Repository navigation

Remove sprintf-js path and backport Forge/Braces security fixes - #13

Merged

tsilva merged 9 commits into

mainfrom

agent/fix-critical-transitive-dependencies

Oct 10, 2026

Merged

Remove sprintf-js path and backport Forge/Braces security fixes#13
tsilva merged 9 commits into
mainfrom
agent/fix-critical-transitive-dependencies

Commits on Aug 14, 2026
- Replace vulnerable npm lockfile with pnpm
  tsilva
  committed
  0969c9e
- Patch transitive WebSocket dependency
  tsilva
  committed
  78ba360
- Patch newly disclosed brace expansion advisories
  tsilva
  committed
  e1a9c49
- Patch fast URI parser advisories
  tsilva
  committed
  c418315
- Eliminate remaining high-risk pnpm resolution paths
  tsilva
  committed
  92bbeac
- Run pnpm CI with the locked toolchain
  tsilva
  committed
  755b28a
Commits on Oct 10, 2026