Skip to content

Fix pnpm audit#262

Merged
dxvladislavvolkov merged 1 commit into
masterfrom
fix-pnpm-audit
Jul 22, 2026
Merged

Fix pnpm audit#262
dxvladislavvolkov merged 1 commit into
masterfrom
fix-pnpm-audit

Conversation

@dxvladislavvolkov

Copy link
Copy Markdown
Contributor

No description provided.

@dxvladislavvolkov
dxvladislavvolkov requested a review from a team July 22, 2026 08:29
@dxvladislavvolkov dxvladislavvolkov self-assigned this Jul 22, 2026
Copilot AI review requested due to automatic review settings July 22, 2026 08:29

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates pnpm overrides and lockfile to address pnpm audit findings by forcing patched dependency versions in the workspace, ensuring vulnerable transitive packages resolve to safe releases.

Changes:

  • Added a pnpm override to upgrade @hono/node-server from vulnerable versions <2.0.5 to ^2.0.5.
  • Regenerated pnpm-lock.yaml to reflect updated resolutions (including @hono/node-server@2.0.11 and related patched transitive updates).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
pnpm-workspace.yaml Adds an override to force @hono/node-server to a patched version range.
pnpm-lock.yaml Applies the override and updates resolved package versions/integrities accordingly.
Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@dxvladislavvolkov
dxvladislavvolkov merged commit b4bede3 into master Jul 22, 2026
3 checks passed
@dxvladislavvolkov
dxvladislavvolkov deleted the fix-pnpm-audit branch July 22, 2026 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants