Skip to content

chore(security): resolve npm audit findings and tighten CI gates#392

Merged
robodev-r2d2 merged 1 commit into
mainfrom
security-audit-ci-gates
Jun 2, 2026
Merged

chore(security): resolve npm audit findings and tighten CI gates#392
robodev-r2d2 merged 1 commit into
mainfrom
security-audit-ci-gates

Conversation

@a-klos
Copy link
Copy Markdown
Member

@a-klos a-klos commented Jun 2, 2026

This pull request updates dependencies and improves CI workflows to enhance reliability and compatibility across the project. The main changes include updating key npm packages, refining change detection logic in GitHub Actions, and improving Helm chart linting for infrastructure.

Dependency updates:

  • Updated multiple dependencies in services/frontend/package.json, including all @nx/* packages to ^22.7.5, axios to ^1.16.1, cypress to ^15.16.0, nx to ^22.7.5, postcss to ^8.5.15, vite to ^7.3.5, vitest and @vitest/ui to ^4.1.8, and others. These updates ensure compatibility with the latest features and security patches. [1] [2] [3]
  • Updated and added several overrides in the root package.json, including new versions for lodash, undici, and the addition of handlebars, lodash-es, npm, and picomatch.

CI workflow improvements:

  • Enhanced the change detection logic in .github/workflows/lint-and-test.yml by splitting the filter step into filter_pr for pull requests and filter_merge for merge groups, improving accuracy in identifying changed areas for targeted CI runs.

Infrastructure linting improvements:

  • Updated the Helm chart linting step in .github/workflows/lint-and-test.yml to automatically find and lint all charts in the infrastructure directory, ensuring all charts and their dependencies are checked during CI.

@robodev-r2d2 robodev-r2d2 added this pull request to the merge queue Jun 2, 2026
Merged via the queue into main with commit 21e339b Jun 2, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants