Skip to content

Upgrade babel, postcss, lodash; add uuid override#126

Merged
mraible merged 1 commit into
mainfrom
upgrade-security-deps
May 19, 2026
Merged

Upgrade babel, postcss, lodash; add uuid override#126
mraible merged 1 commit into
mainfrom
upgrade-security-deps

Conversation

@mraible
Copy link
Copy Markdown
Contributor

@mraible mraible commented May 18, 2026

Fixes CVE-2026-44728 (@babel/plugin-transform-modules-systemjs), CVE-2026-41305 (postcss), CVE-2026-4800 and CVE-2026-2950 (lodash), and CVE-2026-41907 (uuid).

All tests pass (23/23). Build verified.

… lodash→4.18.1, add uuid override

Fixes CVE-2026-44728 (@babel/plugin-transform-modules-systemjs),
CVE-2026-41305 (postcss), CVE-2026-4800 and CVE-2026-2950 (lodash),
and CVE-2026-41907 (uuid).
@mraible mraible requested a review from a team May 18, 2026 14:13
@mraible mraible enabled auto-merge (squash) May 18, 2026 15:17
@mraible mraible merged commit 1e7a04b into main May 19, 2026
18 checks passed
@mraible mraible deleted the upgrade-security-deps branch May 19, 2026 12:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants