Skip to content

chore(deps): force patched tinypool, uuid and postcss-selector-parser - #175

Merged
mnencia merged 1 commit into
mainfrom
dev/dependabot-resolutions
Oct 26, 2026
Merged

mnencia merged 1 commit into
mainfrom
dev/dependabot-resolutions

Conversation

@mnencia

@mnencia mnencia commented Oct 26, 2026

Copy link
Copy Markdown
Member

Docusaurus pins vulnerable ranges of these transitive dependencies, so Dependabot cannot update them. Override them through resolutions. This clears the open Dependabot alerts.

I built the site on main and on this branch and compared the output. HTML and CSS are identical, JS differs only by minifier variable renaming.

@mnencia
mnencia requested a review from a team as a code owner October 26, 2026 10:37
Docusaurus pins vulnerable ranges of these transitive dependencies, so
Dependabot cannot update them. Override them through resolutions.
Output of `yarn build` is unchanged apart from minifier renaming.

Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
@leonardoce
leonardoce force-pushed the dev/dependabot-resolutions branch from baeb2eb to b746df8 Compare October 26, 2026 10:41
@mnencia
mnencia merged commit 35318a5 into main Oct 26, 2026
6 checks passed
@mnencia
mnencia deleted the dev/dependabot-resolutions branch October 26, 2026 10:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants