GH#67: update moment dependency

[superdav42]

Summary

Updated the indirect moment package from 2.30.1 to 2.31.0, incorporating the Dependabot security release.

Replacement Audit

This explicitly justified replacement preserves open PR #66. Rationale: Superseded by this maintainer-owned replacement after the update passed local and remote checks. Verified ancestor before WIP finalization: 18fd240.

Files Changed

package-lock.json

Runtime Testing

• Risk level: Medium
• Verification: self-assessed — npm ci; npm run lint; npm run build; npm audit confirms moment has no reported vulnerability.

Resolves #67

---

aidevops.sh v3.39.25 plugin for OpenCode v1.18.34 with gpt-5.6-terra spent 11m and 89,457 tokens on this as a headless worker.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

• Configuration used: Repository: Ultimate-Multisite/simple-comment-editing/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: be8cd065-2b23-4fbb-847c-56b2e3fc331c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[superdav42]

Completion Summary

• What: Updated the indirect moment package from 2.30.1 to 2.31.0, incorporating the Dependabot security release.
• Issue: Dependabot PR #66 requires worker resolution #67
• Files changed: package-lock.json
• Testing: npm ci; npm run lint; npm run build; npm audit confirms moment has no reported vulnerability.
• Key decisions: Reused the exact three-line package-lock update from Dependabot PR Bump moment from 2.30.1 to 2.31.0 #66; unrelated audit findings remain out of scope.

---

aidevops.sh v3.39.25 plugin for OpenCode v1.18.34 with gpt-5.6-terra spent 11m and 89,457 tokens on this as a headless worker.