[Snyk] Security upgrade moment from 2.30.1 to 2.31.0

[snyk-io]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Directory Traversal SNYK-JS-MOMENT-19821607	721

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[snyk-io]

This is a minor version upgrade for moment, a library that is officially in maintenance mode and is not expected to introduce new features or breaking changes. The project prioritizes stability for its existing users.

However, an official changelog for version 2.31.0 was not found in the project's GitHub repository or release notes at the time of this analysis. While the upgrade is likely to contain only minor bug or security fixes, the lack of documentation introduces uncertainty.

Recommendation: The risk is assessed as medium due to the missing changelog. A quick test of date parsing and formatting functionality is recommended after upgrading to ensure no unexpected behavioral changes were introduced.

Source: Moment.js Project Status

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[Copilot]

Pull request overview

Upgrades Moment.js from 2.30.1 to 2.31.0 to address a directory traversal vulnerability.

Changes:

• Updates the declared Moment.js dependency.
• Refreshes the lockfile resolution and integrity hash.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Summary
package.json	Updates Moment.js to ^2.31.0.
package-lock.json	Locks Moment.js to 2.31.0.

Suppressed comments (1)

package.json:71

• This dependency bump also requires regenerating the committed OSS_LICENSES.txt: the published package includes that file (package.json:19-23), and the release workflow uploads it without running update-license (.github/workflows/release.yml:22-32), but its generated entry still says moment@2.30.1. Please include the regenerated entry for moment@2.31.0 so release artifacts accurately document the dependency and license.

		"moment": "^2.31.0",

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.