Skip to content

fix(security): resolve weekly dependency drift and pin compatible parsers - #128

Open
Ranjeet2063 wants to merge 1 commit into
StellarTips:mainfrom
Ranjeet2063:fix/security-dependency-drift-127
Open

Ranjeet2063 wants to merge 1 commit into
StellarTips:mainfrom
Ranjeet2063:fix/security-dependency-drift-127

Conversation

@Ranjeet2063

Copy link
Copy Markdown

Summary of Changes

Addresses the weekly dependency drift reported by the security audit workflow:

  • Fixed high/critical vulnerabilities across dependency tree via audited package updates.
  • Pinned compatible parser versions (sanitize-html 2.17.5, htmlparser2 10.1.0) in package overrides to eliminate ESM import syntax errors in test runners.
  • Verified full test suite passes with zero regressions.

Verification Proof

  • npm run build: Exit Code 0 (clean NestJS build).
  • npm test: 12/12 test suites passed, 115/115 unit tests passed (100% green).

Closes #127

Copilot AI balanced review requested due to automatic review settings October 31, 2026 07:33

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Weekly security drift — high/critical vulns detected

2 participants