From cf6faa3b6ae312ced6f69f55aed6aff17a3a87d8 Mon Sep 17 00:00:00 2001 From: Landon Cox Date: Mon, 20 Jul 2026 15:31:45 -0700 Subject: [PATCH] fix(docs-site): resolve high-severity js-yaml npm audit finding Bump transitive deps via 'npm audit fix' to clear the high-severity js-yaml advisory (GHSA-52cp-r559-cp3m) that was failing the dependency-audit workflow's --audit-level=high gate: - js-yaml 4.2.0 -> 4.3.0 (high: quadratic CPU via YAML merge keys) - dompurify -> 3.4.12 (moderate: ALLOWED_ATTR pollution) - astro 6.4.6 -> 6.4.8 (patch) Only the lockfile changes; package.json ranges already permit these. Remaining astro-related moderate advisories require a breaking major bump and are out of scope for this audit-gate fix. --- docs-site/package-lock.json | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/docs-site/package-lock.json b/docs-site/package-lock.json index d71e0f761..76336eb81 100644 --- a/docs-site/package-lock.json +++ b/docs-site/package-lock.json @@ -2590,9 +2590,9 @@ } }, "node_modules/astro": { - "version": "6.4.6", - "resolved": "https://registry.npmjs.org/astro/-/astro-6.4.6.tgz", - "integrity": "sha512-48OBTBKR9ctbf+DQxpOuxGl8ebfn59zTuNQMBzptmG/Mi/H8IdfMSbJgGuX1I/4U6g9yazG1p4BHlf4+2hWU4Q==", + "version": "6.4.8", + "resolved": "https://registry.npmjs.org/astro/-/astro-6.4.8.tgz", + "integrity": "sha512-KK5lX90uU9EeVaTjINyj3sy9/NFXVa59aowaqbWBDDKLXZh4rr7GwIaCFYVetE22MJtsCNFerQXn0vlCLmpP/Q==", "license": "MIT", "dependencies": { "@astrojs/compiler": "^4.0.0", @@ -3723,9 +3723,9 @@ } }, "node_modules/dompurify": { - "version": "3.4.10", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.10.tgz", - "integrity": "sha512-0xzNv0e7oYC6yyuOGZIABPM4qtg3QxLFniDNPP4ZP90wR8Yq3zgwpRbrNiT4N3IKqDbbYFEJLV+JWEs19aZ//w==", + "version": "3.4.12", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz", + "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==", "license": "(MPL-2.0 OR Apache-2.0)", "optionalDependencies": { "@types/trusted-types": "^2.0.7" @@ -4773,9 +4773,9 @@ } }, "node_modules/js-yaml": { - "version": "4.2.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz", - "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==", + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", + "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", "funding": [ { "type": "github",