Skip to content

fix(deps): override qs to 6.16.0 - #16

Merged
gRoussac merged 1 commit into
devfrom
fix/dependabot-security-overrides
Sep 12, 2026
Merged

gRoussac merged 1 commit into
devfrom
fix/dependabot-security-overrides

Conversation

@Interchouette

Copy link
Copy Markdown
Collaborator

Summary

  • Add npm overrides.qs 6.16.0.
  • Tip already has Angular 22.1.x and vitest 4.1.11; npm audit reports 0 vulnerabilities.
  • Remaining Dependabot alerts that cite Angular 20.x ranges against this tree are inaccurate and will be dismissed after merge/rescan.

Test plan

  • CI green
  • npm audit zero
  • Dependabot open count drops

Made with Cursor

Pin transitive qs for Dependabot security; npm audit is already clean
for Angular 22 / vitest on tip.

Co-authored-by: Cursor <cursoragent@cursor.com>
@gRoussac
gRoussac merged commit c972619 into dev Sep 12, 2026
1 check passed
@gRoussac
gRoussac deleted the fix/dependabot-security-overrides branch September 12, 2026 10:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants