Skip to content

Update vulnerable js-yaml lockfile versions - #255

Merged
jayhill merged 1 commit into
mainfrom
fix/js-yaml-lockfiles
Nov 10, 2026
Merged

Update vulnerable js-yaml lockfile versions#255
jayhill merged 1 commit into
mainfrom
fix/js-yaml-lockfiles

Conversation

Copilot AI commented Nov 10, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Update frontend and serverless js-yaml lockfile entries to patched releases within existing dependency ranges.

Validation

  • npm audit reports no js-yaml vulnerabilities in either updated package.

@jayhill
Update vulnerable js-yaml lockfile versions
c959e3c 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jayhill
jayhill marked this pull request as ready for review November 10, 2026 15:32
@jayhill
jayhill merged commit e251c1a into main Nov 10, 2026
8 checks passed
@jayhill
jayhill deleted the fix/js-yaml-lockfiles branch November 10, 2026 15:34

This branch was successfully deployed

1 active deployment
dev — c959e3cb Deployed Nov 10, 2026 by Copilot via Terraform Plan (Dev) #302
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@jayhill jayhill jayhill approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

@jayhill jayhill

Copilot code review Copilot

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jayhill