Skip to content

Comments

chore(deps): update node to 24.13.1, @swc/cli to 0.7.10, fix security vulnerabilities#257

Merged
DerekRoberts merged 2 commits intorenovate/nodefrom
copilot/sub-pr-255
Feb 16, 2026
Merged

chore(deps): update node to 24.13.1, @swc/cli to 0.7.10, fix security vulnerabilities#257
DerekRoberts merged 2 commits intorenovate/nodefrom
copilot/sub-pr-255

Conversation

Copy link
Contributor

Copilot AI commented Feb 16, 2026

Description

Updates Node.js patch version and @swc/cli to latest compatible versions, resolves security vulnerabilities in transitive dependencies.

Dependency Changes:

  • Node.js: 24.13.024.13.1 (patch update via volta)
  • @swc/cli: ^0.7.0^0.7.10 (latest 0.7.x)
    • Note: Did not update to 0.8.x due to breaking peer dependency (chokidar ^5.0.0) incompatible with @nestjs/cli@11.0.16
  • Fixed 5 npm audit vulnerabilities: lodash prototype pollution, @isaacs/brace-expansion resource consumption, qs vulnerability

Type of change

  • Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

  • Backend build successful
  • Backend unit tests pass
  • npm audit shows 0 vulnerabilities
  • Code review passed

Checklist

  • I have performed a self-review of my own code
  • My changes generate no new warnings
  • New and existing unit tests pass locally with my changes

Further comments

Renovate bot suggested @swc/cli@0.8.0, but @nestjs/cli peer dependencies only support up to 0.7.x. Version 0.7.10 provides latest patches while maintaining compatibility.


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

… vulnerabilities

Co-authored-by: DerekRoberts <4391600+DerekRoberts@users.noreply.github.com>
Copy link
Contributor Author

Copilot AI commented Feb 16, 2026

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • checkpoint.prisma.io
    • Triggering command: /opt/hostedtoolcache/node/24.13.0/x64/bin/node /opt/hostedtoolcache/node/24.13.0/x64/bin/node /home/REDACTED/work/quickstart-aws-sql/quickstart-aws-sql/backend/node_modules/prisma/build/child {&#34;product&#34;:&#34;prisma&#34;,&#34;version&#34;:&#34;6.19.2&#34;,&#34;cli_install_type&#34;:&#34;local&#34;,&#34;information&#34;:&#34;&#34;,&#34;local_timestamp&#34;:&#34;2026-02-16T18:55:48Z&#34;,&#34;project_hash&#34;:&#34;c949d965&#34;,&#34;cli_path&#34;:&#34;/home/REDACTED/work/quickstart-aws-sql/quickstart-aws-sql/backend/node_modules/.bin/prisma&#34;,&#34;cl -collect-logs (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI changed the title [WIP] Update Node dependencies to latest versions chore(deps): update node to 24.13.1, @swc/cli to 0.7.10, fix security vulnerabilities Feb 16, 2026
Copilot AI requested a review from DerekRoberts February 16, 2026 18:58
@DerekRoberts DerekRoberts marked this pull request as ready for review February 16, 2026 20:05
@DerekRoberts DerekRoberts merged commit 8fc2e34 into renovate/node Feb 16, 2026
21 checks passed
@DerekRoberts DerekRoberts deleted the copilot/sub-pr-255 branch February 16, 2026 20:07
@github-project-automation github-project-automation bot moved this from New to Done in DevOps (NR) Feb 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants