Repository navigation
fix(deps): vuln minor upgrades — 11 packages (minor: 4 · patch: 7) [package.json] - #301
Conversation
Auto-rebase failedLockfile regeneration failed during rebase onto Error detailschild workflow execution error (type: engraver.Engraver_AllManagersWorkflow, workflowID: 01a1305d-5e10-728b-9d6d-03b2ee677df8_75, runID: 01a1305d-8c20-7a8f-9220-436d0170cd1a, initiatedEventID: 75, startedEventID: 76): custom action(s) failed and produced no changes: [registry.ddbuild.io/images/engraver-custom-action:update-yarn-lockfile] Auto-Rebase · Add |
68f305e to
49f2495
Compare
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 49f24957c5
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
49f2495 to
63dd9fa
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 63dd9fae60
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
- Refresh affected transitive dependencies and remove sprintf-js - Bundle glob separately to use patched dependencies - Keep humanfs within ESLint's supported 0.16.x range - Regenerate the lockfile and distributable bundles
Summary: High-severity security update — 15 packages upgraded (MINOR changes included)
Manifests changed:
package.json(yarn)✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.
Updates
Security Details
🚨 Critical & High Severity (62 fixed)
ℹ️ Other Vulnerabilities (37)
$dataoption{a},b}rewrite causes CPU denial of service{a},b}rewrite causes CPU denial of service{a},b}rewrite causes CPU denial of servicemaxDoS protection{a},b}rewrite causes CPU denial of service{a},b}rewrite causes CPU denial of service{a},b}rewrite causes CPU denial of servicemaxDoS protectionReview Checklist
Standard review:
Update Mode: all_vulns
🤖 Generated by DataDog Automated Dependency Management System