Skip to content

Update vulnerable dependencies to patched releases - #104

Merged
Blari merged 1 commit into
masterfrom
codex/security-dependencies-2026-11-05
Nov 5, 2026
Merged

Blari merged 1 commit into
masterfrom
codex/security-dependencies-2026-11-05

Conversation

@Blari

@Blari Blari commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

Refresh the npm dependency graph to remove 23 currently reported vulnerable packages, including the Critical Vitest issue. Keep the Vite 7 and Vitest 4 application tooling, use the patched ESLint 9 line with its matching config package, and preserve application code and the existing supported Node versions.

Validation:

  • Clean npm ci: passed; full npm audit: 0 vulnerabilities, runtime and development.
  • npm test: all 4 tests passed.
  • npm run build: passed.
  • npm run lint: zero errors; 1,079 existing warnings remain.
  • Installed Chrome production regression passed: login, direct dashboard/table/chart URLs under the configured deployment subpath, rendered chart and table, zero uncaught page errors. Demo authentication was used; live backend authentication was not exercised.
  • Production screenshot inspected and independent package/lock/Node compatibility review passed.

@Blari
Blari merged commit 46e575c into master Nov 5, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant