Skip to content

fix(deps): upgrade packages and add resolutions for picomatch and brce-expansion#5638

Merged
ilayda-cp merged 2 commits intomainfrom
WD-35571-security-fixes
Mar 31, 2026
Merged

fix(deps): upgrade packages and add resolutions for picomatch and brce-expansion#5638
ilayda-cp merged 2 commits intomainfrom
WD-35571-security-fixes

Conversation

@ilayda-cp
Copy link
Copy Markdown
Contributor

@ilayda-cp ilayda-cp commented Mar 31, 2026

Done

Upgraded @percy/cli, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, @vitest/ui, and stylelint to their latest versions.

Added picomatch >=2.3.2 and brace-expansion >=2.0.2 resolutions to fix transitive vulnerabilities that couldn't be resolved by upgrading direct dependencies. Reduced audit findings from 48 to 1 (remaining is a low-severity test-only dep in @canonical/store-components).

How to QA

Testing

  • This PR has tests
  • No testing required (explain why):

Security

  • Security considerations for review (list them):
    • Examples:
    • Access control: users can only access their own data
    • Input: user input is validated and sanitised
    • Sensitive data: secret or private data is not exposed in any way
    • ...
  • This PR has no security considerations (explain why):

Issue / Card

Fixes https://warthogs.atlassian.net/browse/WD-35571

Screenshots

UX Approval

  • This PR does not require UX approval
  • This PR does require UX approval (add context):

@webteam-app
Copy link
Copy Markdown

Copy link
Copy Markdown
Contributor

@steverydz steverydz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@ilayda-cp ilayda-cp merged commit 8d8ebfc into main Mar 31, 2026
14 checks passed
@ilayda-cp ilayda-cp deleted the WD-35571-security-fixes branch March 31, 2026 08:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants