Skip to content

fix dependencies vulnerabilities - #99

Merged
GoodDayForSurf merged 2 commits into
DevExpress:masterfrom
GoodDayForSurf:master_fix_deps_vulnerabilities
Aug 5, 2026
Merged

fix dependencies vulnerabilities#99
GoodDayForSurf merged 2 commits into
DevExpress:masterfrom
GoodDayForSurf:master_fix_deps_vulnerabilities

Conversation

@GoodDayForSurf

Copy link
Copy Markdown
Contributor

No description provided.

@GoodDayForSurf GoodDayForSurf self-assigned this Aug 4, 2026
Copilot AI review requested due to automatic review settings August 4, 2026 09:19

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the dependency tree to address a reported vulnerability by upgrading brace-expansion and adds a pnpm workspace setting intended to accommodate the upgrade.

Changes:

  • Bumps brace-expansion from 5.0.8 to 5.0.9 in pnpm-lock.yaml.
  • Adds minimumReleaseAgeExclude entry in pnpm-workspace.yaml for brace-expansion.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
pnpm-workspace.yaml Adds a pnpm minimum-release-age exclusion entry intended to allow a specific dependency update.
pnpm-lock.yaml Updates the lockfile to resolve brace-expansion at 5.0.9.
Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread pnpm-workspace.yaml Outdated
@GoodDayForSurf
GoodDayForSurf requested a review from a team August 4, 2026 09:43
clean minimumReleaseAgeExclude
Copilot AI review requested due to automatic review settings August 5, 2026 09:43

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

@GoodDayForSurf
GoodDayForSurf merged commit 0c81e05 into DevExpress:master Aug 5, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants