dbt-docs icon indicating copy to clipboard operation
dbt-docs copied to clipboard

Fix npm security vulnerabilities

Open aranke opened this issue 9 months ago • 2 comments

Summary

  • Update prismjs to >=1.30.0 to address DOM Clobbering vulnerability (Medium severity)
  • Add elliptic >=6.6.1 to fix critical security vulnerability
  • Pin braces to >=3.0.3 to fix high severity vulnerability
  • Add explicit version requirements for other dependencies with security issues

Test plan

  • Package installs correctly with npm install
  • Application builds and runs normally
  • Note: This PR fixes direct and some transitive dependencies but doesn't address all vulnerabilities that would require breaking changes

🤖 Generated with Claude Code

aranke avatar Mar 27 '25 13:03 aranke

Thank you for your pull request! We could not find a changelog entry for this change. For details on how to document a change, see the contributing guide.

github-actions[bot] avatar Mar 27 '25 13:03 github-actions[bot]

This PR has been marked as Stale because it has been open with no activity as of late. If you would like the PR to remain open, please comment on the PR or else it will be closed in 7 days.

github-actions[bot] avatar Sep 24 '25 02:09 github-actions[bot]