Skip to content

Update vulnerable transitive deps and outdated mocks#107

Closed
ericcornelissen wants to merge 2 commits intojeemok:masterfrom
ericcornelissen:patch-3
Closed

Update vulnerable transitive deps and outdated mocks#107
ericcornelissen wants to merge 2 commits intojeemok:masterfrom
ericcornelissen:patch-3

Conversation

@ericcornelissen
Copy link
Contributor

@ericcornelissen ericcornelissen commented Jan 25, 2025

This addresses the CI failures in #105

These mock values are no longer valid for the test test/utils/vulnerability.test.ts:164:60 in 2025. As a quick fix I updated them to be valid for another 19 years.
Update two packages with vulnerabilities (GHSA-3xgq-45jj-v275 and
GHSA-9wv6-86v2-598j respectively) using `npm update <package>`.
@ericcornelissen ericcornelissen changed the title Bump cross-spawn and path-to-regexp Update vulnerable transitive deps and outdated mocks Jan 25, 2025
@caseyjhol
Copy link
Collaborator

Just seeing this now. In some recent commits, I updated dependencies to resolve vulnerabilities. I'm now locking the date/time during the process exceptions test, so it will continue to work indefinitely.

@caseyjhol caseyjhol closed this Jan 21, 2026
@ericcornelissen ericcornelissen deleted the patch-3 branch January 21, 2026 16:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants