Skip to content

chore(deps): handle uuid vulnerability#340

Merged
makare11a merged 1 commit into
mainfrom
chore/uuid-vulnerability
Jul 17, 2026
Merged

chore(deps): handle uuid vulnerability#340
makare11a merged 1 commit into
mainfrom
chore/uuid-vulnerability

Conversation

@makare11a

Copy link
Copy Markdown
Contributor

What/Why/How?

This PR handles https://github.com/Redocly/website/security/dependabot/144

Reference

https://app.vanta.com/c/redocly.com/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-medium?tab=results

Testing

Screenshots (optional)

Check yourself

  • Code is linted
  • Tested
  • All new/updated code is covered with tests

Security

  • Security impact of change has been considered
  • Code follows company security practices and guidelines

@makare11a
makare11a requested a review from a team as a code owner July 17, 2026 12:28

@redocly redocly Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

marketing-site AI Review: 🟢 Completed

Note

Low Risk

The changes only affect dependency resolution via an npm override to address a reported security vulnerability. While this forces a new major version of uuid (v11), this is a common practice for patching vulnerabilities in transitive dependencies.

Overview

Adds an override in package.json to enforce uuid version ^11.1.1 across the dependency tree, resolving a security vulnerability reported by Dependabot. Updates package-lock.json to reflect the forced version upgrade.

@makare11a
makare11a merged commit 6c5a357 into main Jul 17, 2026
7 checks passed
@makare11a
makare11a deleted the chore/uuid-vulnerability branch July 17, 2026 14:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants