24         —
  Lines         1761      1761         —
  Branches      1269      1269         —
==========================================
+ Hits          1079      1079         —
- Misses         682       682         —
- Partials       105       105         —

Generated by Codecov Action

@MathurAditya724
MathurAditya724 marked this pull request as ready for review September 4, 2026 13:21
@MathurAditya724
MathurAditya724 merged commit d9789bf into main Sep 4, 2026
14 checks passed
@MathurAditya724
MathurAditya724 deleted the codex/fix-dependabot-alerts branch September 4, 2026 13:21
@linear-code

linear-code Bot commented Sep 5, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant