Skip to content

fix(deps): resolve Dependabot security alerts - #53

Merged
vivekanand1101 merged 1 commit into
mainfrom
fix/dependabot-security-alerts-20260803
Aug 3, 2026
Merged

fix(deps): resolve Dependabot security alerts#53
vivekanand1101 merged 1 commit into
mainfrom
fix/dependabot-security-alerts-20260803

Conversation

@vivekanand1101

Copy link
Copy Markdown
Contributor

Description

Resolve all open Dependabot alerts by updating vulnerable development dependencies and Yarn resolutions, including:

  • Vite, Vitest, esbuild, and PostCSS
  • Babel, brace-expansion, fast-uri, immutable, and js-yaml
  • additional vulnerable transitive tooling dependencies reported by yarn audit

The regenerated yarn.lock resolves the patched dependency graph, and yarn audit now reports zero vulnerabilities.

Validation

  • yarn install --frozen-lockfile
  • yarn audit — 0 vulnerabilities
  • yarn lint
  • yarn build
  • yarn build-storybook
  • yarn test --run — no test files exist in the repository, so Vitest exits with code 1

@vivekanand1101
vivekanand1101 merged commit 444ef86 into main Aug 3, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants