Skip to content

chore(deps): resolve development dependency audit findings - #61

Merged
daohoangson merged 1 commit into
mainfrom
codex/dependency-audit-cleanup
Sep 26, 2026
Merged

daohoangson merged 1 commit into
mainfrom
codex/dependency-audit-cleanup

Conversation

@daohoangson

Copy link
Copy Markdown
Owner

Resolve the two npm audit findings in development dependencies:

  • Update transitive brace-expansion from 2.1.0 to 2.1.7.
  • Override tsup’s esbuild dependency to reuse the project’s patched 0.28.2 version, removing the vulnerable 0.27.7 copy.
  • Document when the override can be removed.

Validation: clean install and npm audit report zero vulnerabilities. Lint, all 28 tests, and both builds passed. The generated CLI matched expected Markdown for ChatGPT, Claude, Gemini, and Grok fixtures.

@daohoangson
daohoangson merged commit 34ae5cf into main Sep 26, 2026
2 checks passed
@daohoangson
daohoangson deleted the codex/dependency-audit-cleanup branch September 26, 2026 18:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant