Skip to content

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates#316

Merged
jsos3-cms merged 2 commits intomainfrom
chore/update-npm-dependencies
Jan 28, 2026
Merged

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates#316
jsos3-cms merged 2 commits intomainfrom
chore/update-npm-dependencies

Conversation

@danielbowne
Copy link
Collaborator

Bumps the npm_and_yarn group with 10 updates in the / directory:

Package From To
vite 5.4.0 5.4.21
braces 3.0.2 3.0.3
ejs 3.1.9 3.1.10
express 4.18.2 4.22.1
js-yaml 3.14.1 3.14.2
markdown-to-jsx 7.3.2 7.7.17
rollup 3.28.0 3.29.5
store2 2.14.2 2.14.4
tar-fs 2.1.1 2.1.4
ws 6.2.2 6.2.3

This PR recreates the dependency updates from Dependabot PR #315 to allow CI/CD to run successfully.

…pdates

Bumps the npm_and_yarn group with 10 updates in the / directory:

- vite: 5.4.0 → 5.4.21
- braces: 3.0.2 → 3.0.3
- ejs: 3.1.9 → 3.1.10
- express: 4.18.2 → 4.22.1
- js-yaml: 3.14.1 → 3.14.2
- markdown-to-jsx: 7.3.2 → 7.7.17
- rollup: 3.28.0 → 3.29.5
- store2: 2.14.2 → 2.14.4
- tar-fs: 2.1.1 → 2.1.4
- ws: 6.2.2 → 6.2.3
…bility

- Fixes Medium Severity Prototype Pollution (SNYK-JS-LODASH-15053838)
- lodash: 4.17.21 → 4.17.23
Copy link
Collaborator

@jsos3-cms jsos3-cms left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

APPROVED!

@jsos3-cms jsos3-cms merged commit ffd7760 into main Jan 28, 2026
3 checks passed
@jsos3-cms jsos3-cms deleted the chore/update-npm-dependencies branch January 28, 2026 20:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants