Daily Autohealing Report — 2026-03-16 (UTC)

[fro-bot]

Daily Autohealing Report — 2026-03-16 (UTC)

Errored PRs

None. All open PRs have passing CI checks:

• #2997 — chore(dev): update dependency @types/node to v24.12.0 — All checks passing
• #2993 — fix(deps): add security overrides for undici and flatted — All checks passing
• #2991 — chore(deps): update bfra-me/.github to v4.8.0 — All checks passing
• #2988 — chore(deps): update pnpm to v10.32.1 — All checks passing

Security

Open Dependabot Alerts (7 total)

Alert	Package	Severity	Summary
#27	undici	HIGH	Unbounded Memory Consumption in WebSocket permessage-deflate Decompression
#26	undici	HIGH	Unhandled Exception in WebSocket Client
#25	undici	MEDIUM	CRLF Injection via upgrade option
#24	flatted	HIGH	Unbounded recursion DoS in parse() revive phase
#23	undici	MEDIUM	Unbounded Memory Consumption in DeduplicationHandler
#22	undici	HIGH	Malicious WebSocket 64-bit length overflows parser
#21	undici	MEDIUM	HTTP Request/Response Smuggling

Remediation PR: #2993 adds pnpm overrides for undici >=7.24.0 and flatted >=3.4.0. All CI checks pass. PR is blocked pending review (requires 1 approving review per branch protection).

Health & Maintenance

• Workflow Actions: All actions are properly SHA-pinned ✅
• Dependabot Alerts: 7 open alerts addressed by existing PR #2993
• Dependency Updates: 3 renovate PRs pending review:
  • #2997 — @types/node v24.12.0
  • #2991 — bfra-me/.github v4.8.0
  • #2988 — pnpm v10.32.1
• Minor updates available: eslint, eslint-config-prettier, eslint-plugin-prettier, @bfra.me/* packages (handled by Renovate)

Developer Experience

All validation commands pass:

• pnpm bootstrap ✅
• pnpm check-types ✅
• pnpm lint ✅
• pnpm check-format ✅

Needs Human Attention

1. Security PR awaiting review: #2993 resolves 7 security vulnerabilities (2 HIGH undici, 1 HIGH flatted, 4 MEDIUM undici). Requires 1 approving review to merge.
2. Dependency updates pending: 3 renovate PRs require review before merge.