Skip to content

⬆️ chore(ui): update deps and remediate npm audit#54

Merged
ebigunso merged 1 commit intomainfrom
chore/sleep-ui-deps-audit-remediation
Feb 21, 2026
Merged

⬆️ chore(ui): update deps and remediate npm audit#54
ebigunso merged 1 commit intomainfrom
chore/sleep-ui-deps-audit-remediation

Conversation

@ebigunso
Copy link
Copy Markdown
Owner

Summary

  • update sleep-ui dev dependencies including @sveltejs/kit, @sveltejs/adapter-auto, and vitest
  • add npm override for cookie to resolve advisory without unsafe downgrade path
  • regenerate lockfile and verify install/check/build/tests

Validation

  • npm install
  • npm audit (0 vulnerabilities)
  • npm run test:unit
  • npm run check
  • npm run build

Copilot AI review requested due to automatic review settings February 21, 2026 21:38
@ebigunso ebigunso self-assigned this Feb 21, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates several critical devDependencies in the sleep-ui package to address npm audit vulnerabilities and keep dependencies current. The primary focus is on upgrading SvelteKit ecosystem packages, the testing framework (vitest), and applying a cookie package override to resolve a security advisory.

Changes:

  • Updated @sveltejs/kit from 2.5.0 to 2.53.0 and @sveltejs/adapter-auto from 6.1.0 to 7.0.1
  • Upgraded vitest from 1.6.0 to 4.0.18 (major version bump from v1 to v4)
  • Added npm override for cookie package to ^0.7.2 to remediate security vulnerability

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
sleep-ui/package.json Updated devDependencies for @sveltejs/adapter-auto, @sveltejs/kit, and vitest; added cookie override to resolve security advisory
sleep-ui/package-lock.json Regenerated lockfile reflecting all transitive dependency updates from the package.json changes; cookie 0.7.2 is correctly applied throughout the dependency tree

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@ebigunso ebigunso changed the title chore(ui): update deps and remediate npm audit ⬆️ chore(ui): update deps and remediate npm audit Feb 21, 2026
@ebigunso ebigunso merged commit 7e7bc76 into main Feb 21, 2026
6 checks passed
@ebigunso ebigunso deleted the chore/sleep-ui-deps-audit-remediation branch February 21, 2026 21:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants