Skip to content

fix(deps): bump undici, brace-expansion and handlebars - #295

Merged
pavelzw merged 3 commits into
mainfrom
fix/deps-undici-brace-expansion-handlebars
Oct 14, 2026
Merged

pavelzw merged 3 commits into
mainfrom
fix/deps-undici-brace-expansion-handlebars

Conversation

@wolfv

@wolfv wolfv commented Oct 14, 2026

Copy link
Copy Markdown
Member

Bumps three dependencies with open security advisories and rebuilds dist/.

Package Before After How
undici 6.28.0 6.29.0 pnpm override ^6.28.0 -> ^6.29.0 (transitive via @actions/*)
brace-expansion 1.1.18 1.1.21 pnpm override minimatch@3>brace-expansion ^1.1.18 -> ^1.1.21
handlebars 4.7.9 4.7.10 direct dependency ^4.7.9 -> ^4.7.10

All three are bundled into dist/index.js / dist/post.js, so dist/ was regenerated with pnpm build; the dist diff only touches code from these three packages. pnpm lint:check and pnpm fmt:check pass, and pnpm why shows a single version of each package.

🤖 Generated with Claude Code

@wolfv
wolfv requested a review from pavelzw as a code owner October 14, 2026 14:26

@pavelzw pavelzw left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can you also bump to 0.11.2?

@wolfv

wolfv commented Oct 14, 2026

Copy link
Copy Markdown
Member Author

Done — bumped to 0.11.2 in package.json and the README examples (dabcfcb).

@pavelzw
pavelzw merged commit ad1da64 into main Oct 14, 2026
203 checks passed
@pavelzw
pavelzw deleted the fix/deps-undici-brace-expansion-handlebars branch October 14, 2026 18:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants