Skip to content

[stable34] fix(deps): resolve npm audit vulnerabilities - #9401

Closed
librecode-workflow-automation[bot] wants to merge 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit
Closed

librecode-workflow-automation[bot] wants to merge 1 commit into
stable34from
automated/noid/stable34-fix-npm-audit

Conversation

@librecode-workflow-automation

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 3 of the total 34 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@nextcloud/password-confirmation #

  • Caused by vulnerable dependency:
  • Affected versions: >=6.2.0
  • Package usage:
    • node_modules/@nextcloud/password-confirmation

@vitest/coverage-v8 #

  • Caused by vulnerable dependency:
  • Affected versions: 2.1.0-beta.1 - 4.1.11
  • Package usage:
    • node_modules/@vitest/coverage-v8

vitest #

Signed-off-by: GitHub <noreply@github.com>

Copy link
Copy Markdown
Member

Superseded by #9409, carrying the same npm audit package-lock change in a properly GPG-signed, DCO-compliant commit. The original automated commit was unsigned with a DCO author mismatch. Security analysis and fresh CI checks remain on the replacement; merging both would duplicate the changes.

@vitormattos vitormattos closed this Nov 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant