Skip to content

fix(ui): remediate frontend dependency CVEs - #173

Draft
cjlg-soloio wants to merge 1 commit into
agentdesktop-dev:mainfrom
cjlg-soloio:cjlg/fixCves
Draft

cjlg-soloio wants to merge 1 commit into
agentdesktop-dev:mainfrom
cjlg-soloio:cjlg/fixCves

Conversation

@cjlg-soloio

Copy link
Copy Markdown

🤖 written by Claude (start)

Changelog

Bumps transitive brace-expansion 5.0.9 → 5.0.12 (GHSA-6j4f-fj2g-mc7p, GHSA-qhr7-859c-m2p7, GHSA-q2hr-2g5m-vwhr) and source-map-js 1.2.1 → 1.2.2 (GHSA-68fv-2mgg-jv7q). Both are dev-tooling-only (Storybook/Vitest/Vite) and resolve within their parents' existing ranges, so only frontend/pnpm-lock.yaml changes.

/kind cleanup

NONE

Testing

From frontend/, run pnpm install --frozen-lockfile && pnpm audit && pnpm build. The audit reports no vulnerabilities and both apps build.


🤖 written by Claude (end)

🤖 Generated with Claude Code

Bump transitive brace-expansion 5.0.9 -> 5.0.12 and source-map-js
1.2.1 -> 1.2.2 within their existing parent ranges.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Carlos Logroño Guerrero <298013989+cjlg-soloio@users.noreply.github.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant