Skip to content

security: Override source-map-js to 1.2.2 - #105

Merged
ajivanyandev merged 1 commit into
masterfrom
fix/security-alerts
Oct 6, 2026
Merged

ajivanyandev merged 1 commit into
masterfrom
fix/security-alerts

Conversation

@ajivanyandev

@ajivanyandev ajivanyandev commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

No description provided.

Copilot AI balanced review requested due to automatic review settings October 6, 2026 10:13
@ajivanyandev ajivanyandev self-assigned this Oct 6, 2026
@ajivanyandev ajivanyandev changed the title fix: override source-map-js to 1.2.2 (GHSA-68fv-2mgg-jv7q) fix: override source-map-js to 1.2.2 Oct 6, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The override and lockfile changes are consistent, with no unresolved findings.

Review effort: Balanced
Findings: None

What changed in this PR

Updates the workspace’s transitive source-map-js dependency to address GHSA-68fv-2mgg-jv7q.

Changes:

  • Overrides versions below 1.2.2 with ^1.2.2.
  • Updates the lockfile resolution and dependency references to 1.2.2.
File Description
pnpm-workspace.yaml Adds the source-map-js override.
pnpm-lock.yaml Records the override and updated dependency resolution.
Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@ajivanyandev
ajivanyandev requested a review from a team October 6, 2026 10:59
@ajivanyandev ajivanyandev changed the title fix: override source-map-js to 1.2.2 security: Override source-map-js to 1.2.2 Oct 6, 2026
@ajivanyandev
ajivanyandev merged commit 6b153a4 into master Oct 6, 2026
3 checks passed
@ajivanyandev
ajivanyandev deleted the fix/security-alerts branch October 6, 2026 11:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants