Skip to content

Fix GitHub Dependabot dependency alerts - #27

Merged
pke merged 3 commits into
developfrom
codex/dependabot-security-updates
Aug 17, 2026
Merged

Fix GitHub Dependabot dependency alerts#27
pke merged 3 commits into
developfrom
codex/dependabot-security-updates

Conversation

@pke

@pke pke commented Aug 17, 2026

Copy link
Copy Markdown
Owner

Updates the runtime and development parents responsible for all 41 open GitHub Dependabot alerts in package-lock.json.

Changes:

  • update got 10 to the patched CommonJS-compatible 11.8.6 release
  • update parse-link-header to 2.0.0
  • update ESLint 6 and eslint-plugin-node 10 to their compatible 8/11 releases
  • update Tap 14 to Tap 18, removing the obsolete esm/coverage tree containing unpatched request and babel-traverse
  • migrate removed t.is assertions to t.equal
  • ignore Tap 18's generated .tap cache

Application source files are unchanged.

Verification:

  • npm ci --ignore-scripts
  • npm test (4 test files, 18 assertions, 0 failures)
  • syntax checks for source, tests, and bundled plugins
  • runtime smoke checks for got and parse-link-header
  • dependency-tree comparison against GitHub Dependabot patch levels

Existing lint status: six pre-existing errors remain (two unused variables in src/cli.js and four node/no-unpublished-require reports for the test-only Tap dependency). They are outside this dependency-alert change and were left untouched. The previous Tap 14 runner crashed before executing tests on current Node; Tap 18 completes successfully.

@pke
pke force-pushed the codex/dependabot-security-updates branch from d1b47f7 to d9eb5c1 Compare August 17, 2026 18:16
@pke
pke force-pushed the codex/dependabot-security-updates branch from d9eb5c1 to 72d14b5 Compare August 17, 2026 18:20
@pke
pke merged commit 382bfda into develop Aug 17, 2026
3 checks passed
@pke
pke deleted the codex/dependabot-security-updates branch August 17, 2026 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant