Skip to content

Chore: resolve vulnerabilities in NPM dependencies#86

Merged
imrraaj merged 1 commit intodevelopfrom
fix/dependabot-issues
Mar 19, 2026
Merged

Chore: resolve vulnerabilities in NPM dependencies#86
imrraaj merged 1 commit intodevelopfrom
fix/dependabot-issues

Conversation

@imrraaj
Copy link
Contributor

@imrraaj imrraaj commented Mar 19, 2026

What

This PR fixes security vulnerabilities reported by Dependabot and npm audit by running npm audit fix.

Why

Fixes dependabot alerts

How

Testing Instructions

Screenshots

Additional Info

Checklist

  • I have read the Contribution Guidelines.
  • I have read the Development Guidelines.
  • My code is tested to the best of my abilities.
  • My code passes all lints (ESLint etc.).
  • My code has detailed inline documentation.
  • I have updated the project documentation as needed.

@imrraaj imrraaj self-assigned this Mar 19, 2026
Copilot AI review requested due to automatic review settings March 19, 2026 06:35
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the plugin version and lockfile to address Dependabot / npm audit-reported vulnerabilities in the project’s NPM dependency tree.

Changes:

  • Bump OneAccess plugin version from 1.1.2 to 1.1.3 (header + constant + WordPress readme.txt stable tag).
  • Update package-lock.json to newer dependency versions (e.g., fast-xml-parser, fast-xml-builder, flatted) and add path-expression-matcher as required by updated packages.
  • Add a 1.1.3 entry to CHANGELOG.md documenting the dependency security update.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File Description
readme.txt Updates WordPress “Stable tag” to 1.1.3 to match the release.
oneaccess.php Bumps plugin header version and ONEACCESS_VERSION constant to 1.1.3.
CHANGELOG.md Adds 1.1.3 changelog entry for the dependency vulnerability resolution.
package-lock.json Applies dependency updates from npm audit fix (including new transitive dependency metadata).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

@imrraaj imrraaj requested a review from up1512001 March 19, 2026 09:10
@imrraaj imrraaj merged commit 4e54584 into develop Mar 19, 2026
13 checks passed
@imrraaj imrraaj deleted the fix/dependabot-issues branch March 19, 2026 12:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants