Skip to content

build(deps): Resolve Dependabot security alerts - #16

Merged
MathurAditya724 merged 1 commit into
mainfrom
codex/fix-dependabot-alerts
Sep 6, 2026
Merged

MathurAditya724 merged 1 commit into
mainfrom
codex/fix-dependabot-alerts

Conversation

@MathurAditya724

Copy link
Copy Markdown
Member

Removes the obsolete packages/core importer retained in pnpm-lock.yaml and refreshes the active graph to patched releases. The peer ranges now require safe Effect and Valibot versions; the test and build tool updates bring the vulnerable Vite, PostCSS, Nano ID, Rollup, Picomatch, and esbuild paths to patched versions.

The large lockfile reduction is intentional: it drops the no-longer-present package graph that kept stale vulnerable records visible to Dependabot. Zod and TypeBox remain pinned as development fixtures to the previously supported versions; the published peer ranges are unchanged. pnpm audit reports zero vulnerabilities, the 19-test suite passes, and the package builds.

Regenerate the lockfile without its obsolete importer and update the affected active dependencies.
@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).


New Features ✨

  • Added support for sury and minor modifications by MathurAditya724 in 1bcea2ae
  • Added support for typebox by MathurAditya724 in e572220b
  • Improved support for loadVendor by MathurAditya724 in 7715add0

Bug Fixes 🐛

  • Preserve external $ref URLs instead of converting to local refs by remorses in #11
  • Lift leftover $defs/definitions into components.schemas by MathurAditya724 in #14
  • Resolved issue with nested refs by MathurAditya724 in #9
  • Corrected effect validation's convertion by MathurAditya724 in #7
  • Removed the $schema from valibot OpenAPI Schema by MathurAditya724 in 1dfca397
  • Removed quansync by MathurAditya724 in f1168489

Internal Changes 🔧

  • (deps) Resolve Dependabot security alerts by MathurAditya724 in #16
  • Add craft release system by MathurAditya724 in #15
  • Added default for errorMode in valibot generation by MathurAditya724 in 67138904
  • Minor changes by MathurAditya724 in 27b73ec9
  • Updated lock file by MathurAditya724 in d00936b3
  • Updated depns and test by MathurAditya724 in f20175a2
  • Major improvements by MathurAditya724 in d40c39c4
  • Minor change by MathurAditya724 in 8fe82c33
  • Formatted code by MathurAditya724 in d4513f2c

Other

  • released v0.2.9 by MathurAditya724 in a884a43a
  • released v0.2.8 by MathurAditya724 in 0600db11
  • released v0.2.7 by MathurAditya724 in 60a807fc
  • released v0.2.6 by MathurAditya724 in 692a10be
  • released v0.2.4 by MathurAditya724 in 085ec603
  • released v0.2.3 by MathurAditya724 in 7766e639
  • released v0.2.2 by MathurAditya724 in d35a8c0b
  • released v0.2.1 by MathurAditya724 in 2f4bf29d

🤖 This preview updates automatically when you update the PR.

@pkg-pr-new

pkg-pr-new Bot commented Sep 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@standard-community/standard-openapi@16

commit: 4798caa

@MathurAditya724
MathurAditya724 marked this pull request as ready for review September 6, 2026 06:10
@MathurAditya724
MathurAditya724 merged commit f6e302a into main Sep 6, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant