chore(deps): 보안 취약 의존성을 업데이트합니다 - #1055
Merged
Merged
Conversation
## Summary Dependabot의 npm 보안 경고 27건을 한 번의 의존성 업데이트로 해소합니다. - Next.js, js-yaml, PostCSS, sharp, DOMPurify, fast-uri, brace-expansion을 patched version으로 업데이트합니다. - brace-expansion 5.x와 구형 minimatch의 CommonJS export 호환 patch를 설치 단계에 적용합니다. - @vercel/sdk를 업데이트하여 취약한 MCP/Hono 전이 의존성을 제거합니다. - website-analysis의 js-yaml override를 업데이트합니다. ## Test plan - [x] npm ci - [x] npm audit --package-lock-only (root, deploy, website-analysis) - [x] npm run lint - [x] npm run build (ignored venv가 없는 clean worktree) - [ ] npm run test:run (`origin/main`의 /internal spotlight test 2건이 동일하게 실패합니다.) 🤖 Generated with Codex Co-Authored-By: Atlas <atlas@jk.agent>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Dependabot에 열린 npm 보안 경고 27건을 한 PR에서 해소합니다.
brace-expansion5.0.8과 구형 minimatch의 CommonJS export 호환 patch를 설치 단계에 적용합니다.@vercel/sdk를 업데이트하여 취약한 MCP/Hono 전이 의존성을 제거합니다.js-yamloverride와 lockfile을 업데이트합니다.Test plan
npm ciscripts/deploy,scripts/website-analysis에서npm audit --package-lock-onlynpm run lintnpm run buildnpm run test:run(origin/main에도 존재하는/internalspotlight test 2건이 실패합니다.)Related tickets & links
Additional notes
npm audit0건을 확인했습니다.🤖 Generated with Codex