Skip to content

chore: resolve open dependabot security alerts - #1006

Merged
jonathannorris merged 1 commit into
mainfrom
chore/dependabot-alerts-2
Oct 5, 2026
Merged

jonathannorris merged 1 commit into
mainfrom
chore/dependabot-alerts-2

Conversation

@jonathannorris

Copy link
Copy Markdown
Member

Summary

  • Resolved 2 open Dependabot security alerts by bumping vulnerable transitive dependency resolutions

Dependabot Alerts Resolved

Alert Package Severity Fix
#280 dompurify low Resolution bumped to ^3.4.16 (locked 3.4.16)
#279 ip-address medium Resolution bumped to ^10.5.1 (locked 10.7.3)

Copilot AI balanced review requested due to automatic review settings October 5, 2026 13:57

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The resolution constraints and lockfile entries are consistent with the stated security updates.

Review effort: Balanced
Findings: None

What changed in this PR

Updates transitive dependency resolutions to address two Dependabot security alerts.

Changes:

  • Bumps dompurify to 3.4.16.
  • Resolves ip-address to 10.7.3.
File Description
package.json Raises secure resolution constraints.
yarn.lock Locks updated dependency versions and checksums.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@jonathannorris
jonathannorris enabled auto-merge (squash) October 5, 2026 13:59
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying devcycle-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: 16ca841
Status: ✅  Deploy successful!
Preview URL: https://2e915132.devcycle-docs.pages.dev
Branch Preview URL: https://chore-dependabot-alerts-2.devcycle-docs.pages.dev

View logs

@jonathannorris
jonathannorris merged commit afa3adf into main Oct 5, 2026
6 checks passed
@jonathannorris
jonathannorris deleted the chore/dependabot-alerts-2 branch October 5, 2026 16:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants