Skip to content

Update dependencies - #97

Merged
jstayton merged 1 commit into
developmentfrom
update-dependencies
Oct 5, 2026
Merged

jstayton merged 1 commit into
developmentfrom
update-dependencies

Conversation

@jstayton

@jstayton jstayton commented Oct 3, 2026

Copy link
Copy Markdown
Contributor

Patch and minor updates only; there were no majors available. This raises the joi floor to ^18.2.9, which picks up upstream bug and security fixes (messages() prototype-pollution hardening). There's no change to QueryQL's own validation behavior or error messages.

The 6 high npm audit findings that remain (undici, basic-ftp) all come from release-it, which exact-pins its versions. They're dev-only and only reachable when running a release, so I left them alone rather than adding overrides.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@jstayton
jstayton merged commit 5077721 into development Oct 5, 2026
5 checks passed
@jstayton
jstayton deleted the update-dependencies branch October 5, 2026 09:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant