Repository navigation
fix(deps): bump fast-copy 3.0.2 -> 3.1.0 (moderate advisory) - #104
Merged
mattglory merged 2 commits intoOct 12, 2026
Merged
Conversation
… tree) Transitive via @clarigen/cli > pino-pretty, dev-only. Lockfile-only: the three fields of the fast-copy entry, nothing else (a plain `npm audit fix` with the local npm also stripped unrelated libc fields, so it was applied by hand). npm ci clean, npm audit no longer lists fast-copy; the 3 remaining highs are the documented braces chain. Full suite at 3.1.0: 277 passed, 3 skipped.
|
@unixwhisperer is attempting to deploy a commit to the matt glory's projects Team on Vercel. A member of the Team first needs to authorize it. |
mattglory
approved these changes
Oct 12, 2026
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Clears the one moderate advisory in the root tree:
fast-copy3.0.2, a transitive dev-only dependency via@clarigen/cli > pino-pretty.npm audit fix(non-force) resolves it to 3.1.0.The change is lockfile-only: the three fields of the
node_modules/fast-copyentry. A plainnpm audit fixwith my local npm also stripped unrelatedlibcfields from other entries, so I applied just this entry by hand to keep the diff clean.Test plan
npm ciclean, installedfast-copyis 3.1.0npm auditno longer lists fast-copy; the 3 remaining highs are the documented braces/chokidar chain (docs(security): document the braces/chokidar DoS finding as an accepted risk #85)Dependency Audit on this PR will still be red until #94 merges, for the same braces reason as every other open PR.
🤖 Generated with Claude Code