Skip to content

update axios and dompurify - #515

Merged
Dmitrii Ostasevich (kwinto) merged 2 commits into
masterfrom
bug/138441-update-axios-and-dompurify
May 28, 2026
Merged

Dmitrii Ostasevich (kwinto) merged 2 commits into
masterfrom
bug/138441-update-axios-and-dompurify

Conversation

@saeb-cognigy

Copy link
Copy Markdown
Collaborator

Quick update to patch Snyk vulnerabilities

@graymalkin77

Daniel Undorf (graymalkin77) commented May 20, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates third-party dependencies to address reported Snyk vulnerabilities in the Webchat Widget package.

Changes:

  • Bumped axios from ^1.15.0 to ^1.15.2.
  • Bumped dompurify from 3.3.2 to ^3.4.0 and updated the lockfile accordingly.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
package.json Updates dependency versions for axios and dompurify.
package-lock.json Refreshes resolved versions/integrity metadata for the updated dependencies.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json Outdated

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Smoke-tested locally: npm ci installs axios@1.15.2 and dompurify@3.4.0 cleanly, npm run dev (webpack-dev-server) compiles successfully (16s, webchat.js 4.5 MiB, message-renderer.js 2.45 MiB), and http://localhost:8787/ serves HTTP 200. LGTM for the Snyk vuln patch.

@kwinto
Dmitrii Ostasevich (kwinto) merged commit dcb6b16 into master May 28, 2026
4 checks passed
@saeb-cognigy
Saeb Al-Salihi (saeb-cognigy) deleted the bug/138441-update-axios-and-dompurify branch May 28, 2026 09:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants