Skip to content

Bump critical and high severity vulnerable dependencies - #40

Merged
rathboma merged 1 commit into
mainfrom
rathboma/dazzling-meitner-gygphs
Oct 13, 2026
Merged

rathboma merged 1 commit into
mainfrom
rathboma/dazzling-meitner-gygphs

Conversation

@rathboma

Copy link
Copy Markdown
Contributor

🤖 Generated with Claude Code

https://claude.ai/code/session_01HR5E3V31atDz9wvQY545cx


Generated by Claude Code

Lockfile-only bumps, each within its existing semver range:

- proxy-addr 2.0.7 -> 2.0.8 (critical, GHSA-jqcg-44mw-7w3h)
- undici 7.25.0 -> 7.30.0
- @grpc/grpc-js 1.14.3 -> 1.14.6
- protobufjs 7.5.6 -> 7.6.6
- tmp 0.2.5 -> 0.2.7
- glob 10.4.5 -> 10.5.0
- js-yaml 3.14.1 -> 3.15.2, 4.1.0 -> 4.3.2
- brace-expansion 1.1.14 -> 1.1.21, 2.1.0 -> 2.1.7
- browserslist 4.24.4 -> 4.29.3 (dev only, with its data packages)

braces stays at 3.0.3: no patched release exists.

Claude-Session: https://claude.ai/code/session_01HR5E3V31atDz9wvQY545cx
@rathboma
rathboma merged commit 0b345f9 into main Oct 13, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant