Skip to content

fix(deps): bump nanoid, dompurify for 2 new Dependabot alerts - #9756

Merged
diegosouzapw merged 1 commit into
mainfrom
worktree-fix-deps-main-0807
Aug 8, 2026
Merged

diegosouzapw merged 1 commit into
mainfrom
worktree-fix-deps-main-0807

Conversation

@diegosouzapw

Copy link
Copy Markdown
Owner

Closes Dependabot #189 (dompurify) and #190 (nanoid).

npm audit → 0 vulnerabilities

Bumps:

  • nanoid (transitive, via postcss): added override ^3.3.17 (3.3.16→3.3.18)
  • dompurify (direct): bumped dep range ^3.4.12→^3.4.13 + monaco-editor scoped override

Only package.json + package-lock.json changes.

…190)

Bumps: nanoid ^3.3.17 (was transitive, now overridden), dompurify ^3.4.13
(with monaco-editor scoped override). Closes Dependabot #189, #190.

Remaining #182-#188 (js-yaml + mermaid) already closed by #9651 merge —
awaiting Dependabot re-scan.

npm audit → 0 vulnerabilities.
@diegosouzapw
diegosouzapw merged commit 026e1ca into main Aug 8, 2026
5 checks passed
@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

CI Coverage Report

  • Coverage job: skipped
  • PR test policy: success

Coverage artifact was not available for this run.

@diegosouzapw
diegosouzapw deleted the worktree-fix-deps-main-0807 branch August 10, 2026 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant