Repository navigation
Conversation
dependabot 경보 중 패치 버전이 있는 11개 패키지를 올렸다. 직접 의존성인 axios, next, @capacitor/core, @capacitor/ios, @capacitor/cli와 overrides의 sharp는 package.json 범위의 하한도 패치 버전으로 올렸다. 전이 의존성인 source-map-js, fast-uri, brace-expansion, shell-quote, postcss-selector-parser는 락파일만 갱신했다. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Jest Test Results1 529 tests 1 529 ✅ 1m 18s ⏱️ Results for commit 74ea1b7. ♻️ This comment has been updated with latest results. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: e37070982e
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| "@capacitor/core": "^7.6.7", | ||
| "@capacitor/ios": "^7.6.7", | ||
| "@capacitor/core": "^7.6.9", | ||
| "@capacitor/ios": "^7.6.9", |
There was a problem hiding this comment.
When installing or building the iOS target, ios/App/Podfile sources Capacitor from this npm package, but the tracked ios/App/Podfile.lock still locks both Capacitor and CapacitorCordova to 7.6.7 with the old checksums. A clean pod install can therefore fail to reconcile the 7.6.9 podspec with the locked snapshot, while an existing Pods directory can continue using the old native runtime, so this security update is not reliably applied to iOS. Run the Capacitor sync/pod update and commit the regenerated lockfile.
Useful? React with 👍 / 👎.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Playwright Test Results92 tests 92 ✅ 1m 8s ⏱️ Results for commit 74ea1b7. ♻️ This comment has been updated with latest results. |
npm의 @capacitor/ios를 7.6.9로 올린 뒤 pod install로 Podfile.lock을 다시 만들었다. Capacitor와 CapacitorCordova의 버전과 체크섬을 새 버전에 맞춰야 iOS 빌드에도 보안 패치가 적용된다. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This branch was successfully deployed
1 participant
Pull Request
관련 이슈
작업 내용
package.json범위의 하한도 함께 올렸습니다. 새로 설치할 때 취약 버전으로 내려가지 않게 하기 위해서입니다.axios1.19.0 → 1.20.0next15.5.25 → 15.5.27@capacitor/core,@capacitor/ios,@capacitor/cli7.6.7 → 7.6.9sharp0.35.4 → 0.35.5 (overrides.next.sharp)source-map-js1.2.1 → 1.2.2fast-uri3.1.7 → 3.1.8brace-expansion1.1.18 → 1.1.21, 5.0.9 → 5.0.12shell-quote1.10.0 → 1.12.0postcss-selector-parser7.1.5 → 7.1.6참고 사항
@swc/helpers항목을 지워 npm 10에서npm ci가 깨진 일이 있어, develop 위에서 락파일을 다시 만들었습니다.@capacitor/cli7.6.9가 하위 중복(glob,minimatch,brace-expansion등)을 정리한 결과입니다.postcss-selector-parser:tailwindcss3이 6.x로 고정한 6.1.4 사본이 남아 있습니다. 이 사본은 Tailwind 4로 올려야 없어집니다.webpack-dev-middleware: storybook 10.6이 6.x로 고정하고 있고, 패치는 7.4.6부터 나옵니다.sprintf-js,elliptic: 패치 버전이 아직 없습니다.npm ci, jest 257스위트 1529테스트,npm run build, 프로덕션 서버 기준 e2e 92개까지 마쳤고 모두 통과했습니다. 스토리북은 돌리지 않았습니다.체크리스트
🤖 Generated with Claude Code