Skip to content
This repository was archived by the owner on Aug 12, 2026. It is now read-only.

Clear Dependabot high alerts (ansi-regex, y18n) - #7

Open
thomasrockhu-codecov wants to merge 5 commits into
masterfrom
th/cve-ansi-regex-y18n
Open

Clear Dependabot high alerts (ansi-regex, y18n)#7
thomasrockhu-codecov wants to merge 5 commits into
masterfrom
th/cve-ansi-regex-y18n

Conversation

@thomasrockhu-codecov

Copy link
Copy Markdown
Contributor

Summary

  • Add npm overrides for ansi-regex and y18n to clear open high Dependabot alerts.

Test plan

  • npm audit --audit-level=high clean
  • Confirm Dependabot highs clear after merge

thomasrockhu-codecov and others added 3 commits August 7, 2026 15:45
CodeQL was failing with "no source code seen" because the repo had no
.github/workflows files for the actions language extractor.

Co-authored-by: Cursor <cursoragent@cursor.com>
Comment thread .github/workflows/ci.yml
iPhone 8 / Xcode 11.4 is unavailable on current CircleCI macOS images.
GHA already validates the npm override install.

Co-authored-by: Cursor <cursoragent@cursor.com>

@calvin-codecov calvin-codecov left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

GH security bot has a good suggestion

…ntain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants