Skip to content

Apply npm audit fixes with a 7-day release-age safeguard - #2428

Merged
Raymond Zhao (rzhao271) merged 1 commit into
mainfrom
copilot/run-npm-audit-fix-again
Oct 2, 2026
Merged

Raymond Zhao (rzhao271) merged 1 commit into
mainfrom
copilot/run-npm-audit-fix-again

Conversation

Copilot AI commented Oct 2, 2026 •

Copy link
Copy Markdown
Contributor

Ran npm audit fix --min-release-age 7 with npm 11.19.0 and updated compatible dependency resolutions in the lockfile.

  • Lockfile: Refreshes resolutions including express, body-parser, qs, and related dependencies.
  • Remaining findings: npm leaves 11 vulnerabilities whose available fixes require major-version upgrades.

Co-authored-by: rzhao271 <7199958+rzhao271@users.noreply.github.com>
Copilot AI changed the title Apply npm audit fixes with 7-day release age Apply npm audit fixes with a 7-day release-age safeguard Oct 2, 2026
@rzhao271
Raymond Zhao (rzhao271) marked this pull request as ready for review October 2, 2026 21:08
@rzhao271
Raymond Zhao (rzhao271) enabled auto-merge (squash) October 2, 2026 21:08
@rzhao271
Raymond Zhao (rzhao271) merged commit 1c29ecb into main Oct 2, 2026
15 of 16 checks passed
@rzhao271
Raymond Zhao (rzhao271) deleted the copilot/run-npm-audit-fix-again branch October 2, 2026 23:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants