Update non-breaking dependencies and clear yarn audit. #564

Merged

Vylpes merged 1 commit from feature/531-dependency-updates into release/0.11.0

2026-10-05 16:38:58 +01:00

Vylpes commented

2026-10-04 18:28:03 +01:00

Owner

Bump packages within current major ranges, patch TypeORM to 0.3.31,
add security resolutions, and vendor a braces 3.0.4 backport until
upstream publishes a fix for GHSA-vfj7-8cjw-p6xm.

#531

Bump packages within current major ranges, patch TypeORM to 0.3.31, add security resolutions, and vendor a braces 3.0.4 backport until upstream publishes a fix for GHSA-vfj7-8cjw-p6xm. #531

Vylpes added 1 commit

2026-10-04 18:28:03 +01:00

Update non-breaking dependencies and clear yarn audit.

Test / build (push) Successful in 1m21s

Details

c37e699729

Bump packages within current major ranges, patch TypeORM to 0.3.31,
add security resolutions, and vendor a braces 3.0.4 backport until
upstream publishes a fix for GHSA-vfj7-8cjw-p6xm. Relates to #531.

Vylpes

2026-10-04 18:30:03 +01:00

added the
type
dependencies
label
requested review from Smithy-bot

Smithy-bot was assigned by Vylpes

2026-10-04 18:30:09 +01:00

Smithy-bot approved these changes

2026-10-05 12:03:19 +01:00

Smithy-bot left a comment

Approved. Dependency bumps stay within current major ranges and match #531 (TypeORM 0.3.31, toolchain/devDependency updates, expanded resolutions for transitive audit findings). The vendored [email protected] backport is documented with a clear removal path, and ESLint correctly ignores vendor/. Lockfile changes look consistent with package.json. No merge blockers from this review.

**Approved.** Dependency bumps stay within current major ranges and match #531 (TypeORM 0.3.31, toolchain/devDependency updates, expanded `resolutions` for transitive audit findings). The vendored `[email protected]` backport is documented with a clear removal path, and ESLint correctly ignores `vendor/`. Lockfile changes look consistent with `package.json`. No merge blockers from this review.

Vylpes merged commit 95cec9a48c into release/0.11.0

2026-10-05 16:38:58 +01:00

Vylpes deleted branch feature/531-dependency-updates

2026-10-05 16:38:58 +01:00

Vylpes referenced this pull request from a commit

2026-10-05 16:38:59 +01:00

Merge pull request 'Update non-breaking dependencies and clear yarn audit.' (#564) from feature/531-dependency-updates into release/0.11.0

Smithy-bot referenced this pull request

2026-10-07 12:10:54 +01:00

0.11.0 Dependency Updates #531