From 6d47789a0d232b2b44950872866411daa4618f42 Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Fri, 8 May 2026 13:56:47 -0400 Subject: [PATCH 1/3] chore: resolve open dependabot security alerts - ip-address <=10.1.0 -> 10.2.0 (medium, alert #24) Signed-off-by: Jonathan Norris --- package-lock.json | 15 ++++++++------- package.json | 3 ++- 2 files changed, 10 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index dff329a8..01818097 100644 --- a/package-lock.json +++ b/package-lock.json @@ -822,10 +822,11 @@ } }, "node_modules/ip-address": { - "version": "10.1.0", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz", - "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==", + "version": "10.2.0", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz", + "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==", "dev": true, + "license": "MIT", "engines": { "node": ">= 12" } @@ -3077,9 +3078,9 @@ "dev": true }, "ip-address": { - "version": "10.1.0", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz", - "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==", + "version": "10.2.0", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz", + "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==", "dev": true }, "is-absolute-url": { @@ -4063,7 +4064,7 @@ "integrity": "sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==", "dev": true, "requires": { - "ip-address": "^10.0.1", + "ip-address": ">=10.1.1", "smart-buffer": "^4.2.0" } }, diff --git a/package.json b/package.json index 7f787a79..1fc5d647 100644 --- a/package.json +++ b/package.json @@ -8,6 +8,7 @@ "prettier": "^3.0.0" }, "overrides": { - "lodash.template": "^4.18.0" + "lodash.template": "^4.18.0", + "ip-address": ">=10.1.1" } } From b9b9b14479e8ec47e5d03457db71f971e7ab9248 Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Fri, 8 May 2026 15:20:57 -0400 Subject: [PATCH 2/3] chore: remove overrides; transitive deps resolve to patched versions naturally Signed-off-by: Jonathan Norris --- package-lock.json | 15 ++++++++------- package.json | 3 --- 2 files changed, 8 insertions(+), 10 deletions(-) diff --git a/package-lock.json b/package-lock.json index dff329a8..2764adf0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -822,10 +822,11 @@ } }, "node_modules/ip-address": { - "version": "10.1.0", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz", - "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==", + "version": "10.2.0", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz", + "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==", "dev": true, + "license": "MIT", "engines": { "node": ">= 12" } @@ -3004,7 +3005,7 @@ "dev": true, "requires": { "concat-with-sourcemaps": "*", - "lodash.template": "^4.18.0", + "lodash.template": "^4.4.0", "through2": "^2.0.0" } }, @@ -3077,9 +3078,9 @@ "dev": true }, "ip-address": { - "version": "10.1.0", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz", - "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==", + "version": "10.2.0", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz", + "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==", "dev": true }, "is-absolute-url": { diff --git a/package.json b/package.json index 7f787a79..3dabc4e0 100644 --- a/package.json +++ b/package.json @@ -6,8 +6,5 @@ "markdown-toc": "^1.2.0", "markdownlint-cli": "^0.48.0", "prettier": "^3.0.0" - }, - "overrides": { - "lodash.template": "^4.18.0" } } From f6bbdd07056fb165d0ae41518a7a2c0b3bcd0e03 Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Sun, 10 May 2026 21:45:10 -0400 Subject: [PATCH 3/3] chore: revert manual edit to requires field in package-lock.json Signed-off-by: Jonathan Norris --- package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package-lock.json b/package-lock.json index 8448a717..2764adf0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4064,7 +4064,7 @@ "integrity": "sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==", "dev": true, "requires": { - "ip-address": ">=10.1.1", + "ip-address": "^10.0.1", "smart-buffer": "^4.2.0" } },