Repository navigation
build(deps): bump source-map-js from 1.2.1 to 1.2.2 - #2030
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM, straightforward dependency bump.
What was reviewed: the full diff, confirming the only change is yarn.lock bumping source-map-js from 1.2.1 to 1.2.2 (resolution string and checksum updated consistently); no application source, config, or other dependency entries are touched.
Extended reasoning...
The change is a single-dependency Dependabot lockfile bump (source-map-js 1.2.1 to 1.2.2) touching only yarn.lock, with version and checksum updated consistently and no other entries altered. No application code, build config, or security-sensitive surface is touched. This is mechanical and low-risk, matching the approval criteria for version bumps.
|
coverage: 87.341%. remained the same — dependabot/npm_and_yarn/source-map-js-1.2.2 into main |
1f011a8 to
d450aad
Compare
d450aad to
99e2b1d
Compare
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2. - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2) --- updated-dependencies: - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
99e2b1d to
8c26450
Compare
Bumps source-map-js from 1.2.1 to 1.2.2.
Release notes
Sourced from source-map-js's releases.
Changelog
Sourced from source-map-js's changelog.
Commits
0a1d3341.2.24c6fa26Update changelogcf76580Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)7899a86Fix crash when executing browser with CSP script-src that don't permit unsafe...