Bump the all-dependencies group with 7 updates - #252

Merged

lcollins merged 9 commits into

dependabot/npm_and_yarn/all-dependencies-e4c46daecb

Aug 12, 2026

Commits on Aug 11, 2026

Bump the all-dependencies group with 7 updates
dependabot[bot]
authored
1e46114

Commits on Aug 12, 2026

Add .npmrc with legacy-peer-deps to fix eslint-plugin-import peer dep conflict with eslint v10

Copilot
and
lcollins
authored
a738c5b
Fix CI build: migrate to ESLint flat config, switch bundler to esbuild for ESM compatibility

Copilot
and
lcollins
authored
1bba660
fix: migrate ESLint config to flat config format for ESLint v10

Copilot
and
lcollins
authored
01f06f4
fix: remove redundant eslint.config.js and fix deprecated no-var-requires rule

Copilot
and
lcollins
authored
b7aa824
Address code review: add mocks for all ESM-only @actions packages, remove unused @vercel/ncc

Copilot
and
lcollins
authored
13775bf
fix: remediate path injection vulnerability in annotations.ts (CWE-022)

Copilot
and
lcollins
authored
ed19f4f
fix: validate resultFile is within workspace to remediate path injection (CWE-022)

Copilot
and
lcollins
authored
1f12271
Changes before error encountered

Copilot
and
lcollins
authored
74ba9db