continue icon indicating copy to clipboard operation
continue copied to clipboard

[Snyk] Security upgrade puppeteer from 22.15.0 to 24.15.0

Open sestinj opened this issue 2 months ago • 2 comments

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • core/package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
medium severity Prototype Pollution
SNYK-JS-JSYAML-13961110
  631  

[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report 📜 Customise PR templates 🛠 Adjust project settings 📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution


Summary by cubic

Upgrade puppeteer to ^24.15.0 to fix a Prototype Pollution vulnerability (SNYK-JS-JSYAML-13961110) and keep browser tooling secure.

  • Dependencies

    • core/package.json: puppeteer ^22.x -> ^24.15.0
  • Migration

    • Verify Node version meets Puppeteer 24 requirements and run browser/E2E tests.
    • Check for any deprecated launch options or API changes in your usage.

Written for commit e3bb4438d687ad3cd8c386e2829e3697e5364e2b. Summary will update automatically on new commits.

sestinj avatar Nov 14 '25 08:11 sestinj

⚠️ PR Title Format

Your PR title doesn't follow the conventional commit format, but this won't block your PR from being merged. We recommend using this format for better project organization.

Expected Format:

<type>[optional scope]: <description>

Examples:

  • feat: add changelog generation support
  • fix: resolve login redirect issue
  • docs: update README with new instructions
  • chore: update dependencies

Valid Types:

feat, fix, docs, style, refactor, perf, test, build, ci, chore, revert

This helps with:

  • 📝 Automatic changelog generation
  • 🚀 Automated semantic versioning
  • 📊 Better project history tracking

This is a non-blocking warning - your PR can still be merged without fixing this.

github-actions[bot] avatar Nov 14 '25 08:11 github-actions[bot]

✅ Review Complete

Code Review Summary

⚠️ Continue configuration error. Please verify that the assistant exists in Continue Hub.


github-actions[bot] avatar Nov 14 '25 08:11 github-actions[bot]

https://github.com/continuedev/continue/pull/8776

RomneyDa avatar Nov 18 '25 18:11 RomneyDa