Skip to content

plugins: Bump deps with npm audit fix - #1364

Open
skoeva wants to merge 15 commits into
mainfrom
bump-deps
Open

plugins: Bump deps with npm audit fix#1364
skoeva wants to merge 15 commits into
mainfrom
bump-deps

Conversation

@skoeva

@skoeva skoeva commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

No description provided.

@skoeva skoeva added ai-assistant app-catalog app-catalog (helm charts) plugin related issues labels Oct 16, 2026
@skoeva
skoeva requested a review from vyncent-t as a code owner October 16, 2026 16:55
@skoeva
skoeva requested a review from sniok as a code owner October 16, 2026 16:55
@skoeva skoeva added dependencies Pull requests that update a dependency file flux flux plugin related issues karpenter knative labels Oct 16, 2026
@skoeva
skoeva requested a review from joaquimrocha as a code owner October 16, 2026 16:55
@skoeva skoeva added kubeflow minikube opencost plugin-catalog plugin-catalog plugin related issues prometheus prometheus plugin related issues radius labels Oct 16, 2026
@skoeva skoeva self-assigned this Oct 16, 2026
@skoeva
skoeva requested a balanced review from Copilot October 16, 2026 16:58
Copilot AI reviewed Oct 16, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Broad dependency updates, including transitive major upgrades, need CI validation and human confirmation of compatibility.

Copilot wasn't able to review any files in this pull request.

Files not reviewed (15)
  • ai-assistant/package-lock.json: Generated file
  • app-catalog/package-lock.json: Generated file
  • backstage/package-lock.json: Generated file
  • cert-manager/package-lock.json: Generated file
  • cluster-api/package-lock.json: Generated file
  • flux/package-lock.json: Generated file
  • karpenter/package-lock.json: Generated file
  • knative/package-lock.json: Generated file
  • kubeflow/package-lock.json: Generated file
  • minikube/package-lock.json: Generated file
  • opencost/package-lock.json: Generated file
  • plugin-catalog/package-lock.json: Generated file
  • prometheus/package-lock.json: Generated file
  • radius/package-lock.json: Generated file
  • tools/releaser/package-lock.json: Generated file

skoeva added 5 commits October 16, 2026 13:05
@skoeva
releaser: Bump deps with npm audit fix
08caa79 
Pick up patched dependencies, including brace-expansion, diff,
form-data, hasown, js-yaml, nanoid, postcss, source-map-js, tinyspy and
vitest. This reduces npm audit findings from 12 to 5 without changing
package.json.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
kubeflow: Bump deps with npm audit fix
e194fa6 
Pick up patched dependencies, including brace-expansion, pbkdf2,
source-map-js, ts-loader, undici and vite-plugin-static-copy. This
reduces npm audit findings from 43 to 38 without changing package.json.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
minikube: Bump deps with npm audit fix
3ccc985 
Pick up patched dependencies, including brace-expansion, pbkdf2,
postcss-selector-parser, source-map-js, ts-loader, undici and
vite-plugin-static-copy. This reduces npm audit findings from 44 to 38
without changing package.json.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
cert-manager: Bump deps with npm audit fix
0aeceb9 
Pick up patched dependencies, including brace-expansion, pbkdf2,
source-map-js, ts-loader and undici. This reduces npm audit findings
from 43 to 38 without changing package.json.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
cluster-api: Bump deps with npm audit fix
09377b0 
Pick up patched dependencies, including brace-expansion, pbkdf2,
source-map-js, ts-loader and undici. This reduces npm audit findings
from 43 to 38 without changing package.json.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
flux: Bump deps with npm audit fix
968fe35 
Pick up patched dependencies, including brace-expansion, pbkdf2,
source-map-js, ts-loader and undici. This reduces npm audit findings
from 43 to 38 without changing package.json.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
skoeva added 9 commits October 16, 2026 22:08
@skoeva
knative: Bump deps with npm audit fix
fc3e7e8 
Pick up patched dependencies, including @emnapi/*, @napi-rs/*,
@oxc-resolver/*, @tybys/*, brace-expansion, knip, oxc-resolver, pbkdf2,
smol-toml, source-map-js, ts-loader, unbash, undici and
vite-plugin-static-copy. This reduces npm audit findings from 45 to 39
without changing package.json.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
prometheus: Bump deps with npm audit fix
86bd52f 
Pick up patched dependencies, including brace-expansion, pbkdf2,
source-map-js, ts-loader, undici and vite-plugin-static-copy. This
reduces npm audit findings from 43 to 38 without changing package.json.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
radius: Bump deps with npm audit fix
31ee017 
Pick up patched dependencies, including @eslint-community/*,
@typescript-eslint/*, brace-expansion, debug, mktemp, pbkdf2,
quick-temp, rimraf, semver, source-map-js, to-buffer, ts-api-utils,
ts-loader and undici. This reduces npm audit findings from 48 to 38
without changing package.json.

Resolve typescript-eslint to 8.55.0 rather than the latest 8.x: later
releases pull in eslint-visitor-keys 5, which requires Node 22.13 or
newer.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
ai-assistant: Bump deps with npm audit fix
7dd1c5e 
Pick up patched dependencies, including @modelcontextprotocol/*,
@vitest/*, brace-expansion, dompurify, pbkdf2, postcss-selector-parser,
proxy-addr and source-map-js. This reduces npm audit findings from 46 to
39 without changing package.json.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
app-catalog: Bump deps with npm audit fix
2b3f96a 
Pick up patched dependencies, including @eslint-community/*,
@typescript-eslint/*, brace-expansion, fast-uri, mktemp, p-map, pbkdf2,
quick-temp, rimraf, semver, source-map-js, ts-api-utils, ts-loader,
undici and vite-plugin-static-copy. This reduces npm audit findings from
49 to 38 without changing package.json.

Resolve typescript-eslint to 8.55.0 rather than the latest 8.x: later
releases pull in eslint-visitor-keys 5, which requires Node 22.13 or
newer.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
backstage: Bump deps with npm audit fix
1873e0e 
Pick up patched dependencies, including @eslint-community/*,
@typescript-eslint/*, brace-expansion, mktemp, p-map, pbkdf2,
quick-temp, rimraf, source-map-js, ts-api-utils, ts-loader, undici and
vite-plugin-static-copy. This reduces npm audit findings from 48 to 38
without changing package.json.

Resolve typescript-eslint to 8.55.0 rather than the latest 8.x: later
releases pull in eslint-visitor-keys 5, which requires Node 22.13 or
newer.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
karpenter: Bump deps with npm audit fix
677f020 
Pick up patched dependencies, including @eslint-community/*,
@typescript-eslint/*, brace-expansion, mktemp, pbkdf2, quick-temp,
rimraf, source-map-js, ts-api-utils, ts-loader, undici and
vite-plugin-static-copy. This reduces npm audit findings from 48 to 38
without changing package.json.

Resolve typescript-eslint to 8.55.0 rather than the latest 8.x: later
releases pull in eslint-visitor-keys 5, which requires Node 22.13 or
newer.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
opencost: Bump deps with npm audit fix
8488ab7 
Pick up patched dependencies, including @eslint-community/*,
@typescript-eslint/*, brace-expansion, mktemp, p-map, pbkdf2,
quick-temp, rimraf, semver, source-map-js, ts-api-utils, ts-loader,
undici and vite-plugin-static-copy. This reduces npm audit findings from
48 to 38 without changing package.json.

Resolve typescript-eslint to 8.55.0 rather than the latest 8.x: later
releases pull in eslint-visitor-keys 5, which requires Node 22.13 or
newer.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
plugin-catalog: Bump deps with npm audit fix
78c781a 
Pick up patched dependencies, including @eslint-community/*,
@typescript-eslint/*, brace-expansion, mktemp, p-map, pbkdf2,
quick-temp, rimraf, source-map-js, ts-api-utils, ts-loader, undici and
vite-plugin-static-copy. This reduces npm audit findings from 48 to 38
without changing package.json.

Resolve typescript-eslint to 8.55.0 rather than the latest 8.x: later
releases pull in eslint-visitor-keys 5, which requires Node 22.13 or
newer.

Signed-off-by: Evangelos Skopelitis <eskopelitis@microsoft.com>
@skoeva
skoeva requested a balanced review from Copilot October 17, 2026 02:19
Copilot AI reviewed Oct 17, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Compatibility across eleven dependency trees, including transitive major upgrades, still needs successful CI build and test validation.

Copilot wasn't able to review any files in this pull request.

15 files not reviewed
  • ai-assistant/package-lock.json: Generated file
  • app-catalog/package-lock.json: Generated file
  • backstage/package-lock.json: Generated file
  • cert-manager/package-lock.json: Generated file
  • cluster-api/package-lock.json: Generated file
  • flux/package-lock.json: Generated file
  • karpenter/package-lock.json: Generated file
  • knative/package-lock.json: Generated file
  • kubeflow/package-lock.json: Generated file
  • minikube/package-lock.json: Generated file
  • opencost/package-lock.json: Generated file
  • plugin-catalog/package-lock.json: Generated file
  • prometheus/package-lock.json: Generated file
  • radius/package-lock.json: Generated file
  • tools/releaser/package-lock.json: Generated file

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@illume illume Awaiting requested review from illume illume is a code owner
@ashu8912 ashu8912 Awaiting requested review from ashu8912 ashu8912 is a code owner
@yolossn yolossn Awaiting requested review from yolossn yolossn is a code owner
@vyncent-t vyncent-t Awaiting requested review from vyncent-t vyncent-t is a code owner
@sniok sniok Awaiting requested review from sniok sniok is a code owner
@joaquimrocha joaquimrocha Awaiting requested review from joaquimrocha joaquimrocha is a code owner

Assignees

@skoeva skoeva

Labels

ai-assistant app-catalog app-catalog (helm charts) plugin related issues backstage cert-manager cluster-api dependencies Pull requests that update a dependency file flux flux plugin related issues karpenter knative kubeflow minikube opencost plugin-catalog plugin-catalog plugin related issues prometheus prometheus plugin related issues radius

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@skoeva