Skip to content

fix(deps): update dependency buefy to v3#493

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/buefy-3.x
Open

fix(deps): update dependency buefy to v3#493
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/buefy-3.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2025

This PR contains the following updates:

Package Change Age Confidence
buefy (source) 0.9.293.0.4 age confidence

Release Notes

buefy/buefy (buefy)

v3.0.4

Compare Source

Fixes
  • #​4277 Fixed dropdown style for link-based items.
  • #​4280 Fixed missing background color in Datepicker.
  • #​4283 Added missing reference to Table component.
Enhancements
  • #​4261 Updated and expanded documentation as part of the revamp.
  • #​4287 Enhanced RTL support for Checkbox, Radio, Switch, and Form Field components.
  • #​4267 Added support for custom class props across components.
Chores & Dependency Updates
  • #​4268 Bumped Vite from 6.3.6 to 6.4.1.
  • #​4273 Bumped js-yaml from 4.1.0 to 4.1.1.
  • #​4279 Upgraded various project dependencies.
  • #​4281 Bumped shelljs and pre-commit versions.

v3.0.3

Compare Source

Fixes
Fixes (docs)
  • #​4254 Fixed CarbonAds code and themed it around buefy's theme.
  • #​4255 Fixed broken dev script in documentation - npm run dev stopped working.
Chores (docs)
  • #​4249 Bumped vite from 6.3.5 to 6.3.6.

v3.0.2

Compare Source

Fixes
  • #​4238 Updated navbar icon colors and fixed NavBurger rendering.
  • #​4229 Bubble up mouse events from b-table rows for better interactivity (@​kikuomax).
  • #​4236 Augmented Using Vue docs and examples for clarity (@​ElteHupkes).
  • #​4235 Extended Buefy CSS output to include built versions for CDN and static use.
  • #​4237 Updated internal CSS path references for consistency.
Fixes (docs)
  • #​4227 Updated StackBlitz integration to reflect latest component usage and styling.

v3.0.1

Compare Source

Fixes
  • #​4211 Restored autocomplete arrow key hover styles.
  • #​4205 Removed old modal style for closing "x" (now fixed in Bulma v1).
  • #​4204 Added missing span to NavBurger.
  • #​4210 chore(lib): use @forward in Buefy main Sass file to allow custom Sass variables.
Fixes (docs)

v3.0.0

Compare Source

Breaking Changes
  • Migrated entire codebase to Bulma v1.0.3 for modernized styling and layout.
  • Deprecated Sass global built-in functions; replaced with modern equivalents.
  • Removed legacy bulmacssvars and outdated style references.
  • Replaced all value props with modelValue across components to align with Vue 3 standards.
  • Programmatically mounted components (e.g., Modal, Dialog, Snackbar) now require standalone Vue apps and cannot use plugins.
  • StepItem, CarouselItem, and TabItem now require explicit order props to maintain consistent rendering order.
New Features
  • Introduced a new color system for Buefy v3 documentation and component theming.
  • Added support for Cleave.js as a directive for input formatting.
  • Updated all style variables and documentation to reflect Bulma v1 conventions.
Fixes
  • Resolved SCSS issues in Dropdown, Navbar, and Input loading states.
  • Fixed deprecated Sass usage and lint/type check errors across the codebase.
  • Updated unit tests to reflect new architecture and styling.
Fixes (docs)
  • Updated documentation for Sass and CSS variable usage.
  • Refreshed component style variable references and examples.
  • Migrated interactive examples to StackBlitz and updated Netlify deploy previews.
Others
  • Merged 28 commits for Bulma v1 migration and v3 release.
  • Bumped version to v3.0.0 and updated changelog accordingly.
  • Cleaned up dev dependencies and workflows for modern build tools.

