Skip to content

fix(deps): resolve remaining npm audit advisories#666

Merged
lourens-octopus merged 1 commit into
mainfrom
lourens/fix-npm-audit
Jul 24, 2026
Merged

fix(deps): resolve remaining npm audit advisories#666
lourens-octopus merged 1 commit into
mainfrom
lourens/fix-npm-audit

Conversation

@lourens-octopus

Copy link
Copy Markdown
Contributor

What

Clears the remaining npm audit advisories so the repo reports 0 vulnerabilities.

  • jest-junit → 17.0.0 — resolves the jest-junit advisory and its transitive uuid advisory.
  • npm audit fix applied for the remaining non-major advisories (e.g. @babel/core, js-yaml, esbuild patch).
  • Where relevant, a bundled runtime dep was bumped and dist rebuilt (see notes below).

Notes

  • Almost entirely devDependencies (test tooling) — not bundled into dist.
  • Verified: npm run build passes, tests pass, and the jest-junit reporter still generates its XML.

🤖 Generated with Claude Code

Bumps the direct uuid runtime dependency 9.0.1 -> 14.0.1 and jest-junit
-> 17.0.0, clearing the uuid advisory on both the direct copy and
jest-junit's transitive copy. uuid is imported (import {v4}) and bundled,
so dist is rebuilt; the v4 API is unchanged and all 18 tests pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@lourens-octopus
lourens-octopus requested a review from a team as a code owner July 24, 2026 04:09
@lourens-octopus
lourens-octopus merged commit 3459fd8 into main Jul 24, 2026
14 checks passed
@lourens-octopus
lourens-octopus deleted the lourens/fix-npm-audit branch July 24, 2026 04:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants