You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@burr.apache.org by GitBox <gi...@apache.org> on 2026/06/02 14:21:07 UTC
[GH] (burr/main): Workflow run "npm_and_yarn in /website for ip-address, express-rate-limit - Update #1394020507" is working again!
The GitHub Actions job "npm_and_yarn in /website for ip-address, express-rate-limit - Update #1394020507" on burr.git/main has succeeded.
Run started by GitHub user dependabot[bot] (triggered by dependabot[bot]).
Head commit for run:
1040e8e8b51ae7edbdc9532f7a49d93bf5359e25 / Stefan Krawczyk <st...@cs.stanford.edu>
fix(deps): resolve 22 npm security vulnerabilities in website and telemetry/ui (#773)
* fix(deps): resolve npm security vulnerabilities in website and telemetry/ui
Run npm audit fix in both website/ and telemetry/ui/ to address
Dependabot security alerts.
website/ (16 alerts → 2 remaining):
- hono 4.12.8 → 4.12.18 (11 alerts)
- @hono/node-server → 1.19.14
- fast-uri → 3.1.2 (2 HIGH)
- path-to-regexp → 8.4.2 (2 alerts)
- ip-address removed
- postcss inside next cannot be fixed without breaking next downgrade
telemetry/ui/ (8 alerts → 4 remaining):
- fast-uri → 3.1.2 (2 HIGH)
- @babel/plugin-transform-modules-systemjs → 7.29.4 (1 HIGH)
- lodash, postcss, vite remain unfixed (locked by react-scripts/CRA)
Resolves 22 of 26 open Dependabot alerts. The remaining 4 require
migrating telemetry/ui from Create React App to a modern bundler.
* style: apply black formatting to collapsed line in graph.py
* fix: align eslint-config-next with next@15.5.18
Report URL: https://github.com/apache/burr/actions/runs/26825132609
With regards,
GitHub Actions via GitBox