Skip to content

Upgrade babel, postcss, lodash; add uuid override#130

Merged
mraible merged 1 commit into
mainfrom
upgrade-security-deps
May 19, 2026
Merged

Upgrade babel, postcss, lodash; add uuid override#130
mraible merged 1 commit into
mainfrom
upgrade-security-deps

Conversation

@mraible
Copy link
Copy Markdown
Contributor

@mraible mraible commented May 18, 2026

Fixes CVE-2026-44728 (@babel/plugin-transform-modules-systemjs), CVE-2026-41305 (postcss), CVE-2026-4800 and CVE-2026-2950 (lodash), and CVE-2026-41907 (uuid).

All tests pass (13/13). Build verified.

… lodash→4.18.1, add uuid override

Fixes CVE-2026-44728 (@babel/plugin-transform-modules-systemjs),
CVE-2026-41305 (postcss), CVE-2026-4800 and CVE-2026-2950 (lodash),
and CVE-2026-41907 (uuid).
@mraible mraible requested a review from a team May 18, 2026 14:12
@mraible mraible enabled auto-merge (squash) May 18, 2026 15:17
@mraible mraible merged commit f3509d2 into main May 19, 2026
10 checks passed
@mraible mraible deleted the upgrade-security-deps branch May 19, 2026 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants