Skip to content

fix: move @webex/event-dictionary-ts to dev dependency and upgrade#4710

Merged
rarajes2 merged 2 commits intowebex:nextfrom
rarajes2:webex-dependency-vulnerability
Feb 19, 2026
Merged

fix: move @webex/event-dictionary-ts to dev dependency and upgrade#4710
rarajes2 merged 2 commits intowebex:nextfrom
rarajes2:webex-dependency-vulnerability

Conversation

@rarajes2
Copy link
Copy Markdown
Contributor

@rarajes2 rarajes2 commented Feb 13, 2026

COMPLETES #< SPARK-724632 >

This pull request addresses

After running npm audit on the webex packages we found few packages with vulnerability. More info can be found in the JIRA ticket. As part of this PR the dependency causing the issue was being used as dependency but it was supposed to use as a dev dependency.

by making the following changes

Have moved the package from run time dependency to dev dependency and upgraded to latest version.

Have updated/upgraded the dependency in the following packages

  • @webex/internal-plugin-metrics
  • @webex/plugin-meetings

Change Type

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation update
  • Tooling change
  • Internal code refactor

The following scenarios were tested

< ENUMERATE TESTS PERFORMED, WHETHER MANUAL OR AUTOMATED >

The GAI Coding Policy And Copyright Annotation Best Practices

  • GAI was not used (or, no additional notation is required)
  • Code was generated entirely by GAI
  • GAI was used to create a draft that was subsequently customized or modified
  • Coder created a draft manually that was non-substantively modified by GAI (e.g., refactoring was performed by GAI on manually written code)
  • Tool used for AI assistance (GitHub Copilot / Other - specify)
    • Github Copilot
    • Other - Please Specify
  • This PR is related to
    • Feature
    • Defect fix
    • Tech Debt
    • Automation

I certified that

  • I have read and followed contributing guidelines
  • I discussed changes with code owners prior to submitting this pull request
  • I have not skipped any automated checks
  • All existing and new tests passed
  • I have updated the documentation accordingly

Make sure to have followed the contributing guidelines before submitting.

@rarajes2 rarajes2 requested review from a team as code owners February 13, 2026 06:13
@rarajes2 rarajes2 added the validated If the pull request is validated for automation. label Feb 13, 2026
Copy link
Copy Markdown
Contributor

@mkesavan13 mkesavan13 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. However the PR title shouldn't have *

Let's change that to simply fix: move @webex....

@rarajes2 rarajes2 merged commit 3a0a675 into webex:next Feb 19, 2026
11 checks passed
@rarajes2 rarajes2 changed the title fix(*): move @webex/event-dictionary-ts to dev dependency and upgrade fix: move @webex/event-dictionary-ts to dev dependency and upgrade Feb 19, 2026
@github-actions
Copy link
Copy Markdown

🎉 Your changes are now available!

Released in: v3.11.0-next.32
Packages updated: @webex/internal-plugin-metrics, @webex/plugin-meetings

📖 View full changelog →

Thank you for your contribution!


🤖 This is an automated message. For questions, please refer to the documentation.

vamshigovardhana pushed a commit to vamshigovardhana/webex-js-sdk that referenced this pull request Mar 26, 2026
vamshigovardhana pushed a commit to vamshigovardhana/webex-js-sdk that referenced this pull request Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

validated If the pull request is validated for automation.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants