Skip to content

fix: resolve all Dependabot security alerts #15

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
CharanMN7 merged 3 commits into from
Jul 26, 2026
Merged

fix: resolve all Dependabot security alerts #15

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
944d9c1
chore: bump Next.js 16.2.10 → 16.2.12 across active workspaces
CharanMN7 Jul 26, 2026
d2f7fce
fix: override transitive deps to resolve Dependabot alerts
CharanMN7 Jul 26, 2026
14f9c51
chore: update CI audit comment now that overrides resolve all alerts
CharanMN7 Jul 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 3 additions & 6 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,10 +45,7 @@ jobs:

- run: npm run build

# Catches new high/critical advisories as they're published upstream,
# without failing on the currently-acknowledged moderate one (Next.js
# bundles its own vulnerable postcss even at the latest 16.2.x patch —
# see CHANGELOG.md 0.4.0 and MIGRATION.md; not fixable from here short
# of a real Next.js release, so it's excluded from the gate rather
# than left permanently red).
# Catches new high/critical advisories as they're published upstream.
# Transitive dep vulnerabilities (postcss, sharp, @hono/node-server)
# are pinned via root package.json overrides — see commit history.
- run: npm audit --audit-level=high
2 changes: 1 addition & 1 deletion examples/inkform-docs/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
"dependencies": {
"@inkform/framework": "^0.3.0",
"lucide-react": "^0.483.0",
"next": "16.2.10",
"next": "16.2.12",
"react": "19.2.1",
"react-dom": "19.2.1"
},
Expand Down
2 changes: 1 addition & 1 deletion examples/markdown-docs/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
"dependencies": {
"@inkform/framework": "^0.3.0",
"lucide-react": "^0.483.0",
"next": "16.2.10",
"next": "16.2.12",
"react": "19.2.1",
"react-dom": "19.2.1"
},
Expand Down
2 changes: 1 addition & 1 deletion examples/pokeapi-docs/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
"dependencies": {
"@inkform/framework": "^0.3.0",
"lucide-react": "^0.483.0",
"next": "16.2.10",
"next": "16.2.12",
"react": "19.2.1",
"react-dom": "19.2.1"
},
Expand Down
Loading
Loading