Skip to content

chore(deps): resolve all Dependabot alerts and remediate yarn audit vulnerabilities - #87

Merged
joshuapregua merged 30 commits into
masterfrom
LOC-7179/dependabots
Sep 30, 2026
Merged

joshuapregua merged 30 commits into
masterfrom
LOC-7179/dependabots

Conversation

@joshuapregua

@joshuapregua joshuapregua commented Sep 29, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Resolves all open Dependabot alerts and remediates every vulnerability reported by yarn audit on this addon.

Result: yarn audit went from 703 → 0 vulnerabilities (previously: 71 Low / 143 Moderate / 378 High / 13 Critical).

How to Test Manually

Since this is a dependency-only change, focus on verifying the addon still installs, builds, and runs in Local without regressions.

1. Fresh install & build

yarn install
yarn build

Expect: install completes; build succeeds with no errors

2. Verify audit is clean

yarn audit

Expect: 0 vulnerabilities found

3. Load the addon in Local

  1. Symlink or copy this repo into your Local addons directory:
    • macOS: ~/Library/Application Support/Local/addons/local-addon-headless
  2. Restart Local.

4. Headless Site Smoke Test

  1. Create a new WordPress site in Local:

    • Enter a site name.
    • Choose an environment.
    • Select "Custom."
    • Enable the Headless Add-on when prompted.
  2. Verify the Headless tab appears on the site overview.

  3. Enable Headless mode and confirm the frontend framework selector renders (Faust.js).

  4. Provision the headless site end-to-end and verify:

    • The site starts successfully.
    • You can access both the WP admin and the headless frontend URL in a browser.'

@sonarqube-wp-engine-prod

Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

@joshuapregua
joshuapregua marked this pull request as ready for review September 29, 2026 22:08
@joshuapregua
joshuapregua requested a review from a team as a code owner September 29, 2026 22:08

@nickcernis nickcernis left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you! Looking good.

@joshuapregua
joshuapregua merged commit 28906c2 into master Sep 30, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants