Skip to content

fix(deps): bump vulnerable packages - #865

Open
Andris28 wants to merge 1 commit into
mainfrom
fa/fix-CVEs
Open

Andris28 wants to merge 1 commit into
mainfrom
fa/fix-CVEs

Conversation

@Andris28

Copy link
Copy Markdown
Contributor

PR summary

In this commit we bump vulnerable packages that were
reported by scanners.

ref.: #862

PR Checklist

General checklist

Please make sure that your PR fulfills the following requirements:

  • The commit message follows the Angular Commit Message Guidelines.
  • Tests for the changes have been added (for bug fixes / features)
  • Docs have been added / updated (for bug fixes / features)
  • Dependencies have been updated as needed
  • .secrets.baseline has been updated as needed
  • npm run update-utilities has been run if any files in packages/utilities/src have been updated

Checklist for adding a new validation rule:

  • Added new validation rule definition (packages/ruleset/src/rules/*.js, index.js)
  • If necessary, added new validation rule implementation (packages/ruleset/src/functions/*.js, updated index.js)
  • Added new rule to default configuration (packages/ruleset/src/ibm-oas.js)
  • Added tests for new rule (packages/ruleset/test/*.test.js)
  • Added docs for new rule (docs/ibm-cloud-rules.md)
  • Added scoring rubric entry for new rule (packages/validator/src/scoring-tool/rubric.js)

Signed-off-by: András Felleg <afelleg@gmail.com>
@Andris28
Andris28 requested review from diatrcz and pyrooka October 13, 2026 11:06

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant