Skip to content

Misc audit - #606

Merged
cigamit merged 2 commits into
mainfrom
misc_audit
Jul 28, 2026
Merged

Misc audit#606
cigamit merged 2 commits into
mainfrom
misc_audit

Conversation

@cigamit

@cigamit cigamit commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

A few misc npm updates to fix some audit issues
Force override of brace expansion

@cigamit
cigamit requested a review from TheWitness July 28, 2026 19:40
@cigamit cigamit self-assigned this Jul 28, 2026
Copilot AI review requested due to automatic review settings July 28, 2026 19:40
@cigamit cigamit added dependencies Pull requests that update a dependency file SECURITY A security related issue like a CVE specifically javascript Pull requests that update javascript code labels Jul 28, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the AWX UI’s Node dependency set to address security/audit findings, including forcing a newer brace-expansion via overrides and regenerating the npm lockfile to pick up patched versions.

Changes:

  • Added an npm overrides entry to force brace-expansion to a patched major version.
  • Updated awx/ui/package-lock.json with newer dependency resolutions (e.g., postcss, ESLint ecosystem, @typescript-eslint/*, balanced-match, brace-expansion).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.

File Description
awx/ui/package.json Adds an override to force brace-expansion to a patched version.
awx/ui/package-lock.json Regenerates lockfile with updated resolved versions to address audit issues.
Files not reviewed (1)
  • awx/ui/package-lock.json: Generated file

Comment thread awx/ui/package.json
Comment thread awx/ui/package-lock.json
@cigamit
cigamit merged commit 16c0025 into main Jul 28, 2026
1 check passed
@cigamit
cigamit deleted the misc_audit branch July 28, 2026 20:15
@cigamit cigamit mentioned this pull request Jul 29, 2026
cigamit added a commit that referenced this pull request Jul 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code SECURITY A security related issue like a CVE specifically

Development

Successfully merging this pull request may close these issues.

3 participants