Skip to content

[Refactor/#437] 프로덕션 의존성 보안 취약점 패치 (axios, react-router, vite) - #439

Merged
Seojegyeong merged 1 commit into
developfrom
refactor/#437
Aug 10, 2026
Merged

[Refactor/#437] 프로덕션 의존성 보안 취약점 패치 (axios, react-router, vite)#439
Seojegyeong merged 1 commit into
developfrom
refactor/#437

Conversation

@Seojegyeong

Copy link
Copy Markdown
Collaborator

🚨 관련 이슈

#437

✨ 변경사항

  • 🐞 BugFix Something isn't working
  • 💻 CrossBrowsing Browser compatibility
  • 🌏 Deploy Deploy
  • 🎨 Design Markup & styling
  • 📃 Docs Documentation writing and editing (README.md, etc.)
  • ✨ Feature Feature
  • 🔨 Refactor Code refactoring
  • ⚙️ Setting Development environment setup
  • ✅ Test Test related (storybook, jest, etc.)

✏️ 작업 내용

pnpm audit 결과 확인 후 프로덕션 직접 의존성 3개 업데이트

패키지 이전 이후
axios 1.13.5 1.19.0
react-router 7.13.0 7.18.2
react-router-dom 7.13.0 7.18.2
vite 6.4.1 6.4.3

😅 미완성 작업

N/A

📢 논의 사항 및 참고 사항

업데이트 후 pnpm audit 재실행 결과 95개 → 49개로 감소.
남은 49개는 @storybook, eslint, @commitlint, @lhci/cli
devDependencies 하위 의존성으로 프로덕션 빌드에 포함되지 않습니다.

💬 리뷰어 가이드 (P-Rules)
P1: 필수 반영 (Critical) - 버그 가능성, 컨벤션 위반. 해결 전 머지 불가.
P2: 적극 권장 (Recommended) - 더 나은 대안 제시. 가급적 반영 권장.
P3: 제안 (Suggestion) - 아이디어 공유. 반영 여부는 드라이버 자율.
P4: 단순 확인/칭찬 (Nit) - 사소한 오타, 칭찬 등 피드백.

@Seojegyeong
Seojegyeong requested review from YermIm and jjjsun August 10, 2026 06:42
@Seojegyeong Seojegyeong self-assigned this Aug 10, 2026
@coderabbitai

coderabbitai Bot commented Aug 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (2)
  • package.json is excluded by none and included by none
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml, !pnpm-lock.yaml and included by none

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 41a197cd-1e0a-4ed0-a592-cf390b7d2fc5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown

📚 Storybook 배포 완료

항목 링크
📖 Storybook https://69a147b60a56365d9e2185ef-yilntwrdpc.chromatic.com/
🔍 Chromatic https://www.chromatic.com/build?appId=69a147b60a56365d9e2185ef&number=607

@jjjsun jjjsun left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P4: 확인했습니다

@Seojegyeong
Seojegyeong merged commit e676e4f into develop Aug 10, 2026
3 checks passed
@Seojegyeong
Seojegyeong deleted the refactor/#437 branch August 10, 2026 07:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

♻️ [Security] 의존성 보안 취약점 패치: pnpm audit + 회귀 테스트

2 participants