Skip to content

Refresh frontend lockfile for security advisories#1308

Draft
IEvangelist wants to merge 1 commit into
mainfrom
dapine/security/aspire-dev-dompurify-esbuild
Draft

Refresh frontend lockfile for security advisories#1308
IEvangelist wants to merge 1 commit into
mainfrom
dapine/security/aspire-dev-dompurify-esbuild

Conversation

@IEvangelist

Copy link
Copy Markdown
Member

Summary

Refresh the frontend dependency graph in src/frontend to clear the currently open Dependabot alerts for dompurify and esbuild.

What changed

  • Added pnpm overrides that force patched dompurify and esbuild releases.
  • Regenerated src/frontend/pnpm-lock.yaml so the patched transitive versions are resolved everywhere in the site build.

Alerts addressed

  • dompurify advisories in src/frontend/pnpm-lock.yaml
  • esbuild advisory in src/frontend/pnpm-lock.yaml

Validation

  • pnpm install --frozen-lockfile
  • pnpm lint
  • pnpm test:unit
  • pnpm build

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@aspire-repo-bot

Copy link
Copy Markdown
Contributor

Frontend HTML artifact ready

The latest frontend build uploaded the frontend-dist artifact for PR #1308. Use the VS Code button below to open this PR with GitHub Artifacts Explorer and browse the built HTML locally.

VS Code: Open PR #1308 artifacts

This comment updates automatically when a new frontend build artifact is uploaded.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant