Add dependency overrides for postcss and mute-stream - #174
Conversation
Add npm overrides to resolve dependency issues surfaced by npm install: - postcss ^8.5.10: Next.js bundled postcss 8.4.31, which is vulnerable to the XSS-via-unescaped-</style> advisory (GHSA-qx2v-qp2m-jg93, fixed in 8.5.10). This was the root of all 7 moderate audit findings; the override dedupes next's copy to the top-level 8.5.x and clears the audit. - mute-stream ^3.0.0: mute-stream 4.0.0 (pulled in via @inquirer/core dev tooling) raised its engines floor to node ^22.22.2, triggering an EBADENGINE warning on node 22.22.0. Version 3.0.0 is API-identical but supports node >=22.9.0. npm audit now reports 0 vulnerabilities; unit tests (111) pass.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
WalkthroughThe package configuration expands its npm ChangesDependency Overrides
Estimated code review effort: 1 (Trivial) | ~2 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary
Added npm dependency overrides for
postcssandmute-streamto ensure consistent versions across the project's dependency tree.Changes
postcss@^8.5.10override to theoverridesfield in package.jsonmute-stream@^3.0.0override to theoverridesfield in package.jsonDetails
These overrides help resolve transitive dependency conflicts by pinning specific versions of these packages that may be required by other dependencies in the project. This ensures all packages use compatible versions and prevents version conflicts during installation.
https://claude.ai/code/session_01EWnpuwP72r5UA15HtmwuCP
Summary by CodeRabbit