Skip to content

Update dependencies#1346

Open
pomek wants to merge 2 commits intomasterfrom
ci/4359
Open

Update dependencies#1346
pomek wants to merge 2 commits intomasterfrom
ci/4359

Conversation

@pomek
Copy link
Copy Markdown
Member

@pomek pomek commented Apr 9, 2026

🚀 Summary

Update dependencies to resolve pnpm audit security warnings. Upgrades transitive dependencies via pnpm update and adds a lodash override in pnpm-workspace.yaml to force a patched version through dom-combiner. Also pins vite@>=7.3.2 <8 as a direct devDependency to satisfy the patched peer-dep requirement from vitest.

Internal-only change (tooling/dependency hygiene) — no changelog entry needed.


📌 Related issues


💡 Additional information

Optional: Notes on decisions, edge cases, or anything helpful for reviewers.

@pomek
Copy link
Copy Markdown
Member Author

pomek commented Apr 9, 2026

Running pnpm audit on this PR branch reports no known vulnerabilities.


overrides:
'diff@^7': '^8.0.3'
'lodash@<=4.17.23': '>=4.18.0'
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Safer ranges.

Suggested change
'lodash@<=4.17.23': '>=4.18.0'
'lodash@^4': '^4.18.0'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants