Skip to content

fix: vulnerable package versions#22

Merged
DaniAkash merged 15 commits intomainfrom
dani/fix-vulnerabilities
Apr 24, 2025
Merged

fix: vulnerable package versions#22
DaniAkash merged 15 commits intomainfrom
dani/fix-vulnerabilities

Conversation

@DaniAkash
Copy link
Contributor

@DaniAkash DaniAkash commented Apr 22, 2025

This pull request includes dependency updates in package.json and adjustments to test cases in the integration test files. The most important changes include upgrading several dependencies, modifying an assertion in app.integration.test.ts, and skipping a test in model.integration.test.ts.

Dependency Updates:

  • package.json: Upgraded @vitest/coverage-v8 from ^1.3.1 to ^3.1.2, vitest from ^1.3.1 to ^3.1.2, and axios from ^1.6.8 to ^1.8.2. These updates aim to ensure compatibility with the latest features and fixes. [1] [2]

Test Adjustments:

  • tests/client/app.integration.test.ts: Updated the expected value in the assertion for list.value?.length from 16 to 15 to align with changes in the application's behavior or data.
  • tests/client/model.integration.test.ts: Skipped the test for predicting multimodal with image and text by changing it to it.skip. This may indicate the test is temporarily disabled due to issues or ongoing changes.

dependabot bot and others added 10 commits June 28, 2024 13:50
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ws](https://github.com/websockets/ws) from 8.16.0 to 8.17.1.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.16.0...8.17.1)

---
updated-dependencies:
- dependency-name: ws
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@DaniAkash DaniAkash changed the title fix: vulnerabilities package versions fix: vulnerable package versions Apr 22, 2025
@arnoldramo arnoldramo requested a review from Copilot April 22, 2025 20:21
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates dependency versions to address vulnerabilities and adjusts integration tests to accommodate changes in application behavior.

  • Upgraded packages in package.json (including @vitest/coverage-v8, vitest, and axios) to the latest versions.
  • Updated test assertions in app.integration.test.ts and temporarily skipped a multimodal prediction test in model.integration.test.ts.
  • Extended test object setup in fromPartialProtobufObject.unit.test.ts with new properties for LicenseType and Model.Source.

Reviewed Changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated no comments.

File Description
tests/utils/fromPartialProtobufObject.unit.test.ts Added expected default fields (licenseType, source, creator, versionCount) to test objects.
tests/client/model.integration.test.ts Skipped the multimodal prediction test.
tests/client/app.integration.test.ts Updated the expected length of models from 16 to 15 and commented out an outdated API assertion.
Files not reviewed (1)
  • package.json: Language not supported
Comments suppressed due to low confidence (2)

tests/client/model.integration.test.ts:293

  • Consider adding an explanatory comment to clarify why this test is skipped and include a plan for re-enabling it once the underlying issue is resolved.
it.skip("should predict multimodal with image and text", async () => {

tests/client/app.integration.test.ts:166

  • Once the API update is complete, please remove the TODO and re-enable the assertion to ensure full test coverage.
// TODO: Uncomment once the API is updated

@arnoldramo arnoldramo requested a review from a team April 24, 2025 00:10
@DaniAkash DaniAkash merged commit c84db94 into main Apr 24, 2025
5 of 7 checks passed
@DaniAkash DaniAkash deleted the dani/fix-vulnerabilities branch July 24, 2025 12:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants