Skip to content

chore: resolve open dependabot security alerts - #599

Merged
jonathannorris merged 1 commit into
mainfrom
chore/dependabot-alerts-5
Oct 19, 2026
Merged

jonathannorris merged 1 commit into
mainfrom
chore/dependabot-alerts-5

Conversation

@jonathannorris

Copy link
Copy Markdown
Member

Summary

  • Bump the handlebars resolution to ^4.7.10 (lockfile now resolves 4.7.10), fixing alerts 360, 361 and 362.
  • No unresolvable alerts.

@jonathannorris
jonathannorris requested a review from a team as a code owner October 19, 2026 13:46
Copilot AI balanced review requested due to automatic review settings October 19, 2026 13:46

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The targeted resolution and lockfile changes are consistent, with no blocking issues identified.

No open issues 🎉

What changed in this PR

Updates the CLI’s Handlebars dependency resolution to address the reported security alerts.

Changes:

  • Raises the Handlebars override to ^4.7.10.
  • Updates the lockfile to 4.7.10, including its checksum and minimist requirement.
File Description
yarn.lock Locks Handlebars to 4.7.10 with updated dependency metadata.
package.json Raises the targeted Handlebars resolution.

Review effort: Balanced

@jonathannorris
jonathannorris enabled auto-merge (squash) October 19, 2026 13:50
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
devcycle-mcp-server 577029b Oct 19 2026, 01:48 PM

@jonathannorris
jonathannorris merged commit 20b7f03 into main Oct 19, 2026
8 checks passed
@jonathannorris
jonathannorris deleted the chore/dependabot-alerts-5 branch October 19, 2026 18:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants