You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
chore(deps): resolve all Dependabot security alerts (#362)
## Summary
- Update vulnerable dependencies across npm, Python, Go, and NuGet
ecosystems to resolve all 156 open Dependabot security alerts
- Add yarn resolutions for transitive dependencies that can't be
directly upgraded
- Dismiss 7 alerts with no fix available (deprecated packages)
## Test plan
- [ ] Verify yarn install succeeds without errors
- [ ] Verify SDK builds pass (`yarn build:sdk`)
- [ ] Verify tests pass (`yarn test`)
- [ ] Confirm Dependabot alerts are auto-closed after merge
🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- CURSOR_SUMMARY -->
---
> [!NOTE]
> **Medium Risk**
> Mostly version bumps, but broad dependency upgrades and added
transitive overrides can introduce build/runtime incompatibilities
across multiple language toolchains (notably Go 1.24 and updated JS
bundler/framework deps).
>
> **Overview**
> Primarily a dependency-security sweep across the monorepo, updating
versions in multiple ecosystems (npm/Yarn, Go modules, Poetry/Python,
and NuGet) to address Dependabot alerts.
>
> Notable changes include adding extensive root `package.json` Yarn
`resolutions` to pin/override vulnerable transitive packages, upgrading
e2e app dependencies (Angular, Remix, Next.js tooling, Vite, React
Router, NestJS), bumping Go toolchains to `go 1.24.x` and updating
`golang.org/x/*` + `chi`, updating .NET Framework e2e OpenTelemetry
packages from `1.11.1` to `1.11.2`, and refreshing Python
lockfiles/dependency floors (e.g., `requests`, `urllib3`,
`fastapi/starlette`, `werkzeug`, `filelock`, plus new
`annotated-doc`/`typing-inspection`).
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
8e0fae7. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
0 commit comments