Skip to content

fix(deps): update package versions to address vulnerabilities#838

Merged
pyrooka merged 3 commits into
mainfrom
nb/fix-cves
Jul 24, 2026
Merged

fix(deps): update package versions to address vulnerabilities#838
pyrooka merged 3 commits into
mainfrom
nb/fix-cves

Conversation

@pyrooka

@pyrooka pyrooka commented Jul 24, 2026

Copy link
Copy Markdown
Member

PR summary

PR Checklist

General checklist

Please make sure that your PR fulfills the following requirements:

  • The commit message follows the Angular Commit Message Guidelines.
  • Tests for the changes have been added (for bug fixes / features)
  • Docs have been added / updated (for bug fixes / features)
  • Dependencies have been updated as needed
  • .secrets.baseline has been updated as needed
  • npm run update-utilities has been run if any files in packages/utilities/src have been updated

Checklist for adding a new validation rule:

  • Added new validation rule definition (packages/ruleset/src/rules/*.js, index.js)
  • If necessary, added new validation rule implementation (packages/ruleset/src/functions/*.js, updated index.js)
  • Added new rule to default configuration (packages/ruleset/src/ibm-oas.js)
  • Added tests for new rule (packages/ruleset/test/*.test.js)
  • Added docs for new rule (docs/ibm-cloud-rules.md)
  • Added scoring rubric entry for new rule (packages/validator/src/scoring-tool/rubric.js)

dependabot Bot and others added 3 commits July 24, 2026 08:23
Bumps [undici](https://github.com/nodejs/undici) from 6.25.0 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.25.0...v6.27.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.0 to 5.2.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...5.2.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Norbert Biczo <pyrooka@users.noreply.github.com>
@pyrooka
pyrooka requested review from Andris28 and diatrcz July 24, 2026 12:46

@diatrcz diatrcz left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good!

@pyrooka
pyrooka merged commit 66a1d20 into main Jul 24, 2026
9 checks passed
@pyrooka
pyrooka deleted the nb/fix-cves branch July 24, 2026 14:20
ibm-devx-sdk pushed a commit that referenced this pull request Jul 24, 2026
## ibm-openapi-validator [1.37.18](https://github.com/IBM/openapi-validator/compare/ibm-openapi-validator@1.37.17...ibm-openapi-validator@1.37.18) (2026-07-24)

### Bug Fixes

* **deps:** update package versions to address vulnerabilities ([#838](#838)) ([66a1d20](66a1d20))
@ibm-devx-sdk

Copy link
Copy Markdown

🎉 This PR is included in version 1.37.18 🎉

The release is available on npm package (@latest dist-tag)

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants