Repository navigation
chore(deps): 배포를 막는 High 취약점 해소 — nodemailer 10 · vitest 5 · audit fix - #480
Merged
Merged
Conversation
9/17 이후 새 권고로 배포 워크플로의 High 취약점 검사가 실패해 운영 슬롯 배포가 건너뛰어졌다. · nodemailer 9.1.1 → 10.0.15 (high: SMTP 자격증명 노출·DoS). 10.0.0 의 유일한 breaking 은 Node 20 이상 요구 — 서버·CI 모두 Node 22 라 해당 없음. 쓰는 API(createTransport·sendMail) 그대로. · vitest 3.2.6 → 5.0.3 (critical, 개발 의존성 tinypool). · npm audit fix — multer · proxy-addr · ip-address 등 호환 범위 갱신. npm audit --audit-level=high: 0 vulnerabilities. backend tsc 통과, shared 351건 통과, backend 663건 통과(34건 실패는 로컬 Postgres 없음 — 업그레이드 전과 같은 34건). Closes #479 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UzcRoPAUSo8hqFSweBDfZT
Jay722J
marked this pull request as ready for review
October 7, 2026 06:51
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #479
#478 병합 후 배포가 「High 취약점 검사」 실패로 건너뛰어졌다(운영 revision 여전히 3999790).
변경
npm audit fix호환 범위 (multer · proxy-addr · ip-address 등)검증
npm audit --audit-level=high→ 0 vulnerabilities배포 후 확인
🤖 Generated with Claude Code
https://claude.ai/code/session_01UzcRoPAUSo8hqFSweBDfZT