Skip to content

Upgrade dependencies and move action runtime to Node 24#85

Merged
Maddimax merged 4 commits intomainfrom
copilot/upgrade-dependencies-and-fix-issues
Apr 13, 2026
Merged

Upgrade dependencies and move action runtime to Node 24#85
Maddimax merged 4 commits intomainfrom
copilot/upgrade-dependencies-and-fix-issues

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 13, 2026

  • Investigate all 6 vulnerabilities (undici chain + minimatch/prettier-eslint chain)
  • Remove unused prettier-eslint devDependency (fixes minimatch ReDoS vulnerabilities)
  • Upgrade @actions/core to v2 (CJS-compatible, pulls in @actions/http-client v3 → undici v6.24.1, fixing 5 undici CVEs)
  • Run format, lint, test, build and verify 0 vulnerabilities
  • Push and update PR

@CLAassistant
Copy link
Copy Markdown

CLAassistant commented Apr 13, 2026

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ Maddimax
❌ Copilot
You have signed the CLA already but the status is still pending? Let us recheck it.

@Maddimax Maddimax marked this pull request as ready for review April 13, 2026 09:18
@Maddimax Maddimax merged commit 2a1a7b6 into main Apr 13, 2026
23 of 24 checks passed
@Maddimax Maddimax deleted the copilot/upgrade-dependencies-and-fix-issues branch April 13, 2026 09:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants