Skip to content

fix(minimatch-uuid): fixed minimatch and uuid vulns by overriding and updating deps#1088

Merged
apsantiso merged 3 commits into
masterfrom
deps/fix-minimatch-vuln
Jun 18, 2026
Merged

fix(minimatch-uuid): fixed minimatch and uuid vulns by overriding and updating deps#1088
apsantiso merged 3 commits into
masterfrom
deps/fix-minimatch-vuln

Conversation

@apsantiso

@apsantiso apsantiso commented Jun 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Changes

  • Override sequelize uuid version. The only breaking version bump seems to be v4 -> v5
  • Removed not anymore required overrides.
  • Update all eslint deps
  • Added a function to encapsulate jsonwebtoken new types, as we do not want to leak StringValue (jsonwebtoken's internal type) everywhere.

@apsantiso apsantiso requested a review from jzunigax2 as a code owner June 18, 2026 13:04
@apsantiso apsantiso changed the title fix(minimatch-vuln): fixed minimatch vuln by updating fix(minimatch-vuln): fixed minimatch vuln by updating devDeps Jun 18, 2026
@apsantiso apsantiso force-pushed the deps/fix-minimatch-vuln branch from 2fbf912 to b4dc6e4 Compare June 18, 2026 13:07
@apsantiso apsantiso force-pushed the deps/fix-minimatch-vuln branch from b4dc6e4 to 5a831c3 Compare June 18, 2026 13:08
@apsantiso apsantiso force-pushed the deps/fix-minimatch-vuln branch from 5a831c3 to 2ab5e09 Compare June 18, 2026 13:32
@apsantiso apsantiso changed the title fix(minimatch-vuln): fixed minimatch vuln by updating devDeps fix(minimatch-uuid): fixed minimatch and uuid vulns by overriding and updating deps Jun 18, 2026
@apsantiso apsantiso force-pushed the deps/fix-minimatch-vuln branch from 7b370fc to 7f3db23 Compare June 18, 2026 14:15
@sonarqubecloud

sonarqubecloud Bot commented Jun 18, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
77.8% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud

@apsantiso apsantiso force-pushed the deps/fix-minimatch-vuln branch from 7f3db23 to 131bdf0 Compare June 18, 2026 14:20
@apsantiso apsantiso requested a review from sg-gs June 18, 2026 14:23
@apsantiso apsantiso merged commit 544eff0 into master Jun 18, 2026
6 of 7 checks passed
@apsantiso apsantiso deleted the deps/fix-minimatch-vuln branch June 18, 2026 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sg-gs sg-gs sg-gs approved these changes
@jzunigax2 jzunigax2 Awaiting requested review from jzunigax2 jzunigax2 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@apsantiso @sg-gs