Skip to content

fix: Security updates#35

Merged
anurag-stepsecurity merged 5 commits into
mainfrom
npm-audit-fix
Jun 22, 2026
Merged

fix: Security updates#35
anurag-stepsecurity merged 5 commits into
mainfrom
npm-audit-fix

fix: apply audit fixes

e02046c
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Jun 22, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • Script Injection Check - Checks for script injection vulnerabilities in the PR
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
  • PyPI Compromised Packages Check - Checks for compromised PyPI package versions in the PR
  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers
  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • PyPI Package Cooldown Check - Fails if any PyPI package version in the PR was released within the configured cooldown period
  • Maven Compromised Packages Check - Checks for compromised Maven package versions in the PR
  • Maven Package Cooldown Check - Fails if any Maven package version in the PR was released within the configured cooldown period

Details

✅ Maven Package Cooldown Check

No Maven package upgrades to recent releases found in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Maven Compromised Packages Check

No compromised Maven package versions found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
electron-to-chromium 1.4.809 1.5.376 package-lock.json 2026-06-19T02:02:43Z
node-releases 2.0.14 2.0.48 package-lock.json 2026-06-18T04:36:52Z
baseline-browser-mapping 2.10.38 package-lock.json 2026-06-17T16:56:25Z
form-data 4.0.5 4.0.6 package-lock.json 2026-06-12T17:37:53Z
caniuse-lite 1.0.30001636 1.0.30001799 package-lock.json 2026-06-11T09:52:12Z
js-yaml 4.1.1 4.2.0 package-lock.json 2026-05-31T22:17:13Z
hasown 2.0.2 2.0.4 package-lock.json 2026-05-28T18:11:39Z
@babel/helper-module-transforms 7.24.7 7.29.7 package-lock.json 2026-05-25T11:16:43Z
@babel/helper-module-imports 7.24.7 7.29.7 package-lock.json 2026-05-25T11:16:37Z
@babel/traverse 7.24.7 7.29.7 package-lock.json 2026-05-25T11:16:34Z
@babel/helpers 7.27.6 7.29.7 package-lock.json 2026-05-25T11:16:28Z
@babel/template 7.27.2 7.29.7 package-lock.json 2026-05-25T11:16:25Z
@babel/generator 7.24.7 7.29.7 package-lock.json 2026-05-25T11:16:23Z
@babel/parser 7.28.0 7.29.7 package-lock.json 2026-05-25T11:16:19Z
@babel/types 7.28.1 7.29.7 package-lock.json 2026-05-25T11:16:16Z
@babel/helper-compilation-targets 7.24.7 7.29.7 package-lock.json 2026-05-25T11:15:38Z
@babel/code-frame 7.27.1 7.29.7 package-lock.json 2026-05-25T11:15:38Z
@babel/helper-validator-option 7.24.7 7.29.7 package-lock.json 2026-05-25T11:15:32Z
@babel/helper-validator-identifier 7.27.1 7.29.7 package-lock.json 2026-05-25T11:15:31Z
@babel/helper-globals 7.29.7 package-lock.json 2026-05-25T11:15:30Z
@babel/helper-string-parser 7.27.1 7.29.7 package-lock.json 2026-05-25T11:15:30Z
@babel/compat-data 7.24.7 7.29.7 package-lock.json 2026-05-25T11:15:28Z
ts-jest 29.1.5 29.4.11 package-lock.json 2026-05-21T13:49:09Z
browserslist 4.23.1 4.28.2 package-lock.json 2026-03-31T10:24:52Z
handlebars 4.7.9 package-lock.json 2026-03-26T20:46:39Z
update-browserslist-db 1.0.16 1.2.3 package-lock.json 2025-12-16T15:17:57Z
@jridgewell/trace-mapping 0.3.25 0.3.31 package-lock.json 2025-09-10T20:12:49Z
@jridgewell/sourcemap-codec 1.4.15 1.5.5 package-lock.json 2025-08-12T06:43:59Z
@jridgewell/remapping 2.3.5 package-lock.json 2025-08-12T06:43:35Z
@jridgewell/gen-mapping 0.3.5 0.3.13 package-lock.json 2025-08-12T06:43:21Z
jsesc 2.5.2 3.1.0 package-lock.json 2024-12-11T08:24:34Z
escalade 3.1.2 3.2.0 package-lock.json 2024-08-29T22:59:36Z
uglify-js 3.19.3 package-lock.json 2024-08-29T13:49:01Z
@jridgewell/resolve-uri 3.1.2 3.1.2 package-lock.json 2024-02-14T19:32:38Z
minimist 1.2.8 package-lock.json 2023-02-09T20:59:49Z
neo-async 2.6.2 package-lock.json 2020-07-09T18:23:53Z
wordwrap 1.0.0 package-lock.json 2015-05-07T17:07:25Z
⏲️ History

Previous invocation results of same check:

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Maven Package Cooldown Check

No Maven package upgrades to recent releases found in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Maven Compromised Packages Check

No compromised Maven package versions found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
electron-to-chromium 1.4.809 1.5.376 package-lock.json 2026-06-19T02:02:43Z
node-releases 2.0.14 2.0.48 package-lock.json 2026-06-18T04:36:52Z
baseline-browser-mapping 2.10.38 package-lock.json 2026-06-17T16:56:25Z
form-data 4.0.5 4.0.6 package-lock.json 2026-06-12T17:37:53Z
caniuse-lite 1.0.30001636 1.0.30001799 package-lock.json 2026-06-11T09:52:12Z
js-yaml 4.1.1 4.2.0 package-lock.json 2026-05-31T22:17:13Z
hasown 2.0.2 2.0.4 package-lock.json 2026-05-28T18:11:39Z
@babel/helper-module-transforms 7.24.7 7.29.7 package-lock.json 2026-05-25T11:16:43Z
@babel/helper-module-imports 7.24.7 7.29.7 package-lock.json 2026-05-25T11:16:37Z
@babel/traverse 7.24.7 7.29.7 package-lock.json 2026-05-25T11:16:34Z
@babel/helpers 7.27.6 7.29.7 package-lock.json 2026-05-25T11:16:28Z
@babel/template 7.27.2 7.29.7 package-lock.json 2026-05-25T11:16:25Z
@babel/generator 7.24.7 7.29.7 package-lock.json 2026-05-25T11:16:23Z
@babel/parser 7.28.0 7.29.7 package-lock.json 2026-05-25T11:16:19Z
@babel/types 7.28.1 7.29.7 package-lock.json 2026-05-25T11:16:16Z
@babel/code-frame 7.27.1 7.29.7 package-lock.json 2026-05-25T11:15:38Z
@babel/helper-compilation-targets 7.24.7 7.29.7 package-lock.json 2026-05-25T11:15:38Z
@babel/helper-validator-option 7.24.7 7.29.7 package-lock.json 2026-05-25T11:15:32Z
@babel/helper-validator-identifier 7.27.1 7.29.7 package-lock.json 2026-05-25T11:15:31Z
@babel/helper-globals 7.29.7 package-lock.json 2026-05-25T11:15:30Z
@babel/helper-string-parser 7.27.1 7.29.7 package-lock.json 2026-05-25T11:15:30Z
@babel/compat-data 7.24.7 7.29.7 package-lock.json 2026-05-25T11:15:28Z
ts-jest 29.1.5 29.4.11 package-lock.json 2026-05-21T13:49:09Z
browserslist 4.23.1 4.28.2 package-lock.json 2026-03-31T10:24:52Z
handlebars 4.7.9 package-lock.json 2026-03-26T20:46:39Z
update-browserslist-db 1.0.16 1.2.3 package-lock.json 2025-12-16T15:17:57Z
@jridgewell/trace-mapping 0.3.25 0.3.31 package-lock.json 2025-09-10T20:12:49Z
@jridgewell/sourcemap-codec 1.4.15 1.5.5 package-lock.json 2025-08-12T06:43:59Z
@jridgewell/remapping 2.3.5 package-lock.json 2025-08-12T06:43:35Z
@jridgewell/gen-mapping 0.3.5 0.3.13 package-lock.json 2025-08-12T06:43:21Z
jsesc 2.5.2 3.1.0 package-lock.json 2024-12-11T08:24:34Z
escalade 3.1.2 3.2.0 package-lock.json 2024-08-29T22:59:36Z
uglify-js 3.19.3 package-lock.json 2024-08-29T13:49:01Z
@jridgewell/resolve-uri 3.1.2 3.1.2 package-lock.json 2024-02-14T19:32:38Z
minimist 1.2.8 package-lock.json 2023-02-09T20:59:49Z
neo-async 2.6.2 package-lock.json 2020-07-09T18:23:53Z
wordwrap 1.0.0 package-lock.json 2015-05-07T17:07:25Z