Skip to content

Commit 7605ba2

Browse files
committed
chore(deps): update frontend security dependencies
Consolidates security fixes from multiple Dependabot PRs: - PR #261: node-forge 1.3.1 -> 1.3.2 (CVE-2025-12816, CVE-2025-66031, CVE-2025-66030) - PR #239: js-yaml 3.14.1 -> 3.14.2, 4.1.0 -> 4.1.1 (prototype pollution fix) - PR #115: axios 1.10.0 -> 1.12.0 (bug fixes, type improvements) - PR #97: form-data 3.0.3 -> 4.0.4 (crypto random for boundary values) - PR #96: on-headers 1.0.2 -> 1.1.0, compression 1.8.0 -> 1.8.1 (CVE-2025-7339) All changes verified to build successfully with no breaking changes.
1 parent a310826 commit 7605ba2

File tree

2 files changed

+48
-24
lines changed

2 files changed

+48
-24
lines changed

frontend/package-lock.json

Lines changed: 47 additions & 23 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

frontend/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
"react-router-dom": "^6.20.1",
1212
"react-scripts": "5.0.1",
1313
"typescript": "^4.9.5",
14-
"axios": "^1.6.2",
14+
"axios": "^1.12.0",
1515
"@heroicons/react": "^2.0.18",
1616
"@headlessui/react": "^1.7.17",
1717
"clsx": "^2.0.0",

0 commit comments

Comments
 (0)