chore: update dependencies and fix vulnerabilities#201
Conversation
There was a problem hiding this comment.
Pull request overview
Updates dependency versions and introduces pnpm overrides intended to remediate known vulnerabilities in transitive packages for this CLI project.
Changes:
- Added pnpm
overridesto force patched versions of vulnerable transitive dependencies (brace-expansion, handlebars, serialize-javascript). - Bumped a few direct dependencies/devDependencies (notably
@biomejs/biomeand several@oclif/*plugins). - Regenerated
pnpm-lock.yamlto reflect the new resolutions.
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| pnpm-workspace.yaml | Introduces pnpm overrides used to enforce patched transitive dependency versions. |
| pnpm-lock.yaml | Lockfile regeneration reflecting overrides and dependency version bumps. |
| package.json | Updates a small set of dependency/devDependency versions. |
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Agent-Logs-Url: https://github.com/commercelayer/commercelayer-cli/sessions/daac2be5-92fe-45e3-8d9c-12d40bea520f Co-authored-by: pviti <57948342+pviti@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 2 changed files in this pull request and generated 3 comments.
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
🎉 This PR is included in version 6.9.1 🎉 The release is available on: Your semantic-release bot 📦🚀 |
|
🎉 This PR is included in version 7.0.0-oclif4.7 🎉 The release is available on: Your semantic-release bot 📦🚀 |
No description provided.