Skip to content

fix(deps): update vulnerable dependencies - #256

Merged
ankit-intugle merged 1 commit into
mainfrom
fix/dependency-audit-updates
Oct 22, 2026
Merged

ankit-intugle merged 1 commit into
mainfrom
fix/dependency-audit-updates

Conversation

@raphael-intugle

Copy link
Copy Markdown
Collaborator

Summary

Update vulnerable and outdated dependency resolutions across the documentation site and Python lockfile to address available security fixes.

Key changes

  • Refresh docsite/package.json and its lockfile, including targeted package overrides and transitive dependency updates.
  • Upgrade affected Python package resolutions in uv.lock.

Testing

  • cd docsite && npm run build — passed.
  • cd docsite && npm run typecheck — passed.
  • uv lock --check — passed.
  • git diff --check — passed.
  • Python tests could not be completed because downloading locked dependencies timed out.
  • npm audit still reports 33 findings; some reported packages have no fixed version available from the configured registry, so this change does not resolve every audit finding.

@ankit-intugle
ankit-intugle merged commit fd24168 into main Oct 22, 2026
5 checks passed
@ankit-intugle
ankit-intugle deleted the fix/dependency-audit-updates branch October 22, 2026 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants