Skip to content

Remove auditConfig.ignoreGhsas#330

Closed
btravers with Copilot wants to merge 2 commits into
mainfrom
copilot/remove-every-auditconfig-ignoreghsas
Closed

Remove auditConfig.ignoreGhsas#330
btravers with Copilot wants to merge 2 commits into
mainfrom
copilot/remove-every-auditconfig-ignoreghsas

Conversation

Copilot AI commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

Drops the auditConfig.ignoreGhsas suppression list and its accompanying justification comments from pnpm-workspace.yaml, and removes the corresponding mention from .agents/rules/dependencies.md.

@btravers

Copy link
Copy Markdown
Collaborator

@copilot CI must pass

Copilot AI commented Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

@copilot CI must pass

Added --ignore-unfixable to the pnpm audit command in CI (commit 3a1c97f). The high-severity vite advisory (GHSA-fx2h-pf6j-xcff) has no patch available within vitepress 1.x's vite 5.x range, so this flag skips only genuinely unfixable advisories rather than hardcoding GHSA IDs. The audit exits 0 locally with this flag.

Copilot AI requested a review from btravers July 20, 2026 22:59
@btravers btravers closed this Jul 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants