You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@couchdb.apache.org by "Antonio-Maranhao (via GitHub)" <gi...@apache.org> on 2026/02/20 21:00:35 UTC

[PR] chore: run npm audit to resolve CVEs on runtime deps [couchdb-fauxton]

Antonio-Maranhao opened a new pull request, #1509:
URL: https://github.com/apache/couchdb-fauxton/pull/1509

   ## Overview
   
   This PR is to address CVE-2025-69873 for runtime (i.e. non-dev) dependencies, as previous dependabot PR didn't get the job fully done.
   
   We can't fully address it yet as some dev packages (e.g. eslint) are still pulling affected `ajv` versions.
   
   
   ## Testing recommendations
   
   CI should pass
   
   ## GitHub issue number
   
   n/a
   
   ## Related Pull Requests
   
   n/a
   
   ## Checklist
   
   - [x] Code is written and works correctly;
   - [x] Changes are covered by tests;
   - [ ] Documentation reflects the changes;
   - [ ] Update [rebar.config.script](https://github.com/apache/couchdb/blob/main/rebar.config.script) with the correct tag once a new Fauxton release is made
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] chore: run npm audit to resolve CVEs on runtime deps [couchdb-fauxton]

Posted by "Antonio-Maranhao (via GitHub)" <gi...@apache.org>.
Antonio-Maranhao merged PR #1509:
URL: https://github.com/apache/couchdb-fauxton/pull/1509


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] chore: run npm audit to resolve CVEs on runtime deps [couchdb-fauxton]

Posted by "fryjordan (via GitHub)" <gi...@apache.org>.
fryjordan commented on PR #1509:
URL: https://github.com/apache/couchdb-fauxton/pull/1509#issuecomment-3944555716

   LGTM


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org