Skip to content

chore: Bump ajv to 6.15.0 - #763

Merged
hardillb merged 2 commits into
mainfrom
chore/bump-ajv
Sep 30, 2026
Merged

hardillb merged 2 commits into
mainfrom
chore/bump-ajv

Conversation

@Steve-Mcl

@Steve-Mcl Steve-Mcl commented Sep 30, 2026 •

Copy link
Copy Markdown
Contributor

Description

Fixes CVE-2025-69873 (Trivy code scanning alert 20). ajv is a dev dependency pulled in by eslint, and the existing ^6.12.x ranges already allow the fixed version, so only the lockfile changes.

Related Issue(s)

Checklist

  • I have read the contribution guidelines
  • Suitable unit/system level tests have been added and they pass
  • Documentation has been updated
    • Upgrade instructions
    • Configuration details
    • Concepts
  • Changes flowforge.yml?
    • Issue/PR raised on FlowFuse/helm to update ConfigMap Template
    • Issue/PR raised on FlowFuse/CloudProject to update values for Staging/Production
  • Link to Changelog Entry PR, or note why one is not needed.

Labels

  • Includes a DB migration? -> add the area:migration label

Fixes CVE-2025-69873 (Trivy code scanning alert #20). ajv is a dev
dependency pulled in by eslint, and the existing ^6.12.x ranges
already allow the fixed version, so only the lockfile changes.
@Steve-Mcl
Steve-Mcl requested a review from hardillb September 30, 2026 15:36
@hardillb
hardillb merged commit 4dfe949 into main Sep 30, 2026
6 checks passed
@hardillb
hardillb deleted the chore/bump-ajv branch September 30, 2026 16:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants