Skip to content

chore: update dependencies and improve error handling - #384

Open
egalvis27 wants to merge 11 commits into
mainfrom
feat/update-minimatch
Open

chore: update dependencies and improve error handling#384
egalvis27 wants to merge 11 commits into
mainfrom
feat/update-minimatch

Conversation

@egalvis27

Copy link
Copy Markdown

What is Changed / Added


  • Replaced the vulnerable transitive dependency minimatch@3.1.2 with minimatch@3.1.5 using npm overrides:
    • "minimatch@3.1.2": "3.1.5"
  • This targets only the affected 3.1.2 resolution path and does not force changes to other major versions of minimatch.
  • Verified that minimatch@3.1.2 is no longer present in the resolved dependency tree.

Why

  • minimatch@3.1.2 is a vulnerable version reported by dependency/security scanning.
  • The vulnerable package was introduced transitively (not as a direct runtime dependency).
  • Pinning the affected transitive path to 3.1.5 applies a patch-level security fix with minimal behavioral risk.

@sonarqubecloud

sonarqubecloud Bot commented Jul 2, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
36.4% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud

@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown

This pull request has been inactive for 30 days. Is it still in progress? If so, please leave a comment or make an update to keep it open. Otherwise, it will be closed automatically in 15 days.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant