Skip to content

build(deps): npm audit fix - #45

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
npm-audit-fix-action/fix
Open

github-actions[bot] wants to merge 1 commit into
mainfrom
npm-audit-fix-action/fix

Conversation

@github-actions

@github-actions github-actions Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

This pull request fixes the vulnerable packages via npm v11.21.1.

Updated (18)
Package Version Source Severity Link
@puppeteer/browsers 3.2.1→3.2.6 github - -
chromium-bidi 17.0.2→157.0.8090-0 github - -
devtools-protocol 0.0.1666840→0.0.1704951 github - -
fast-uri
(@fastify/ajv-compiler/node_modules/ajv/node_modules/fast-uri)
3.1.8→3.1.9 github Moderate GHSA-w74x-v6f9-j3xg
fast-uri
(fast-json-stringify/node_modules/ajv/node_modules/fast-uri)
3.1.8→3.1.9 github Moderate GHSA-w74x-v6f9-j3xg
fast-uri
(ajv-formats/node_modules/fast-uri)
3.1.8→3.1.9 github Moderate GHSA-w74x-v6f9-j3xg
fast-uri 4.2.1→4.2.3 github Moderate GHSA-w74x-v6f9-j3xg
fastify 5.12.5→5.12.7 github Low GHSA-389g-gv7q-r4x8
get-east-asian-width 1.6.0→1.7.0 github - -
markdown-it 14.3.1→14.3.3 github High GHSA-r7fv-28h4-cvq7
modern-tar 0.8.4→0.8.6 github - -
puppeteer 25.9.0→25.16.0 github - -
puppeteer-core 25.9.0→25.16.0 github - -
serialize-javascript 7.1.2→7.1.4 github Low GHSA-m5mm-p8h7-m29v
typed-query-selector 2.12.2→2.12.3 github - -
webdriver-bidi-protocol 0.4.2→1.0.1 github - -
ws 8.21.3→8.22.0 github - -
zod 3.25.76→4.6.7 github High GHSA-mrhx-c7xc-m3w5
Added (11)
Package Version Source
ansi-regex 6.4.0 github
ansi-styles 6.2.3 github
cliui 9.0.1 github
emoji-regex 10.6.0 github
string-width
(cliui/node_modules/string-width)
7.2.0 github
string-width
(wrap-ansi/node_modules/string-width)
7.2.0 github
string-width 8.3.0 github
strip-ansi 7.2.0 github
wrap-ansi 9.0.2 github
yargs 18.2.0 github
yargs-parser 22.0.0 github
Removed (11)
Package Version Source
ansi-regex
(@puppeteer/browsers/node_modules/ansi-regex)
6.3.0 github
ansi-styles
(@puppeteer/browsers/node_modules/ansi-styles)
6.2.3 github
cliui
(@puppeteer/browsers/node_modules/cliui)
9.0.1 github
emoji-regex
(@puppeteer/browsers/node_modules/emoji-regex)
10.6.0 github
string-width
(@puppeteer/browsers/node_modules/cliui/node_modules/string-width)
7.2.0 github
string-width
(@puppeteer/browsers/node_modules/wrap-ansi/node_modules/string-width)
7.2.0 github
string-width
(@puppeteer/browsers/node_modules/string-width)
8.2.2 github
strip-ansi
(@puppeteer/browsers/node_modules/strip-ansi)
7.2.0 github
wrap-ansi
(@puppeteer/browsers/node_modules/wrap-ansi)
9.0.2 github
yargs
(@puppeteer/browsers/node_modules/yargs)
18.1.0 github
yargs-parser
(@puppeteer/browsers/node_modules/yargs-parser)
22.0.0 github

This pull request was created by ybiquitous/npm-audit-fix-action in the action run.

@github-actions github-actions Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code security labels Oct 21, 2026
@github-actions
github-actions Bot force-pushed the npm-audit-fix-action/fix branch 3 times, most recently from 7fd5196 to e03d06d Compare October 25, 2026 02:17
Summary:
- Updated packages: 18
- Added packages: 11
- Removed packages: 11

Fixed vulnerabilities:
- fast-uri: Moderate (GHSA-w74x-v6f9-j3xg)
- fastify: Low (GHSA-389g-gv7q-r4x8)
- markdown-it: High (GHSA-r7fv-28h4-cvq7)
- serialize-javascript: Low (GHSA-m5mm-p8h7-m29v)
- zod: High (GHSA-mrhx-c7xc-m3w5)
@github-actions
github-actions Bot force-pushed the npm-audit-fix-action/fix branch from e03d06d to bc2ab4d Compare October 26, 2026 02:17

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant