Skip to content

fix(deps): remediate remaining security alerts - #67

Merged
Starosdev merged 1 commit into
developfrom
codex/radarr-dependabot-remaining
Jul 14, 2026
Merged

Starosdev merged 1 commit into
developfrom
codex/radarr-dependabot-remaining

Conversation

@Starosdev

Copy link
Copy Markdown
Owner

Summary

  • update direct lodash, qs, Babel, PostCSS, postcss-url, and webpack dependencies
  • pin patched transitive versions for Dependabot alert families
  • preserve the existing frontend dependency surface while refreshing the lockfile

Validation

  • yarn audit --level high
  • yarn build
  • yarn lint
  • yarn stylelint-linux
  • yarn test

Known notes: the repository has pre-existing manifest and lockfile drift, so the refreshed Yarn lockfile is broader than the direct dependency list. The build reports only the existing postcss-color-function deprecation notice.

@Starosdev
Starosdev merged commit af149ce into develop Jul 14, 2026
27 checks passed
@Starosdev
Starosdev deleted the codex/radarr-dependabot-remaining branch July 14, 2026 16:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant