Skip to content

Fix vulnerable version of pnpm packages - #4009

Open
pmachapman wants to merge 1 commit into
masterfrom
update/pnpm-dependencies
Open

Fix vulnerable version of pnpm packages#4009
pmachapman wants to merge 1 commit into
masterfrom
update/pnpm-dependencies

Conversation

@pmachapman

@pmachapman pmachapman commented Jul 29, 2026

Copy link
Copy Markdown
Collaborator

This PR fixes around half of the vulnerable dependencies for pnpm packages. These were ones that pnpm audit --fix update couldn't resolve outright as they had other dependencies blocking them.

The most of the rest of the issues should be resolved with an update to Angular 22 which was release in June.


This change is Reviewable

@codecov

codecov Bot commented Jul 29, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.05%. Comparing base (1b6cdcc) to head (0d97c14).
⚠️ Report is 1 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #4009      +/-   ##
==========================================
+ Coverage   81.04%   81.05%   +0.01%     
==========================================
  Files         660      660              
  Lines       43014    43033      +19     
  Branches     7050     7056       +6     
==========================================
+ Hits        34861    34881      +20     
  Misses       6981     6981              
+ Partials     1172     1171       -1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@pmachapman
pmachapman force-pushed the update/pnpm-dependencies branch from 63096f0 to 64a5437 Compare July 29, 2026 20:27
@pmachapman
pmachapman temporarily deployed to screenshot_diff July 29, 2026 20:34 — with GitHub Actions Inactive
@pmachapman
pmachapman force-pushed the update/pnpm-dependencies branch from 64a5437 to f1fdbe6 Compare August 2, 2026 19:41
@RaymondLuong3 RaymondLuong3 removed the e2e Run e2e tests for this pull request label Aug 6, 2026

@RaymondLuong3 RaymondLuong3 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@RaymondLuong3 reviewed 9 files and all commit messages.
Reviewable status: :shipit: complete! all files reviewed, all discussions resolved (waiting on pmachapman).

@RaymondLuong3
RaymondLuong3 force-pushed the update/pnpm-dependencies branch from f1fdbe6 to 0d97c14 Compare August 6, 2026 17:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants