Skip to content

Fix npm audit security vulnerabilities#117

Open
pete-the-pete wants to merge 1 commit intodotenv-org:masterfrom
pete-the-pete:npm-audit-fix
Open

Fix npm audit security vulnerabilities#117
pete-the-pete wants to merge 1 commit intodotenv-org:masterfrom
pete-the-pete:npm-audit-fix

Conversation

@pete-the-pete
Copy link

@pete-the-pete pete-the-pete commented Jan 10, 2026

Summary

Fixes #116

Updates package-lock.json to address npm audit security vulnerabilities and update transitive dependencies to their latest patched versions.

Changes

  • Remove unused @ungap/promise-all-settled dependency
  • Update vulnerable dependencies to patched versions:
    • ansi-colors 4.1.1 → 4.1.3
    • brace-expansion 1.1.11 → 1.1.12
    • braces 3.0.2 → 3.0.3
    • cross-spawn 7.0.3 → 7.0.6
    • debug 4.3.4 → 4.4.3
    • diff 5.0.0 → 5.2.0

🤖 Generated with Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update npm dependencies to fix security vulnerabilities

1 participant