Skip to content

enable linting on CI#9

Merged
Eugene Yurtsev (eyurtsev) merged 5 commits intomainfrom
eugene/more_linting
Jun 3, 2025
Merged

enable linting on CI#9
Eugene Yurtsev (eyurtsev) merged 5 commits intomainfrom
eugene/more_linting

Conversation

@eyurtsev
Copy link
Copy Markdown
Collaborator

@eyurtsev Eugene Yurtsev (eyurtsev) commented Jun 3, 2025

Fix remaining linting issue and re-enable linting on CI

@eyurtsev Eugene Yurtsev (eyurtsev) merged commit 6ef1a08 into main Jun 3, 2025
4 checks passed
@eyurtsev Eugene Yurtsev (eyurtsev) deleted the eugene/more_linting branch June 3, 2025 21:13
John Kennedy (jkennedyvz) added a commit that referenced this pull request Feb 28, 2026
## Summary
- Add pnpm overrides to resolve the remaining 4 open Dependabot security
alerts in `reference/pnpm-lock.yaml`
- **path-to-regexp** `>=4.0.0 <6.3.0` → `6.3.0` — fixes high-severity
ReDoS via backtracking regular expressions
([#1](https://github.com/langchain-ai/docs/security/dependabot/1))
- **undici** `>=4.5.0 <5.29.0` → `5.29.0` — fixes 3 alerts:
insufficiently random values
([#2](https://github.com/langchain-ai/docs/security/dependabot/2)),
unbounded decompression chain
([#9](https://github.com/langchain-ai/docs/security/dependabot/9)), and
bad certificate DoS
([#4](https://github.com/langchain-ai/docs/security/dependabot/4))

## Test plan
- [x] Verified vulnerable versions (`path-to-regexp@6.1.0`,
`undici@5.28.4`) are no longer in lockfile
- [x] Verified patched versions (`path-to-regexp@6.3.0`,
`undici@5.29.0`) are present
- [x] `pnpm install` succeeds without errors

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant