Repository navigation
fix(deps): resolve open security findings and update tooling - #85
Merged
Merged
Conversation
Refresh the lockfile to pick up patched js-yaml and brace-expansion releases. Add overrides that remove two transitive dependencies with no upstream patch from the tree: point ts-jest-resolver at the jest-resolve 30.x line (drops micromatch/braces) and point load-nyc-config at js-yaml 4 (drops argparse/sprintf-js). npm audit now reports zero vulnerabilities. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
TypeScript 6 no longer includes @types packages automatically, which caused TS2591 warnings during the rollup build. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
eriksw
enabled auto-merge (squash)
October 13, 2026 21:32
nouse
approved these changes
Oct 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
npm auditfindings are patched.bracesvia the Jest 29 resolver,sprintf-jsviajs-yaml@3/argparse@1).npm auditnow reports zero vulnerabilities.super-linterfrom v8 to v9. Its breaking changes do not apply to this repository's configuration.tsconfig.jsonso the TypeScript 6 build no longer emits TS2591 warnings.All direct npm dependencies and the other GitHub Actions were already at their latest releases.
distis unchanged by the rebuild.Test plan
npm run format:check,npm run lint,npx tsc --noEmitnpm run ci-test(55 tests, coverage badge up to date)npm run packageproduces an identicaldist🤖 Generated with Claude Code