Skip to content

chore(deps): resolve GitHub security alerts#123

Merged
sadjow merged 1 commit into
mainfrom
fix/github-dependabot-alerts
May 10, 2026
Merged

chore(deps): resolve GitHub security alerts#123
sadjow merged 1 commit into
mainfrom
fix/github-dependabot-alerts

Conversation

@sadjow
Copy link
Copy Markdown
Member

@sadjow sadjow commented May 10, 2026

Summary

  • Refresh root and playground Yarn lockfiles so GitHub Dependabot alerts resolve to patched package versions.
  • Includes the merged playground nitropack update and supersedes the blocked root nitropack Dependabot PR.
  • Add Yarn 1 ignore-engines config so CI can install the security-fixed Nitro dependency graph on the existing Node 20 matrix.
  • Pin eslint-flat-config-utils to 3.0.2 so the refreshed ESLint dependency graph still runs under Node 20.
  • Pin Playwright packages to 1.57.0 to match the existing CI Playwright Docker image.

GitHub alerts addressed

Verification

  • corepack yarn install --frozen-lockfile
  • corepack yarn lint --max-warnings 0
  • corepack yarn dev:build
  • corepack yarn test

@sadjow sadjow force-pushed the fix/github-dependabot-alerts branch from dffab19 to 2374294 Compare May 10, 2026 14:30
@sadjow sadjow force-pushed the fix/github-dependabot-alerts branch from 2374294 to 6622ed4 Compare May 10, 2026 14:33
@sadjow sadjow merged commit d142bb8 into main May 10, 2026
2 checks passed
@sadjow sadjow deleted the fix/github-dependabot-alerts branch May 10, 2026 14:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant