Skip to content

chore(deps): bump dependencies#419

Merged
yhabib merged 1 commit into
mainfrom
fix/deps
Jul 13, 2026
Merged

chore(deps): bump dependencies#419
yhabib merged 1 commit into
mainfrom
fix/deps

Conversation

@yhabib

@yhabib yhabib commented Jul 13, 2026

Copy link
Copy Markdown
Collaborator

Motivation

# npm audit report

js-yaml  <3.15.0
Severity: moderate
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases - https://github.com/advisories/GHSA-h67p-54hq-rp68
fix available via `npm audit fix`
node_modules/@yarnpkg/parsers/node_modules/js-yaml

1 moderate severity vulnerability

To address all issues, run:
  npm audit fix

Changes

  • Ran npm audit fix

Copilot AI review requested due to automatic review settings July 13, 2026 13:01
@yhabib yhabib requested a review from a team as a code owner July 13, 2026 13:01

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@zeropath-ai

zeropath-ai Bot commented Jul 13, 2026

Copy link
Copy Markdown

No security or compliance issues detected. Reviewed everything up to 0f650c1.

Security Overview
Detected Code Changes
Change Type Relevant files
Bug Fix ► package-lock.json
    Update js-yaml from 3.14.2 to 3.15.0 in node_modules/@yarnpkg/parsers/node_modules/js-yaml

@github-actions

Copy link
Copy Markdown

📊 Build Bundle Stats

The latest build generated the following assets:

dist/index.html                                           2.39 kB │ gzip:   0.84 kB
dist/assets/index-ZZaLvKLe.css                          131.38 kB │ gzip:  21.38 kB
dist/assets/externalServices-CK4eoRia.js                  0.19 kB │ gzip:   0.16 kB
dist/assets/address-C-4H442a.js                           0.20 kB │ gzip:   0.15 kB
dist/assets/Skeleton-Bgoxabxt.js                          0.46 kB │ gzip:   0.34 kB
dist/assets/useTvlValue-1yCHT5Tc.js                       0.57 kB │ gzip:   0.39 kB
dist/assets/numbers-B9oiH86s.js                           0.58 kB │ gzip:   0.36 kB
dist/assets/service-DxqNxKjV.js                           0.59 kB │ gzip:   0.38 kB
dist/assets/Spinner-CZi6lS8l.js                           0.59 kB │ gzip:   0.41 kB
dist/assets/PageHeader-Czh9Jiub.js                        0.77 kB │ gzip:   0.45 kB
dist/assets/CertifiedBadge-C-pdx5aQ.js                    0.81 kB │ gzip:   0.48 kB
dist/assets/Separator-dFULeHAY.js                         0.83 kB │ gzip:   0.49 kB
dist/assets/useIcpIndex-BMwPyLlv.js                       1.07 kB │ gzip:   0.63 kB
dist/assets/rolldown-runtime-CMxvf4Kt.js                  1.21 kB │ gzip:   0.67 kB
dist/assets/addressBook-_uX5bf_n.js                       1.66 kB │ gzip:   0.99 kB
dist/assets/useCommandPaletteSettings-Bpv5rVbB.js         1.73 kB │ gzip:   0.86 kB
dist/assets/useGovernanceAppCanister-CoqvN6mv.js          1.91 kB │ gzip:   0.96 kB
dist/assets/AnimatedNumber-DEESajkh.js                    1.96 kB │ gzip:   1.12 kB
dist/assets/useIcpIndexTransactionsPolling-B3uj6mQN.js    2.03 kB │ gzip:   1.09 kB
dist/assets/EmptyActionState-CQGpSIEp.js                  2.52 kB │ gzip:   1.12 kB
dist/assets/ToggleGroup-x6fCHMXt.js                       3.09 kB │ gzip:   1.40 kB
dist/assets/tickers-B3hd-_mC.js                           3.10 kB │ gzip:   1.48 kB
dist/assets/Switch-DrR8z4ce.js                            3.22 kB │ gzip:   1.44 kB
dist/assets/SensitiveValue-BpKoBEtA.js                    7.33 kB │ gzip:   3.28 kB
dist/assets/routes-DVYsVM9l.js                            7.46 kB │ gzip:   2.46 kB
dist/assets/badge-qYXDkCES.js                             8.12 kB │ gzip:   2.36 kB
dist/assets/spamFilter-DQ1kWweR.js                        8.54 kB │ gzip:   3.80 kB
dist/assets/TopicFollowingAccordion-DJpMz872.js           9.34 kB │ gzip:   3.81 kB
dist/assets/MutationDialog-U3abXoMQ.js                    9.53 kB │ gzip:   3.42 kB
dist/assets/_id-C8jIAdHY.js                              14.33 kB │ gzip:   4.30 kB
dist/assets/_auth-B-Y-o_OG.js                            15.56 kB │ gzip:   5.73 kB
dist/assets/accounts-irsucWzA.js                         23.72 kB │ gzip:   8.19 kB
dist/assets/GetTokens-DPEXcw-y.js                        39.29 kB │ gzip:  14.02 kB
dist/assets/settings-CkH6rzXf.js                         42.47 kB │ gzip:  12.20 kB
dist/assets/dashboard-D3tZBGqn.js                        51.05 kB │ gzip:  15.11 kB
dist/assets/button-Cd45O-27.js                           53.56 kB │ gzip:  18.71 kB
dist/assets/neurons-CzFfFNu9.js                          66.03 kB │ gzip:  19.84 kB
dist/assets/voting-BZ1FQVmv.js                           69.22 kB │ gzip:  21.15 kB
dist/assets/neuronDetail-BQOxAzUq.js                     70.25 kB │ gzip:  21.01 kB
dist/assets/vendor-md-DL0JfF_R.js                        73.29 kB │ gzip:  19.98 kB
dist/assets/index-DDl40fSP.js                            79.35 kB │ gzip:  24.75 kB
dist/assets/vendor-tanstack-BZKtD_S5.js                 161.15 kB │ gzip:  49.35 kB
dist/assets/vendor-core-react-qLCIanUQ.js               189.81 kB │ gzip:  59.76 kB
dist/assets/vendor-recharts-Ck18_gYq.js                 223.45 kB │ gzip:  64.01 kB
dist/assets/vendor-icp-DP4ARddz.js                      411.37 kB │ gzip: 104.08 kB
dist/assets/vendor-libs-B2aYRUFu.js                     553.60 kB │ gzip: 180.31 kB

@yhabib yhabib enabled auto-merge July 13, 2026 13:13
@yhabib yhabib added this pull request to the merge queue Jul 13, 2026
Merged via the queue into main with commit 0470be5 Jul 13, 2026
11 checks passed
@yhabib yhabib deleted the fix/deps branch July 13, 2026 15:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants