Skip to content

chore: update dependencies and improve documentation#9

Merged
kenhuang merged 4 commits intomasterfrom
kh/bump-deps
Oct 7, 2025
Merged

chore: update dependencies and improve documentation#9
kenhuang merged 4 commits intomasterfrom
kh/bump-deps

Conversation

@kenhuang
Copy link
Copy Markdown

@kenhuang kenhuang commented Oct 6, 2025

What?

 yarn audit                 
yarn audit v1.22.1
(node:58661) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.
(Use `node --trace-deprecation ...` to show where the warning was created)
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Regular Expression Denial of Service in path-parse           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ path-parse                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.0.7                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @zerollup/ts-transform-paths [dev]                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @zerollup/ts-transform-paths > @zerollup/ts-helpers >        │
│               │ resolve > path-parse                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1089681                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Regular Expression Denial of Service in path-parse           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ path-parse                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.0.7                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ downlevel-dts [dev]                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ downlevel-dts > shelljs > rechoir > resolve > path-parse     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1089681                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
2 vulnerabilities found - Packages audited: 129
Severity: 2 Moderate
✨  Done in 0.42s.

Why?

How?

Testing?

New Dependencies?

Screenshots

Suggested Reading?

Anything Else?

Checklist

  • I read CONTRIBUTING.md.
  • I read MAINTAINERSHIP.md#pull-requests.
  • I added/updated unit tests for my changes.
  • I added/updated integration tests for my changes.
  • I ran the integration tests.
  • I tested my changes in Node, Deno, and the browser.
  • I viewed documents produced with my changes in Adobe Acrobat, Foxit Reader, Firefox, and Chrome.
  • I added/updated doc comments for any new/modified public APIs.
  • My changes work for both new and existing PDF files.
  • I ran the linter on my changes.

@kenhuang kenhuang marked this pull request as ready for review October 6, 2025 04:42
@kenhuang kenhuang merged commit 9abee31 into master Oct 7, 2025
4 checks passed
@kenhuang kenhuang deleted the kh/bump-deps branch October 7, 2025 00:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

2 participants