Skip to content

chore(deps): apply pnpm audit fixes - #245

Open
ack-github-actions-app[bot] wants to merge 1 commit into
mainfrom
chore/audit-fix
Open

ack-github-actions-app[bot] wants to merge 1 commit into
mainfrom
chore/audit-fix

Conversation

@ack-github-actions-app

Copy link
Copy Markdown
Contributor

Partial fix: some advisories could not be auto-resolved. This run is red -- resolve the remainder by hand before merging.

Automated pnpm audit --fix=override from the scheduled audit sweep (.github/workflows/audit-fix.yaml).

AI usage: none. Generated mechanically; no AI tools authored these changes (per AI_POLICY.md).

Before merging, tidy the generated overrides by hand: scope each to the affected major, pin the version, and add a comment naming the advisory to match the existing block in pnpm-workspace.yaml.

@ack-github-actions-app ack-github-actions-app Bot added the dependencies Pull requests that update a dependency file label Oct 6, 2026
@coderabbitai

coderabbitai Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 2d287fb9-ee66-4446-bf42-b5fc6662bc85

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Tip

🎯 Customize your risk assessments

Guide how CodeRabbit assesses merge risk and security architecture risk. Highlight sensitive changes and explain your security boundaries using Merge Risk Instructions and Security Risk Instructions in your review settings. Security architecture risk assessments require the Advanced plan or above.

✅ Automatic approvals, with your rules

Let CodeRabbit approve pull requests once required threads are resolved, pre-merge checks pass, and your risk limits are met. Enable Automatic approvals in review settings, with overrides for teams or file paths.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@ack-github-actions-app
ack-github-actions-app Bot force-pushed the chore/audit-fix branch 2 times, most recently from 090b245 to 6f0f948 Compare October 10, 2026 13:48
@ack-github-actions-app
ack-github-actions-app Bot force-pushed the chore/audit-fix branch 4 times, most recently from cba2bfa to 62ddc0d Compare October 27, 2026 13:18
@ack-github-actions-app
ack-github-actions-app Bot force-pushed the chore/audit-fix branch 5 times, most recently from 68468f9 to d738098 Compare November 3, 2026 15:16

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant