Skip to content

Update package-lock.json#1576

Open
ColorfulRhino wants to merge 1 commit into
DependencyTrack:mainfrom
ColorfulRhino:update-deps-lockfile
Open

Update package-lock.json#1576
ColorfulRhino wants to merge 1 commit into
DependencyTrack:mainfrom
ColorfulRhino:update-deps-lockfile

Conversation

@ColorfulRhino

Copy link
Copy Markdown
Contributor

Description

Followup for #1561 (comment)

This addresses a bunch of vulnerabilities reported by npm:

Before:

136 vulnerabilities (15 low, 72 moderate, 40 high, 9 critical)

After:

112 vulnerabilities (15 low, 66 moderate, 24 high, 7 critical)

This also bumps the lockfileVersion from 2 to 3, which is fine since this version is used by default since npm v9: https://docs.npmjs.com/cli/v11/configuring-npm/package-lock-json#lockfileversion

The minimum npm version of this project was recently bumped to v10.

Addressed Issue

n/a

Additional Details

I started up the frontend container with these changes alongside the latest snapshot api-server container. Logged in and did not see any obvious bugs.

Checklist

@owasp-dt-bot

owasp-dt-bot commented Jun 5, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

This addresses a bunch of vulnerabilities reported by npm.

This also bumps the lockfileVersion from 2 to 3, which is fine
since this version is used by default since npm v9:
https://docs.npmjs.com/cli/v11/configuring-npm/package-lock-json#lockfileversion

The minimum npm version of this project was recently bumped to v10.

Signed-off-by: ColorfulRhino <131405023+ColorfulRhino@users.noreply.github.com>
@ColorfulRhino ColorfulRhino force-pushed the update-deps-lockfile branch from b9e9d0f to 5d17a5e Compare June 5, 2026 12:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants