Skip to content

chore: resolve open dependabot security alerts - #1014

Merged
jonathannorris merged 3 commits into
mainfrom
chore/dependabot-alerts-4
Nov 9, 2026
Merged

jonathannorris merged 3 commits into
mainfrom
chore/dependabot-alerts-4

Conversation

@jonathannorris

@jonathannorris jonathannorris commented Nov 2, 2026 •

Copy link
Copy Markdown
Member

Summary

  • Bumps existing resolutions for body-parser, dompurify, fast-uri, ip-address, launch-editor and serialize-javascript to their patched versions.
  • Bumps joi to ^17.13.9 and adds a follow-redirects resolution (^1.16.2) to cover the remaining open alerts.
  • Lockfile regenerated; yarn build passes.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

Deploying devcycle-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: 4c61d08
Status: ✅  Deploy successful!
Preview URL: https://6ef44ea6.devcycle-docs.pages.dev
Branch Preview URL: https://chore-dependabot-alerts-4.devcycle-docs.pages.dev

View logs

@jonathannorris
jonathannorris requested review from a team and a balanced review from Copilot November 2, 2026 14:53

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues remain for the dependency resolution and lockfile updates.

No open issues 🎉

What changed in this PR

Updates dependency resolutions in the Docusaurus documentation project to address open Dependabot security alerts.

Changes:

  • Bumps six overrides: body-parser, dompurify, fast-uri, ip-address, launch-editor, and serialize-javascript.
  • Refreshes lockfile versions, dependency metadata, and checksums to match.
File Description
yarn.lock Records updated resolved versions, transitive requirements, and checksums.
package.json Raises six dependency resolutions to target patched versions.

Review effort: Balanced

@jonathannorris
jonathannorris enabled auto-merge (squash) November 2, 2026 14:55
@jonathannorris
jonathannorris merged commit 457f084 into main Nov 9, 2026
5 checks passed
@jonathannorris
jonathannorris deleted the chore/dependabot-alerts-4 branch November 9, 2026 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants