Skip to content

Fix CVE-2026-55760 in Release 8#4490

Merged
YellowFlora merged 2 commits into
release/8.x.xfrom
fix/deps_handlebars
Jul 3, 2026
Merged

Fix CVE-2026-55760 in Release 8#4490
YellowFlora merged 2 commits into
release/8.x.xfrom
fix/deps_handlebars

Conversation

@YellowFlora

Copy link
Copy Markdown
Contributor
  • fix(deps): consolidate asm dependency under enforcedPlatform to resolve conflicts with version 9.10.1
  • fix(deps): bump handlebars from 4.3.1 to 4.5.2 to address CVE-2026-55760

@YellowFlora YellowFlora requested a review from a team as a code owner July 2, 2026 08:24
@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor
Next patch release will be 8.2.30, Show Release Notes

8.2.30 (2026-07-02)

Bug Fixes

  • deps: bump handlebars from 4.3.1 to 4.5.2 to address CVE-2026-55760 (f4d6777)
  • deps: consolidate asm dependency under enforcedPlatform to resolve conflicts with version 9.10.1 (57433bb)

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Test Results

1 212 files  ±0  1 212 suites  ±0   1h 29m 7s ⏱️ + 5m 54s
1 538 tests  - 2  1 524 ✅  - 1  14 💤  - 1  0 ❌ ±0 
6 500 runs   - 2  6 438 ✅ ±0  62 💤  - 2  0 ❌ ±0 

Results for commit f4d6777. ± Comparison against base commit 408346d.

@sonarqubecloud

sonarqubecloud Bot commented Jul 2, 2026

Copy link
Copy Markdown

@YellowFlora YellowFlora merged commit 4cb8d48 into release/8.x.x Jul 3, 2026
19 checks passed
@YellowFlora YellowFlora deleted the fix/deps_handlebars branch July 3, 2026 07:30
@SDABot

SDABot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 8.2.30 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants