You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@jena.apache.org by Andy Seaborne <an...@apache.org> on 2026/03/02 11:40:17 UTC

Request for help - Javascript dependency updates

There are two dependabot PRs that are bumping major versions. They 
introduce breaking changes.

https://github.com/apache/jena/pull/3747 - @cypress/code-coverage
https://github.com/apache/jena/pull/3748 - @eslint/js

Please would someone take a look and see what needs to be done.

It would be good to keep to the latest versions - Fuseki javascript is 
the projects biggest source of security alerts. The JS ecosystem has 
many dependencies, and it is causing security alerts because of locked 
version ranges of transitive dependencies.

     Andy