Skip to content

fix(security): update TypeScript SDK dependencies - #89

Merged
gabrielvfonseca merged 6 commits into
mainfrom
fix/typescript-sdk-dependencies
Oct 21, 2026
Merged

gabrielvfonseca merged 6 commits into
mainfrom
fix/typescript-sdk-dependencies

Conversation

@gabrielvfonseca

Copy link
Copy Markdown
Contributor

Summary

  • update Vite to a patched 6.x release
  • update Vitest to a Node 18-compatible patched 3.x release
  • override vulnerable transitive packages including Tinypool, source-map-js, PostCSS, and esbuild

Verification

  • npm run typecheck
  • npm run build
  • npm test (35 tests)
  • npm audit (0 vulnerabilities)

@coderabbitai

coderabbitai Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 54 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 9cf27411-9571-422b-aa5d-e658323b8ce3
📥 Commits

Reviewing files that changed from the base of the PR and between a5a67cf and 355a2ad.

⛔ Files ignored due to path filters: 1
  • sdks/typescript/package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing: 3
  • sdks/typescript/package.json
  • sdks/typescript/vite.config.ts
  • tools/extension.sh
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@gabrielvfonseca
gabrielvfonseca merged commit e7c076d into main Oct 21, 2026
20 checks passed
@gabrielvfonseca
gabrielvfonseca deleted the fix/typescript-sdk-dependencies branch October 21, 2026 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant