Skip to content

fix: resolve HIGH dependency vulnerabilities and add demo-kb-docs to … - #380

Merged
vincentgrobler merged 1 commit into
mainfrom
fix/dependency-vulnerabilities
Apr 29, 2026
Merged

fix: resolve HIGH dependency vulnerabilities and add demo-kb-docs to …#380
vincentgrobler merged 1 commit into
mainfrom
fix/dependency-vulnerabilities

Conversation

@vincentgrobler

@vincentgrobler vincentgrobler commented Apr 29, 2026

Copy link
Copy Markdown
Collaborator

…gitignore

Description

  • Update picomatch, minimatch, flatted, postcss to patched versions (npm audit fix)
  • Add brace-expansion@1 override to force v1.1.14 (fixes GHSA-f886-m6hf-6m8v)
  • Exclude demo-kb-docs/ from version control

Related Issue

Type of Change

  • 🐛 Bug fix (non-breaking change that fixes an issue)
  • ✨ New feature (non-breaking change that adds functionality)
  • 💥 Breaking change (fix or feature that would cause existing functionality to change)
  • 📝 Documentation update
  • ♻️ Refactor (no functional changes)
  • 🧪 Test update

How Has This Been Tested?

  • Unit tests
  • Manual testing
  • Browser testing (specify browsers)

Screenshots (if applicable)

Checklist

  • My code follows the project's coding standards
  • I have run npm run lint and there are no errors
  • I have run npm run test and all tests pass
  • I have added tests for my changes (if applicable)
  • I have updated the documentation (if applicable)
  • My source files have AGPL licence headers
  • My changes generate no new TypeScript errors

@vercel

vercel Bot commented Apr 29, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
crewform Ready Ready Preview, Comment Apr 29, 2026 6:52am

…gitignore

- Update picomatch, minimatch, flatted, postcss to patched versions (npm audit fix)
- Add brace-expansion@1 override to force v1.1.14 (fixes GHSA-f886-m6hf-6m8v)
- Exclude demo-kb-docs/ from version control
@vincentgrobler
vincentgrobler force-pushed the fix/dependency-vulnerabilities branch from b357bd7 to 30dfc91 Compare April 29, 2026 06:51
@vincentgrobler
vincentgrobler merged commit ee5efa5 into main Apr 29, 2026
8 checks passed
@vincentgrobler
vincentgrobler deleted the fix/dependency-vulnerabilities branch April 29, 2026 06:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant