From 3f6ff4d2207809c4bd4fea25d49979c0bd7116e2 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 14:28:35 +0000 Subject: [PATCH 1/2] chore: upgrade ip-address to ^10.7.2 to address CVE-2026-101910, CVE-2026-101913 Co-Authored-By: Claude Opus 5.5 --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 16aa3ddd3..7ab9e4e6e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -15984,9 +15984,9 @@ __metadata: linkType: hard "ip-address@npm:^10.1.1, ip-address@npm:^10.2.0": - version: 10.4.0 - resolution: "ip-address@npm:10.4.0" - checksum: 10c0/d7b0bd2624fd861afbae6e49036a9b56f9506eaff7ff38592b7b4492dd5c272b53f5356dc8cc019e318acf29a96c90a3d1af1df761960267d23efa96858270fa + version: 10.7.2 + resolution: "ip-address@npm:10.7.2" + checksum: 10c0/290b9c63289b2a89a442dac19eff88d919e65cd41d1a720fa963be736e126f3b0cf4f88f6056b06abbf4a95300dc9ce5362a773e012ef30e0400074d175b9d31 languageName: node linkType: hard From 09c4913018b8a2765bc266be6c60c7fd57730a74 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 14:29:01 +0000 Subject: [PATCH 2/2] chore: add CHANGELOG entry for #1695 Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 36ce36050..c86a57f38 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -19,6 +19,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Made the default home page configurable with `DEFAULT_HOME_VIEW_PAGE`, defaulting to Code Search and supporting Ask. [#1677](https://github.com/sourcebot-dev/sourcebot/pull/1677) - Require authentication for the streaming and blocking Ask APIs in Public SaaS deployments. [#1679](https://github.com/sourcebot-dev/sourcebot/pull/1679) - Bounded BullMQ job retention to keep Redis memory from growing with repo count, retaining only the latest job per repo, connection, and account. [#1693](https://github.com/sourcebot-dev/sourcebot/pull/1693) +- Upgraded `ip-address` to `^10.7.2`. [#1695](https://github.com/sourcebot-dev/sourcebot/pull/1695) ## [5.1.14] - 2026-09-17