v1.0.2

Compare Source

Fixes
  • #​4139 Fixed various bugs in the Autocomplete component.
  • #​4189 Fixed Clockpicker not closing properly and removed the autoSwitch prop.
  • #​4156 Exported SnackbarOpenParams type for better TypeScript support.
  • #​4176 Fixed issues in the ImproveThis component.
  • Removed deprecated high contrast styles and references.
  • Removed accidental dependencies and cleaned up unused references to buefy-next.
Fixes (docs)
  • #​4142 Updated documentation for Vue 3 components.
  • #​4193 Cleaned up README content and formatting.
  • Updated social and Discord links across documentation.
  • Migrated interactive examples from CodePen to StackBlitz.
Others
  • #​4173 Version bump: package.json version set to 1.0.2
  • #​4197 Update Changelog for version 1.0.2
  • #​4184 Added bulma as a direct dependency of Buefy.
  • #​4192 Cleaned up StackBlitz integration and dev dependencies.
  • #​4196 Implemented Carbon Ads integration.
  • Updated workflows and access levels for dev packages.
  • Added reference to ClockpickerFace component.
  • Added Buefy Collective metadata for community support.

v1.0.1

Breaking changes
  • #​4135 Tooltip introduced a new variant is-auto for the position prop and made it the new default.
Fixes
  • Updated workflows and scripts to reference the package as "buefy" instead of "@​ntohq/buefy-next".
  • Updated main repo references:
  • package.json now points to the new repository and issues URLs.
  • Linting, type check, and unit test scripts reference "buefy" workspace.
  • All configuration and ignore files renamed/moved from buefy-next to buefy.
Fixes (docs)
  • README installation and usage instructions updated to use buefy as the npm package.
  • Documentation now references buefy instead of @​ntohq/buefy-next everywhere.
  • Clarified developer release installation instructions and naming conventions in the README.
Others
  • Version bump: package.json version set to 1.0.1.
  • jsconfig updated to reference new source directory.
  • Large updates to package-lock.json and workflow YAML files to match new structure.

v1.0.0

This version was published more than 8 years before the intended release of Buefy 1.0 and does not represent the official, stable v1. It was released prematurely and lacks the features, structure, and design decisions that define the true Buefy v1.0.0

Please upgrade to v1.0.1 or newer to access the latest architecture, complete documentation, and active support.


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Oct 1, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: src/list/package-lock.json
npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: list@0.0.0
npm error Found: vue@2.7.16
npm error node_modules/vue
npm error   vue@"2.7.16" from list@0.0.0
npm error   frontend
npm error     list@0.0.0
npm error     node_modules/list
npm error       workspace frontend from the root project
npm error
npm error Could not resolve dependency:
npm error peer vue@"^3.0.0" from buefy@3.0.4
npm error node_modules/buefy
npm error   buefy@"3.0.4" from list@0.0.0
npm error   frontend
npm error     list@0.0.0
npm error     node_modules/list
npm error       workspace frontend from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-03-05T14_38_20_605Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-03-05T14_38_20_605Z-debug-0.log

@github-actions
Copy link

github-actions bot commented Oct 1, 2025

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 14 0 0 0.26s
✅ BASH bash-exec 7 0 0 0.04s
✅ BASH shellcheck 4 0 0 0.18s
⚠️ BASH shfmt 7 1 0 0.02s
✅ CSHARP csharpier 3 0 0 2.55s
⚠️ CSHARP roslynator 1 1 0 11.59s
✅ CSS stylelint 1 0 0 1.83s
✅ DOCKERFILE hadolint 5 0 0 0.25s
✅ EDITORCONFIG editorconfig-checker 435 0 0 3.01s
✅ ENV dotenv-linter 1 0 0 0.01s
⚠️ GROOVY npm-groovy-lint 8 0 20 26.56s
✅ HTML djlint 2 0 0 2.73s
✅ HTML htmlhint 2 0 0 0.39s
⚠️ JAVA checkstyle 64 0 90 10.52s
✅ JSON jsonlint 53 0 0 0.55s
✅ JSON prettier 53 0 0 6.28s
✅ JSON v8r 53 0 0 33.49s
⚠️ MARKDOWN markdownlint 23 282 0 2.71s
✅ PYTHON bandit 1 0 0 2.49s
✅ PYTHON black 1 0 0 1.57s
✅ PYTHON flake8 1 0 0 1.12s
✅ PYTHON isort 1 0 0 0.63s
✅ PYTHON mypy 1 0 0 11.75s
✅ PYTHON ruff 1 0 0 0.03s
✅ REPOSITORY checkov yes no no 45.09s
✅ REPOSITORY gitleaks yes no no 5.86s
✅ REPOSITORY git_diff yes no no 0.06s
⚠️ REPOSITORY kics yes no 109 55.95s
✅ REPOSITORY secretlint yes no no 3.84s
✅ REPOSITORY syft yes no no 16.97s
⚠️ REPOSITORY trivy yes 22 no 22.92s
✅ REPOSITORY trivy-sbom yes no no 7.83s
✅ REPOSITORY trufflehog yes no no 6.77s
✅ XML xmllint 4 0 0 1.47s
✅ YAML prettier 118 0 0 3.16s

Detailed Issues

⚠️ JAVA / checkstyle - 90 warnings
warning: First sentence of Javadoc is missing an ending period.

warning: First sentence of Javadoc is missing an ending period.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Line is longer than 100 characters (found 103).

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: First sentence of Javadoc is missing an ending period.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Line is longer than 100 characters (found 107).

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: First sentence of Javadoc is missing an ending period.

warning: Line is longer than 100 characters (found 115).

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Missing a Javadoc comment.

warning: Line is longer than 100 characters (found 220).

warning: Line is longer than 100 characters (found 104).

warning: Line is longer than 100 characters (found 117).

warning: Line is longer than 100 characters (found 154).

warning: Line is longer than 100 characters (found 111).

warning: Line is longer than 100 characters (found 128).

warning: Line is longer than 100 characters (found 142).

warning: Missing a Javadoc comment.

warning: Line is longer than 100 characters (found 104).

warning: Line is longer than 100 characters (found 132).

warning: Line is longer than 100 characters (found 141).

warning: 90 warnings emitted
⚠️ REPOSITORY / kics - 109 warnings
ty_opt' attribute
    ┌─ docker-compose/docker-compose.staging.yaml:211:1
    │
211 │   notify:
    │ ^^^^^^^^^
    │
    = Security Opt Not Set
    = Attribute 'security_opt' should be defined.

warning: The 'Dockerfile' contains the 'chown' flag
  ┌─ src/Dockerfile:4:1
  │
4 │ COPY --chown=gradle:gradle . .
  │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  │
  = Chown Flag Exists
  = It is considered a best practice for every executable in a container to be owned by the root user even if it is executed by a non-root user, only execution permissions are required on the file, not ownership

warning: 'deploy' is not defined
   ┌─ src/notify/tests/e2e/docker-compose.yaml:47:1
   │
47 │   fhir:
   │ ^^^^^^^
   │
   = Cpus Not Limited
   = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: 'deploy' is not defined
   ┌─ src/notify/tests/e2e/docker-compose.yaml:26:1
   │
26 │   jobstore-db:
   │ ^^^^^^^^^^^^^^
   │
   = Cpus Not Limited
   = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: 'deploy' is not defined
   ┌─ src/notify/tests/e2e/docker-compose.yaml:56:1
   │
56 │   maildev:
   │ ^^^^^^^^^^
   │
   = Cpus Not Limited
   = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: 'deploy' is not defined
   ┌─ src/notify/tests/e2e/docker-compose.yaml:33:1
   │
33 │   tester:
   │ ^^^^^^^^^
   │
   = Cpus Not Limited
   = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: 'deploy' is not defined
  ┌─ src/notify/tests/e2e/docker-compose.yaml:4:1
  │
4 │   notify:
  │ ^^^^^^^^^
  │
  = Cpus Not Limited
  = CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

warning: Dockerfile doesn't contain instruction 'HEALTHCHECK'
   ┌─ src/Dockerfile:20:1
   │
20 │ FROM gcr.io/distroless/java25-debian13:nonroot@sha256:ace83a068839dbfb151b0d80693df23120f6d13f963427fde7e43d9a175fd54a
   │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = Healthcheck Instruction Missing
   = Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

warning: Dockerfile doesn't contain instruction 'HEALTHCHECK'
  ┌─ src/list/frontend/tests/e2e/Dockerfile:1:1
  │
1 │ FROM docker.io/cypress/included:14.5.4@sha256:848fb0d361178e695aa3ebd0f9632f2966232907c0fc02fbd6432e07d4d08d8b
  │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  │
  = Healthcheck Instruction Missing
  = Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

warning: Dockerfile doesn't contain instruction 'HEALTHCHECK'
  ┌─ src/query/tests/e2e/Dockerfile:1:1
  │
1 │ FROM docker.io/library/python:3.14.2-slim-bookworm@sha256:e87711ef5c86aaeaa7031718a69db79d334d94c545c709583f651b8185870941
  │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  │
  = Healthcheck Instruction Missing
  = Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

warning: Dockerfile doesn't contain instruction 'HEALTHCHECK'
   ┌─ src/list/Dockerfile:29:1
   │
29 │ FROM gcr.io/distroless/nodejs24-debian13:nonroot@sha256:38792f83f35f2df89d403f49491782981dd13a853bbcb09ff978d79328263463
   │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = Healthcheck Instruction Missing
   = Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

warning: There are COPY instructions that could be grouped
   ┌─ src/Dockerfile:24:1
   │
24 │ COPY --from=build /home/gradle/project/${MODULE_NAME}/dependencies/ ./
   │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = Multiple RUN, ADD, COPY, Instructions Listed
   = Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.

warning: Volume {"target": "/tmp", "tmpfs": {"size": 1024}, "type": "tmpfs"} shared between containers
    ┌─ docker-compose/docker-compose.yaml:118:1
    │
118 │       - type: tmpfs
    │ ^^^^^^^^^^^^^^^^^^^
    │
    = Shared Volumes Between Containers
    = Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.

warning: Volume {"target": "/tmp", "tmpfs": {"size": 1024}, "type": "tmpfs"} shared between containers
   ┌─ docker-compose/docker-compose.yaml:67:1
   │
67 │       - type: tmpfs
   │ ^^^^^^^^^^^^^^^^^^^
   │
   = Shared Volumes Between Containers
   = Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.

warning: Volume {"target": "/tmp", "tmpfs": {"size": 1024}, "type": "tmpfs"} shared between containers
   ┌─ docker-compose/docker-compose.yaml:93:1
   │
93 │       - type: tmpfs
   │ ^^^^^^^^^^^^^^^^^^^
   │
   = Shared Volumes Between Containers
   = Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.

warning: 109 warnings emitted

(Truncated to last 5714 characters out of 33943)
⚠️ MARKDOWN / markdownlint - 282 errors
Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:24:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:25:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:26:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:27:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:28:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:31:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:32:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:33:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:34:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:35:121 error MD013/line-length Line length [Expected: 120; Actual: 267]
docs/configuration/options.md:39:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:40:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:41:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:42:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:43:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:44:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:45:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:46:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:47:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:49:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:50:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:52:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:53:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:54:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:55:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:56:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:57:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:58:121 error MD013/line-length Line length [Expected: 120; Actual: 376]
docs/configuration/options.md:59:218 error MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/configuration/options.md:63:121 error MD013/line-length Line length [Expected: 120; Actual: 126]
docs/configuration/options.md:68:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:69:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:70:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:71:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:72:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:73:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:74:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:75:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:76:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:77:121 error MD013/line-length Line length [Expected: 120; Actual: 240]
docs/configuration/options.md:80:121 error MD013/line-length Line length [Expected: 120; Actual: 293]
docs/deployment/docker-compose.md:43:121 error MD013/line-length Line length [Expected: 120; Actual: 171]
docs/deployment/docker-compose.md:44:121 error MD013/line-length Line length [Expected: 120; Actual: 171]
docs/deployment/kubernetes.md:12:121 error MD013/line-length Line length [Expected: 120; Actual: 125]
docs/deployment/resource-requirements.md:7:2 error MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/deployment/resource-requirements.md:8:6 error MD059/descriptive-link-text Link text should be descriptive [Context: "[here]"]
docs/deployment/resource-requirements.md:36 error MD039/no-space-in-links Spaces inside link text [Context: "...ment for Pods and Containers ]"]
docs/development/contributing.md:64:121 error MD013/line-length Line length [Expected: 120; Actual: 174]
docs/development/contributing.md:70:121 error MD013/line-length Line length [Expected: 120; Actual: 172]
docs/index.md:23:121 error MD013/line-length Line length [Expected: 120; Actual: 302]
docs/index.md:39:121 error MD013/line-length Line length [Expected: 120; Actual: 125]
docs/trino/index.md:10:121 error MD013/line-length Line length [Expected: 120; Actual: 132]
docs/trino/index.md:19:121 error MD013/line-length Line length [Expected: 120; Actual: 151]
docs/trino/index.md:22:121 error MD013/line-length Line length [Expected: 120; Actual: 147]
docs/trino/index.md:23:121 error MD013/line-length Line length [Expected: 120; Actual: 144]

(Truncated to last 5714 characters out of 28508)
⚠️ GROOVY / npm-groovy-lint - 20 warnings
uildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:74:24
   │
74 │             intoLayer("application")
   │                        ^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'module-dependencies' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:77:24
   │
77 │             intoLayer("module-dependencies") {
   │                        ^^^^^^^^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'org.miracum:*:*' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:78:26
   │
78 │                 include("org.miracum:*:*")
   │                          ^^^^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'dependencies' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:80:24
   │
80 │             intoLayer("dependencies")
   │                        ^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'dependencies' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:82:25
   │
82 │         layerOrder = [ "dependencies", "spring-boot-loader", "module-dependencies", "application" ]
   │                         ^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'spring-boot-loader' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:82:41
   │
82 │         layerOrder = [ "dependencies", "spring-boot-loader", "module-dependencies", "application" ]
   │                                         ^^^^^^^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'module-dependencies' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:82:63
   │
82 │         layerOrder = [ "dependencies", "spring-boot-loader", "module-dependencies", "application" ]
   │                                                               ^^^^^^^^^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: The String 'application' can be wrapped in single quotes instead of double quotes
   ┌─ src/buildSrc/src/main/groovy/org.miracum.recruit.java-application-conventions.gradle:82:86
   │
82 │         layerOrder = [ "dependencies", "spring-boot-loader", "module-dependencies", "application" ]
   │                                                                                      ^^^^^^^^^^^
   │
   = String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers.

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: The statement on line 16 in class None is at the incorrect indent level: Expected one of columns [5, 9, 13] but was 3
 = Check indentation for class and method declarations, and initial statements.

note: The statement on line 17 in class None is at the incorrect indent level: Expected one of columns [9, 13, 17] but was 5
 = Check indentation for class and method declarations, and initial statements.

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

note: Class should be marked with one of @GrailsCompileStatic, @CompileStatic or @CompileDynamic
 = Check that classes are explicitely annotated with either @GrailsCompileStatic, @CompileStatic or @CompileDynamic

(Truncated to last 5714 characters out of 7255)
⚠️ CSHARP / roslynator - 1 error
not defined or imported
      Program.cs(180,26): error CS0518: Predefined type 'System.Exception' is not defined or imported
      Program.cs(180,30): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(180,40): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(182,16): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(184,13): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(185,17): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(185,17): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(185,85): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(187,17): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(187,17): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(187,32): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(192,19): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(192,53): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(192,74): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(196,9): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(197,13): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(197,13): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(197,105): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(200,13): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(200,13): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(202,13): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(202,31): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(206,13): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(206,13): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(206,28): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(208,19): error CS0518: Predefined type 'System.Exception' is not defined or imported
      Program.cs(208,23): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(209,17): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(209,17): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(209,107): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(213,15): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(213,49): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(213,70): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(217,1): error CS0518: Predefined type 'System.Void' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.IEquatable`1' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.IEquatable`1' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Object' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Void' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Type' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Boolean' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.Text.StringBuilder' is not defined or imported
      Program.cs(217,8): error CS0518: Predefined type 'System.String' is not defined or imported
      Program.cs(217,24): error CS0518: Predefined type 'System.Int32' is not defined or imported
      Program.cs(217,24): error CS0518: Predefined type 'System.Void' is not defined or imported
      Program.cs(217,28): error CS0518: Predefined type 'System.Runtime.CompilerServices.IsExternalInit' is not defined or imported
      Program.cs(9,1): error CS1729: 'object' does not contain a constructor that takes 0 arguments
      Program.cs(217,8): error CS1729: 'object' does not contain a constructor that takes 0 arguments
      Program.cs(217,8): error CS1729: 'object' does not contain a constructor that takes 0 arguments
      error CS5001: Program does not contain a static 'Main' method suitable for an entry point
    Analyzed project 'tests/chaos/tester/tester.csproj' (in 4.4 s)
    
     20 CS0103 
      3 CS0161 
     43 CS0246 
    169 CS0518 
      3 CS1729 
      1 CS5001 
    
    239 diagnostics found



(Truncated to last 5714 characters out of 26578)
⚠️ BASH / shfmt - 1 error
ACMD=$JAVA_HOME/bin/java
+  fi
+  if [ ! -x "$JAVACMD" ]; then
+    die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+  fi
 else
-    JAVACMD=java
-    if ! command -v java >/dev/null 2>&1
-    then
-        die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
-
-Please set the JAVA_HOME variable in your environment to match the
-location of your Java installation."
-    fi
+  JAVACMD=java
+  if ! command -v java >/dev/null 2>&1; then
+    die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+  fi
 fi
 
 # Increase the maximum file descriptors if we can.
-if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then
-    case $MAX_FD in #(
-      max*)
-        # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked.
-        # shellcheck disable=SC2039,SC3045
-        MAX_FD=$( ulimit -H -n ) ||
-            warn "Could not query maximum file descriptor limit"
-    esac
-    case $MAX_FD in  #(
-      '' | soft) :;; #(
-      *)
-        # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked.
-        # shellcheck disable=SC2039,SC3045
-        ulimit -n "$MAX_FD" ||
-            warn "Could not set maximum file descriptor limit to $MAX_FD"
-    esac
+if ! "$cygwin" && ! "$darwin" && ! "$nonstop"; then
+  case $MAX_FD in #(
+  max*)
+    # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked.
+    # shellcheck disable=SC2039,SC3045
+    MAX_FD=$(ulimit -H -n) ||
+      warn "Could not query maximum file descriptor limit"
+    ;;
+  esac
+  case $MAX_FD in #(
+  '' | soft) : ;; #(
+  *)
+    # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked.
+    # shellcheck disable=SC2039,SC3045
+    ulimit -n "$MAX_FD" ||
+      warn "Could not set maximum file descriptor limit to $MAX_FD"
+    ;;
+  esac
 fi
 
 # Collect all arguments for the java command, stacking in reverse order:
@@ -169,35 +168,36 @@
 #   * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables.
 
 # For Cygwin or MSYS, switch paths to Windows format before running java
-if "$cygwin" || "$msys" ; then
-    APP_HOME=$( cygpath --path --mixed "$APP_HOME" )
-
-    JAVACMD=$( cygpath --unix "$JAVACMD" )
-
-    # Now convert the arguments - kludge to limit ourselves to /bin/sh
-    for arg do
-        if
-            case $arg in                                #(
-              -*)   false ;;                            # don't mess with options #(
-              /?*)  t=${arg#/} t=/${t%%/*}              # looks like a POSIX filepath
-                    [ -e "$t" ] ;;                      #(
-              *)    false ;;
-            esac
-        then
-            arg=$( cygpath --path --ignore --mixed "$arg" )
-        fi
-        # Roll the args list around exactly as many times as the number of
-        # args, so each arg winds up back in the position where it started, but
-        # possibly modified.
-        #
-        # NB: a `for` loop captures its iteration list before it begins, so
-        # changing the positional parameters here affects neither the number of
-        # iterations, nor the values presented in `arg`.
-        shift                   # remove old arg
-        set -- "$@" "$arg"      # push replacement arg
-    done
-fi
-
+if "$cygwin" || "$msys"; then
+  APP_HOME=$(cygpath --path --mixed "$APP_HOME")
+
+  JAVACMD=$(cygpath --unix "$JAVACMD")
+
+  # Now convert the arguments - kludge to limit ourselves to /bin/sh
+  for arg; do
+    if
+      case $arg in #(
+      -*) false ;; # don't mess with options #(
+      /?*)
+        t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath
+        [ -e "$t" ]
+        ;; #(
+      *) false ;;
+      esac
+    then
+      arg=$(cygpath --path --ignore --mixed "$arg")
+    fi
+    # Roll the args list around exactly as many times as the number of
+    # args, so each arg winds up back in the position where it started, but
+    # possibly modified.
+    #
+    # NB: a `for` loop captures its iteration list before it begins, so
+    # changing the positional parameters here affects neither the number of
+    # iterations, nor the values presented in `arg`.
+    shift              # remove old arg
+    set -- "$@" "$arg" # push replacement arg
+  done
+fi
 
 # Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
 DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"'
@@ -209,14 +209,13 @@
 #     treated as '${Hostname}' itself on the command line.
 
 set -- \
-        "-Dorg.gradle.appname=$APP_BASE_NAME" \
-        -jar "$APP_HOME/gradle/wrapper/gradle-wrapper.jar" \
-        "$@"
+  "-Dorg.gradle.appname=$APP_BASE_NAME" \
+  -jar "$APP_HOME/gradle/wrapper/gradle-wrapper.jar" \
+  "$@"
 
 # Stop when "xargs" is not available.
-if ! command -v xargs >/dev/null 2>&1
-then
-    die "xargs is not available"
+if ! command -v xargs >/dev/null 2>&1; then
+  die "xargs is not available"
 fi
 
 # Use "xargs" to parse quoted args.
@@ -239,10 +238,10 @@
 #
 
 eval "set -- $(
-        printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" |
-        xargs -n1 |
-        sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' |
-        tr '\n' ' '
-    )" '"$@"'
+  printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" |
+    xargs -n1 |
+    sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' |
+    tr '\n' ' '
+)" '"$@"'
 
 exec "$JAVACMD" "$@"

(Truncated to last 5714 characters out of 8251)
⚠️ REPOSITORY / trivy - 22 errors
8;&lol8;&lol8;&lol8;&lol8;&lol8;&lol8;">
            ]>
            <lolz>&lol9;</lolz>
          `;
        
        + const parser = SAX.parser();
        + /** @param {string} doctype */
        + parser.ondoctype = (doctype) => {
        +   original = original.replace(doctype, '');
        + }
        + parser.write(original);
        
          optimize(original);
        ```
        
        ### Resources
        
        * [Wikipedia: Billion laughs attack](https://en.wikipedia.org/wiki/Billion_laughs_attack)

error: Package: ws
Installed Version: 6.2.2
Vulnerability CVE-2024-37890
Severity: HIGH
Fixed Version: 5.2.4, 6.2.3, 7.5.10, 8.17.1
Link: [CVE-2024-37890](https://avd.aquasec.com/nvd/cve-2024-37890)
      ┌─ src/list/package-lock.json:29393:1
      │  
29393 │ ╭     "node_modules/ws": {
29394 │ │       "version": "6.2.2",
29395 │ │       "license": "MIT",
29396 │ │       "optional": true,
      · │
29400 │ │       }
29401 │ │     },
      │ ╰^
      │  
      = nodejs-ws: denial of service when handling a request with many HTTP headers
      = ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.

error: Package: ws
Installed Version: 7.5.9
Vulnerability CVE-2024-37890
Severity: HIGH
Fixed Version: 5.2.4, 6.2.3, 7.5.10, 8.17.1
Link: [CVE-2024-37890](https://avd.aquasec.com/nvd/cve-2024-37890)
      ┌─ src/list/package-lock.json:7364:1
      │  
 7364 │ ╭     "node_modules/@react-native-community/cli-server-api/node_modules/ws": {
 7365 │ │       "version": "7.5.9",
 7366 │ │       "license": "MIT",
 7367 │ │       "optional": true,
      · │
 7383 │ │       }
 7384 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:21047:1
      │  
21047 │ ╭     "node_modules/jsdom/node_modules/ws": {
21048 │ │       "version": "7.5.9",
21049 │ │       "dev": true,
21050 │ │       "license": "MIT",
      · │
21065 │ │       }
21066 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:22479:1
      │  
22479 │ ╭     "node_modules/metro-inspector-proxy/node_modules/ws": {
22480 │ │       "version": "7.5.9",
22481 │ │       "license": "MIT",
22482 │ │       "optional": true,
      · │
22498 │ │       }
22499 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:22835:1
      │  
22835 │ ╭     "node_modules/metro/node_modules/ws": {
22836 │ │       "version": "7.5.9",
22837 │ │       "license": "MIT",
22838 │ │       "optional": true,
      · │
22854 │ │       }
22855 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:25166:1
      │  
25166 │ ╭     "node_modules/react-devtools-core/node_modules/ws": {
25167 │ │       "version": "7.5.9",
25168 │ │       "license": "MIT",
25169 │ │       "optional": true,
      · │
25185 │ │       }
25186 │ │     },
      │ ╰^
      │  
      ┌─ src/list/package-lock.json:28816:1
      │  
28816 │ ╭     "node_modules/webpack-bundle-analyzer/node_modules/ws": {
28817 │ │       "version": "7.5.9",
28818 │ │       "devOptional": true,
28819 │ │       "license": "MIT",
      · │
28834 │ │       }
28835 │ │     },
      │ ╰^
      │  
      = nodejs-ws: denial of service when handling a request with many HTTP headers
      = ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.

error: Package: ws
Installed Version: 8.13.0
Vulnerability CVE-2024-37890
Severity: HIGH
Fixed Version: 5.2.4, 6.2.3, 7.5.10, 8.17.1
Link: [CVE-2024-37890](https://avd.aquasec.com/nvd/cve-2024-37890)
      ┌─ src/list/package-lock.json:29067:1
      │  
29067 │ ╭     "node_modules/webpack-dev-server/node_modules/ws": {
29068 │ │       "version": "8.13.0",
29069 │ │       "devOptional": true,
29070 │ │       "license": "MIT",
      · │
29085 │ │       }
29086 │ │     },
      │ ╰^
      │  
      = nodejs-ws: denial of service when handling a request with many HTTP headers
      = ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.

error: 17 errors emitted

(Truncated to last 5714 characters out of 27950)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_RUFF,ACTION_ACTIONLINT,BASH_EXEC,BASH_SHELLCHECK,BASH_SHFMT,CSHARP_CSHARPIER,CSHARP_ROSLYNATOR,CSS_STYLELINT,DOCKERFILE_HADOLINT,EDITORCONFIG_EDITORCONFIG_CHECKER,ENV_DOTENV_LINTER,GROOVY_NPM_GROOVY_LINT,HTML_DJLINT,HTML_HTMLHINT,JAVA_CHECKSTYLE,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_KICS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,XML_XMLLINT,YAML_PRETTIER

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@renovate renovate bot force-pushed the renovate/buefy-3.x branch 2 times, most recently from 2f85868 to 3d76bc2 Compare October 2, 2025 00:54
@renovate renovate bot force-pushed the renovate/buefy-3.x branch 6 times, most recently from 2572004 to a637fbd Compare November 6, 2025 23:09
@renovate renovate bot force-pushed the renovate/buefy-3.x branch 2 times, most recently from 3739c3a to 05b1393 Compare November 11, 2025 08:58
@renovate renovate bot force-pushed the renovate/buefy-3.x branch from 05b1393 to 9486b39 Compare December 3, 2025 07:53
@renovate renovate bot force-pushed the renovate/buefy-3.x branch 5 times, most recently from 7930d2f to 1fe29af Compare December 14, 2025 21:57
@renovate renovate bot force-pushed the renovate/buefy-3.x branch 4 times, most recently from 11cada6 to 3102d61 Compare January 8, 2026 08:04
@renovate renovate bot force-pushed the renovate/buefy-3.x branch from 3102d61 to 0329ec8 Compare January 21, 2026 06:25
@renovate renovate bot force-pushed the renovate/buefy-3.x branch 7 times, most recently from 6a7e74a to 7bf131d Compare February 4, 2026 14:57
@renovate renovate bot force-pushed the renovate/buefy-3.x branch 2 times, most recently from 59ee2f9 to 47e46ac Compare February 4, 2026 16:07
@renovate renovate bot force-pushed the renovate/buefy-3.x branch 3 times, most recently from 4c6087d to f8c7d48 Compare March 5, 2026 13:03
@renovate renovate bot force-pushed the renovate/buefy-3.x branch from f8c7d48 to 2c331dc Compare March 5, 2026 14:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants