Skip to content

Fix open Dependabot alerts - #58

Merged
wouterlucas merged 1 commit into
mainfrom
fix/dependabot-alerts
Oct 26, 2026
Merged

wouterlucas merged 1 commit into
mainfrom
fix/dependabot-alerts

Conversation

@wouterlucas

Copy link
Copy Markdown
Contributor

Summary

  • Upgrade Vite and source-map-js across all framework lockfiles to patched releases.
  • Bump Handlebars and brace-expansion overrides in the Blits benchmark fixture.
  • Bump root overrides for shell-quote, follow-redirects, and markdown-it.
  • Refresh each package lockfile.

Validation

  • Refreshed lockfiles with npm install --package-lock-only --ignore-scripts --no-audit --no-fund.
  • Confirmed package and lockfile JSON parses and git diff --check passes.
  • Did not run benchmark builds.

@wouterlucas
wouterlucas merged commit b93a03c into main Oct 26, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant