Skip to content

audit fix#28

Merged
manuelpuyol merged 1 commit into
masterfrom
mp/audit
Jun 22, 2026
Merged

audit fix#28
manuelpuyol merged 1 commit into
masterfrom
mp/audit

Conversation

@manuelpuyol

Copy link
Copy Markdown
Contributor

No description provided.

@manuelpuyol manuelpuyol requested a review from a team as a code owner June 22, 2026 19:43
Copilot AI review requested due to automatic review settings June 22, 2026 19:43
GitHub Advanced Security started work on behalf of manuelpuyol June 22, 2026 19:44 View session
GitHub Advanced Security finished work on behalf of manuelpuyol June 22, 2026 19:44

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the project’s Node.js dev dependency set as part of an “audit fix”, primarily by changing the resolved Mocha version and the corresponding package-lock.json dependency graph.

Changes:

  • Lowers the declared Mocha devDependency range in package.json.
  • Regenerates package-lock.json, resulting in a Mocha downgrade and associated transitive dependency downgrades (e.g., diff, workerpool, minimatch).
Show a summary per file
File Description
package.json Lowers the Mocha version range in devDependencies.
package-lock.json Pins Mocha to an older 11.x release and updates resolved transitive dependency versions and integrity hashes accordingly.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 1/2 changed files
  • Comments generated: 1

Comment thread package.json
"eslint": "^8.49.0",
"eslint-plugin-github": "^4.10.0",
"mocha": "^11.7.6",
"mocha": "^11.3.0",
@manuelpuyol manuelpuyol merged commit fecb624 into master Jun 22, 2026
6 checks passed
@manuelpuyol manuelpuyol deleted the mp/audit branch June 22, 2026 19:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants