Skip to content

Update dependencies to resolve high-severity advisories - #115

Merged
rubenRP merged 1 commit into
mainfrom
chore/dependency-security-updates
Jul 15, 2026
Merged

rubenRP merged 1 commit into
mainfrom
chore/dependency-security-updates

Conversation

@rubenRP

@rubenRP rubenRP commented Jul 15, 2026

Copy link
Copy Markdown
Owner

Summary

  • Bump Astro and related packages within current major versions to address high-severity npm audit findings.
  • Update direct dependencies and lockfile transitives (astro 6.4.8, @astrojs/mdx 5.0.6, @astrojs/sitemap 3.7.3, sass 1.101.0, vue 3.5.39, prettier 3.9.5, @typescript-eslint/parser 8.64.0, vue-eslint-parser 10.4.1).
  • Keep major upgrades (Astro 7, ESLint 10, TypeScript 7) out of scope for this conservative pass.

Test plan

  • npm run lint
  • npm run check
  • npm run build
  • npm audit --audit-level=high
  • npm run format:check (still failing due to existing formatting debt; intentionally left out of this PR)

Made with Cursor

Bump Astro and related packages within current major versions to address npm audit findings without introducing breaking upgrades.

Co-authored-by: Cursor <cursoragent@cursor.com>
@cursor

cursor Bot commented Jul 15, 2026

Copy link
Copy Markdown

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

@netlify

netlify Bot commented Jul 15, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for rubenr-dev ready!

Name Link
🔨 Latest commit 8dc1c6b
🔍 Latest deploy log https://app.netlify.com/projects/rubenr-dev/deploys/6a575ca87c5d7800084ace7a
😎 Deploy Preview https://deploy-preview-115--rubenr-dev.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@rubenRP
rubenRP merged commit 732ce1e into main Jul 15, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant