Skip to content

chore: update dependencies and improve error handling#384

Open
egalvis27 wants to merge 8 commits into
mainfrom
feat/update-minimatch
Open

chore: update dependencies and improve error handling#384
egalvis27 wants to merge 8 commits into
mainfrom
feat/update-minimatch

Conversation

@egalvis27

Copy link
Copy Markdown

What is Changed / Added


  • Replaced the vulnerable transitive dependency minimatch@3.1.2 with minimatch@3.1.5 using npm overrides:
    • "minimatch@3.1.2": "3.1.5"
  • This targets only the affected 3.1.2 resolution path and does not force changes to other major versions of minimatch.
  • Verified that minimatch@3.1.2 is no longer present in the resolved dependency tree.

Why

  • minimatch@3.1.2 is a vulnerable version reported by dependency/security scanning.
  • The vulnerable package was introduced transitively (not as a direct runtime dependency).
  • Pinning the affected transitive path to 3.1.5 applies a patch-level security fix with minimal behavioral risk.

@sonarqubecloud

sonarqubecloud Bot commented Jun 8, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
45.0% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant