Skip to content

Conversation

@mend-for-github-com
Copy link

This PR contains the following updates:

Package Change Age Confidence
@hello-pangea/dnd 16.6.0 -> 17.0.0 age confidence

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability Reachability
Medium Medium 6.2 CVE-2025-27789

Release Notes

hello-pangea/dnd (@​hello-pangea/dnd)

v17.0.0

Compare Source

⚠ BREAKING CHANGES
  • redux: bump redux to v5 and react-redux to v9
  • react: drop support for v16 and v17
Others 🔧
  • bump borwserlist to latest version (e826e01)
  • deps-dev: bump express from 4.19.1 to 4.20.0 (8f149d2)
  • deps-dev: bump ws from 7.5.9 to 7.5.10 (fa6119c)
  • deps: update dependency @​babel/runtime to ^7.25.6 (646858e)
  • dev-deps: update all non-major development dependencies (9ac3f0c)
  • dev-deps: update dependency @​atlaskit/theme to v13 (c091b8a)
  • dev-deps: update dependency jest-axe to v9 (fbb66cc)
  • dev-deps: update dependency jsdom to v25 (34a8feb)
  • dev-deps: update dependency rimraf to v6 (460f580)
  • dev-deps: update dependency wait-on to v8 (b57aa06)
  • dev-deps: update dependency webpack to v5.94.0 [SECURITY] (491eeb8)
Features 🔥
  • react: drop support for v16 and v17 (38e6b49)
  • redux: bump redux to v5 and react-redux to v9 (8334755)
Docs 📃
Code Refactoring 🖌
Tests 🧪
CI 🛠
  • bump pnpm cache version (e2c581f)
  • fix chromatic deploy action (7a9d65d)
  • pnpm: bump to 9.10.0 (f59cf9f)
  • refactor pnpm setup and drop node_modules caching (c9ea36d)
  • remove browser version (4638626)
  • update wagoid/commitlint-github-action action to v6 (c83cb54)

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 9, 2025
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @hello-pangea/dnd to v17 Update dependency @hello-pangea/dnd to v17 - autoclosed Aug 19, 2025
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/hello-pangea-dnd-17.x branch August 19, 2025 12:14
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @hello-pangea/dnd to v17 - autoclosed Update dependency @hello-pangea/dnd to v17 Aug 21, 2025
@mend-for-github-com mend-for-github-com bot reopened this Aug 21, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/hello-pangea-dnd-17.x branch from 64436e2 to c244bfc Compare August 21, 2025 11:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant