Skip to content

Fix high and critical dependency vulnerabilities - #110

Merged
miguelcalderon merged 1 commit into
mainfrom
miguel/dependabot-security-2026-10-19
Oct 20, 2026
Merged

miguelcalderon merged 1 commit into
mainfrom
miguel/dependabot-security-2026-10-19

Conversation

@miguelcalderon

Copy link
Copy Markdown
Contributor

Updates dependencies flagged by Dependabot, focusing on high and critical findings. Runs the repository audit fixes, adds compatible targeted updates where needed, aligns Angular patch versions, and updates the Blazor server package within .NET 8. SDK versions and application code are unchanged.

Final local npm/pnpm audits report zero critical findings. High findings without a safe compatible fix remain; this does not make every dependency tree vulnerability-free.

Validation

  • Clean npm/pnpm installs, formatting and workflow checks passed.
  • Builds passed for Angular, JavaScript Vite, TypeScript Vite, Vue, PWA, React, TypeScript, Webpack, and Blazor.
  • Viewer smoke checks passed in Chrome for Angular, PWA, React, TypeScript, and Webpack on isolated local ports. The full shared Playwright suite was not run.
  • Webpack lockfile integrity hashes are preserved and verified.

@miguelcalderon miguelcalderon added the bug Something isn't working label Oct 19, 2026
@miguelcalderon miguelcalderon self-assigned this Oct 19, 2026
@miguelcalderon miguelcalderon removed the bug Something isn't working label Oct 19, 2026
@miguelcalderon
miguelcalderon marked this pull request as ready for review October 19, 2026 14:01
@miguelcalderon
miguelcalderon requested a review from a team as a code owner October 19, 2026 14:01
@miguelcalderon
miguelcalderon requested review from a team, MahmoudElsayad and ritz078 October 19, 2026 14:01
@miguelcalderon
miguelcalderon merged commit a2d4442 into main Oct 20, 2026
3 checks passed
@miguelcalderon
miguelcalderon deleted the miguel/dependabot-security-2026-10-19 branch October 20, 2026 04:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants