AWG-13084 Fixed dependabot issues#45
Conversation
There was a problem hiding this comment.
Pull request overview
This PR updates the package patch version and refreshes locked transitive dev dependency versions to address Dependabot-reported issues without changing runtime source code.
Changes:
- Bumps
page-processing-libfrom4.1.6to4.1.7. - Updates transitive dev dependencies in
package-lock.json:ajv,handlebars, andws.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
package.json |
Updates the package version to 4.1.7. |
package-lock.json |
Syncs the package version and refreshes locked dev dependency versions. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
This works, i like to add the changes to package.json as version bump for direct dependencies and overrides for transitives. If we for some reason need to rebuild the package-lock.json. Then these changes is lost ;-) And i'm not sure about this snyk things? |
Idk what are these snyk things as well 😅 |
https://acquia.atlassian.net/browse/AWG-13084