Commit Graph

3 Commits (13eb0cbdd4f66373db49130679f8b269e55b36dc)

Author SHA1 Message Date
HarithaVattikuti 13eb0cbdd4 fix: resolve brace-expansion high-severity vulnerability, refresh license cache, rebuild dist
- Regenerated package-lock.json to pick up brace-expansion@5.0.9 (fixes
  GHSA-rgw5-rvv9-x895, a DoS via unbounded intermediate arrays), which
  is already permitted by minimatch's existing ^5.0.8 semver range.
- Refreshed .licenses/npm cache to match the updated dependency tree.
- Added minimatch to the licensed.yml reviewed list: its detected
  license text doesn't cleanly match Blue Oak 1.0.0, which is already
  in the allowed list.
- Rebuilt dist/setup and dist/cache-save from source.

npm audit --audit-level=high now reports 0 vulnerabilities;
licensed status reports 0 errors; npm run pre-checkin passes locally.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
4 weeks ago
Haritha 5064d95ba1
Upgrade checkout refs and docs to v7 (#779)
* chore: upgrade checkout/setup-go refs to v7

* chore: commit remaining dependency, license, and dist updates
2 months ago
Haritha 4a2405e6ae
chore: update @types/node and @typescript-eslint dependencies to latest versions (#755) 3 months ago