Skip to content
This repository was archived by the owner on Oct 22, 2026. It is now read-only.

Bump Next and the production overrides past the critical and high advisories - #81

Merged
SafetyMP merged 1 commit into
mainfrom
fix/critical-high-advisories
Oct 11, 2026
Merged

Bump Next and the production overrides past the critical and high advisories#81
SafetyMP merged 1 commit into
mainfrom
fix/critical-high-advisories

Conversation

@SafetyMP

@SafetyMP SafetyMP commented Oct 11, 2026

Copy link
Copy Markdown
Owner

Summary

  • Pins the packages named in the open critical and high Dependabot alerts to a patched release.
  • Production audit at high level is clean for the touched manifests. Moderate findings were left in place.

Test plan

  • Production audit or pip-audit for the touched manifests
  • GitHub checks on this pull request

Made with Cursor

Copilot AI balanced review requested due to automatic review settings October 11, 2026 13:58
Copilot AI reviewed Oct 11, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@SafetyMP
SafetyMP merged commit 411fc6f into main Oct 11, 2026
2 checks passed
@SafetyMP
SafetyMP deleted the fix/critical-high-advisories branch October 11, 2026 13:59
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@SafetyMP