Repository navigation
Fix high-severity npm advisories for v0.23.4 - #81
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependency-only fix for the v0.23.4 maintenance release (release/v0.23.4, cut from v0.23.3; ledger XC-6148).
Changes (package.json / package-lock.json only): follow-redirects 1.16.0 to 1.16.1, mariadb 3.5.3 to 3.5.4 (package.json pin), fast-uri 3.1.7 to 3.1.9, hono 4.13.5 to 4.13.13, ip-address 10.7.0 to 10.7.4.
npm audit --omit=dev --audit-level=high: before 2 high / 0 critical; after: passes.
Suite: full CI suite (ci:full) on test02 with siblings pinned to the v0.23.4 candidates (not develop): 7146 pass, 0 fail, 10 pending (Node 22.23.4).
No source, gate or consensus code changes. The pre-push gate was skipped for this push by operator ruling, because it grades against develop siblings; the sibling-pinned suite above is the evidence.