Skip to content

fix(deps): vuln source-map-js (patch → 1.2.2) [e2e/package.json] - #743

Merged
nina9753 merged 3 commits into
mainfrom
engraver-auto-version-upgrade/minorpatch/npm/e2e/1-1791796397
Oct 14, 2026
Merged

nina9753 merged 3 commits into
mainfrom
engraver-auto-version-upgrade/minorpatch/npm/e2e/1-1791796397

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: High-severity security update — 1 package upgraded (patch changes only)

Manifests changed:

  • e2e/package.json (yarn)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
source-map-js 1.2.1 1.2.2 patch Transitive 2 HIGH

Security Details

🚨 Critical & High Severity (2 fixed)
Package CVE Severity Summary Unsafe Version Fixed In Case
source-map-js GHSA-68fv-2mgg-jv7q HIGH source-map-js allows event-loop denial of service through indexed source-map section offsets 1.2.1 1.2.2 -
source-map-js CVE-2026-93749 HIGH source-map-js through 1.2.1 Event Loop Denial of Service 1.2.1 - -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with main — rebased onto 4650280.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-4caf68
dd-octo-sts-4caf68 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/e2e/1-1791796397 branch from b181d7b to c5b0d30 Compare October 13, 2026 19:27
@dd-octo-sts
dd-octo-sts Bot marked this pull request as ready for review October 14, 2026 19:16
@dd-octo-sts
dd-octo-sts Bot requested a review from a team as a code owner October 14, 2026 19:16
@dd-octo-sts
dd-octo-sts Bot requested a review from nina9753 October 14, 2026 19:16
@dd-prapprover-prod-77c48c

dd-prapprover-prod-77c48c Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

  • ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-10-14T19:16:53Z
  • ✅ CI tests passed - 2026-10-14T19:16:57Z
  • ✅ Approved (commit: c5b0d30) - 2026-10-14T19:17:00Z
  • ✅ Merge Started
  • ⬜ Merged

➡️ *Current phase: ❌ Merge failed: mergequeue build completed successfully, but the github api returned an error while merging the pr.
It's probably because:

  • target branch of PR is restricted to only allow up-to-date branches, but the pr is now outdated*

@dd-prapprover-prod-77c48c dd-prapprover-prod-77c48c Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR has been automatically approved by the DD PR Approver bot.

@nina9753
nina9753 merged commit 81e59c9 into main Oct 14, 2026
13 checks passed
@nina9753
nina9753 deleted the engraver-auto-version-upgrade/minorpatch/npm/e2e/1-1791796397 branch October 14, 2026 19:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant