Skip to content

Fix NPM audit#525

Merged
lempira merged 2 commits intomainfrom
fix/npm-audit
Nov 19, 2025
Merged

Fix NPM audit#525
lempira merged 2 commits intomainfrom
fix/npm-audit

Conversation

@PatrickDinh
Copy link
Copy Markdown
Contributor

@PatrickDinh PatrickDinh commented Nov 19, 2025

In this PR, I ignore the audit issue GHSA-5j98-mcp5-4vw2 because:

  • glob is bundled in npm package, which is used by semantic-release
  • Even the latest npm version 11.6.2 still uses glob version 11.0.3 which still has this issue

@PatrickDinh PatrickDinh requested a review from lempira November 19, 2025 03:09
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Nov 19, 2025

Deploying algokit-lora with  Cloudflare Pages  Cloudflare Pages

Latest commit: f487dc1
Status: ✅  Deploy successful!
Preview URL: https://f70d3b6b.algokit-lora.pages.dev
Branch Preview URL: https://fix-npm-audit.algokit-lora.pages.dev

View logs

@lempira lempira merged commit 130cb15 into main Nov 19, 2025
2 checks passed
engineering-ci bot pushed a commit that referenced this pull request Nov 19, 2025
## [2.2.1-beta.6](v2.2.1-beta.5...v2.2.1-beta.6) (2025-11-19)

### 🐛 Bug Fixes

* npm audit ([#525](#525)) ([130cb15](130cb15))
engineering-ci bot pushed a commit that referenced this pull request Nov 24, 2025
## [2.2.1](v2.2.0...v2.2.1) (2025-11-24)

### ♻️ Code Refactoring

* **latest_cards:** refactor latest blocks card to use flex layout instead of margins ([aba9cee](aba9cee))

### 🐛 Bug Fixes

* **actions_overflow:** fix action buttons being cut on the wizard form ([48379a9](48379a9))
* **app_call_table:** fix app call table to display important data even on mobile ([cb99a81](cb99a81))
* **build:** fix build errors ([85b3734](85b3734))
* convert AVMBytes template parameters from base64 to Uint8Array ([50a038f](50a038f))
* Decoded ABI Args now render an address the same as an account ([23fbf9a](23fbf9a))
* **dependencies:** fix jotai and semantic release dependencies for CI ([80fded7](80fded7))
* **double_heading:** remove unnecessary heading that was breaking tests ([debf512](debf512))
* **mobile:** fix few reviews on previous comment ([4f6ec74](4f6ec74))
* npm audit ([#525](#525)) ([130cb15](130cb15))
* **package-lock:** fix package lock not being in sync with package.json breaking CI ([b615b68](b615b68))
* **package-lock:** fix package lock to use jotai 2.7 + sync package.json ([2aacbbc](2aacbbc))
* **package:** fix package-lock to reflect tailwind deps 4.16^ + fix recurring build errors ([65d6cd5](65d6cd5))
* prevent validation errors from obstructing help text and add address field help text ([b04f9f9](b04f9f9))
* support assets which signal arc3 conformance using asset name ([c467165](c467165))
* **tables:** fix table layouts and fields to correctly scroll and display important fields ([e7a51ec](e7a51ec))
* trigger application interface name validation when interface exists ([8a4b168](8a4b168))
* use new-release-version rather than new-release-git-tag, which does not exist ([b5a9a72](b5a9a72))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants