Skip to content

fix: Security updates#147

Merged
anurag-stepsecurity merged 1 commit into
mainfrom
npm-audit-fix
Jun 16, 2026
Merged

fix: Security updates#147
anurag-stepsecurity merged 1 commit into
mainfrom
npm-audit-fix

fix: apply audit fixes

31968a7
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Jun 15, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • PyPI Compromised Packages Check - Checks for compromised PyPI package versions in the PR
  • PyPI Package Cooldown Check - Fails if any PyPI package version in the PR was released within the configured cooldown period
  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers
  • Script Injection Check - Checks for script injection vulnerabilities in the PR
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR

Details

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
@napi-rs/wasm-runtime 1.1.5 package-lock.json 2026-06-10T04:55:50Z
vite 6.4.2 8.0.16 package-lock.json 2026-06-01T09:50:43Z
tinyglobby 0.2.16 0.2.17 package-lock.json 2026-05-30T19:57:21Z
rolldown 1.0.3 package-lock.json 2026-05-27T11:49:15Z
@rolldown/binding-linux-ppc64-gnu 1.0.3 package-lock.json 2026-05-27T11:48:21Z
@rolldown/binding-linux-s390x-gnu 1.0.3 package-lock.json 2026-05-27T11:48:14Z
@rolldown/binding-wasm32-wasi 1.0.3 package-lock.json 2026-05-27T11:48:08Z
@rolldown/binding-android-arm64 1.0.3 package-lock.json 2026-05-27T11:48:03Z
@rolldown/binding-win32-arm64-msvc 1.0.3 package-lock.json 2026-05-27T11:47:56Z
@rolldown/binding-openharmony-arm64 1.0.3 package-lock.json 2026-05-27T11:47:50Z
@rolldown/binding-linux-arm64-musl 1.0.3 package-lock.json 2026-05-27T11:47:45Z
@rolldown/binding-darwin-arm64 1.0.3 package-lock.json 2026-05-27T11:47:39Z
@rolldown/binding-linux-arm64-gnu 1.0.3 package-lock.json 2026-05-27T11:47:34Z
@rolldown/binding-linux-arm-gnueabihf 1.0.3 package-lock.json 2026-05-27T11:47:26Z
@rolldown/binding-freebsd-x64 1.0.3 package-lock.json 2026-05-27T11:47:20Z
@rolldown/binding-linux-x64-musl 1.0.3 package-lock.json 2026-05-27T11:47:13Z
@rolldown/binding-linux-x64-gnu 1.0.3 package-lock.json 2026-05-27T11:47:07Z
@rolldown/binding-win32-x64-msvc 1.0.3 package-lock.json 2026-05-27T11:47:00Z
@rolldown/binding-darwin-x64 1.0.3 package-lock.json 2026-05-27T11:46:54Z
@oxc-project/types 0.133.0 package-lock.json 2026-05-26T06:30:02Z
postcss 8.5.12 8.5.15 package-lock.json 2026-05-19T09:51:29Z
@rolldown/pluginutils 1.0.1 package-lock.json 2026-05-13T03:52:29Z
@tybys/wasm-util 0.10.2 package-lock.json 2026-05-04T04:17:09Z
nanoid 3.3.11 3.3.12 package-lock.json 2026-04-30T22:04:14Z
@emnapi/core 1.10.0 package-lock.json 2026-04-16T04:04:37Z
@emnapi/runtime 1.10.0 package-lock.json 2026-04-16T04:04:28Z
@emnapi/wasi-threads 1.2.1 package-lock.json 2026-04-02T10:11:08Z
picomatch 4.0.4 package-lock.json 2026-03-23T20:39:47Z
lightningcss 1.32.0 package-lock.json 2026-03-09T04:23:43Z
lightningcss-win32-x64-msvc 1.32.0 package-lock.json 2026-03-09T04:23:33Z
lightningcss-win32-arm64-msvc 1.32.0 package-lock.json 2026-03-09T04:23:30Z
lightningcss-linux-x64-musl 1.32.0 package-lock.json 2026-03-09T04:23:27Z
lightningcss-linux-x64-gnu 1.32.0 package-lock.json 2026-03-09T04:23:24Z
lightningcss-linux-arm64-musl 1.32.0 package-lock.json 2026-03-09T04:23:21Z
lightningcss-linux-arm64-gnu 1.32.0 package-lock.json 2026-03-09T04:23:18Z
lightningcss-linux-arm-gnueabihf 1.32.0 package-lock.json 2026-03-09T04:23:15Z
lightningcss-freebsd-x64 1.32.0 package-lock.json 2026-03-09T04:23:12Z
lightningcss-darwin-x64 1.32.0 package-lock.json 2026-03-09T04:23:10Z
lightningcss-darwin-arm64 1.32.0 package-lock.json 2026-03-09T04:23:07Z
lightningcss-android-arm64 1.32.0 package-lock.json 2026-03-09T04:23:04Z
detect-libc 2.1.2 package-lock.json 2025-10-05T12:46:33Z
⏲️ History

Previous invocation results of same check:

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
@napi-rs/wasm-runtime 1.1.5 package-lock.json 2026-06-10T04:55:50Z
vite 6.4.2 8.0.16 package-lock.json 2026-06-01T09:50:43Z
tinyglobby 0.2.16 0.2.17 package-lock.json 2026-05-30T19:57:21Z
rolldown 1.0.3 package-lock.json 2026-05-27T11:49:15Z
@rolldown/binding-linux-ppc64-gnu 1.0.3 package-lock.json 2026-05-27T11:48:21Z
@rolldown/binding-linux-s390x-gnu 1.0.3 package-lock.json 2026-05-27T11:48:14Z
@rolldown/binding-wasm32-wasi 1.0.3 package-lock.json 2026-05-27T11:48:08Z
@rolldown/binding-android-arm64 1.0.3 package-lock.json 2026-05-27T11:48:03Z
@rolldown/binding-win32-arm64-msvc 1.0.3 package-lock.json 2026-05-27T11:47:56Z
@rolldown/binding-openharmony-arm64 1.0.3 package-lock.json 2026-05-27T11:47:50Z
@rolldown/binding-linux-arm64-musl 1.0.3 package-lock.json 2026-05-27T11:47:45Z
@rolldown/binding-darwin-arm64 1.0.3 package-lock.json 2026-05-27T11:47:39Z
@rolldown/binding-linux-arm64-gnu 1.0.3 package-lock.json 2026-05-27T11:47:34Z
@rolldown/binding-linux-arm-gnueabihf 1.0.3 package-lock.json 2026-05-27T11:47:26Z
@rolldown/binding-freebsd-x64 1.0.3 package-lock.json 2026-05-27T11:47:20Z
@rolldown/binding-linux-x64-musl 1.0.3 package-lock.json 2026-05-27T11:47:13Z
@rolldown/binding-linux-x64-gnu 1.0.3 package-lock.json 2026-05-27T11:47:07Z
@rolldown/binding-win32-x64-msvc 1.0.3 package-lock.json 2026-05-27T11:47:00Z
@rolldown/binding-darwin-x64 1.0.3 package-lock.json 2026-05-27T11:46:54Z
@oxc-project/types 0.133.0 package-lock.json 2026-05-26T06:30:02Z
postcss 8.5.12 8.5.15 package-lock.json 2026-05-19T09:51:29Z
@rolldown/pluginutils 1.0.1 package-lock.json 2026-05-13T03:52:29Z
@tybys/wasm-util 0.10.2 package-lock.json 2026-05-04T04:17:09Z
nanoid 3.3.11 3.3.12 package-lock.json 2026-04-30T22:04:14Z
@emnapi/core 1.10.0 package-lock.json 2026-04-16T04:04:37Z
@emnapi/runtime 1.10.0 package-lock.json 2026-04-16T04:04:28Z
@emnapi/wasi-threads 1.2.1 package-lock.json 2026-04-02T10:11:08Z
picomatch 4.0.4 package-lock.json 2026-03-23T20:39:47Z
lightningcss 1.32.0 package-lock.json 2026-03-09T04:23:43Z
lightningcss-win32-x64-msvc 1.32.0 package-lock.json 2026-03-09T04:23:33Z
lightningcss-win32-arm64-msvc 1.32.0 package-lock.json 2026-03-09T04:23:30Z
lightningcss-linux-x64-musl 1.32.0 package-lock.json 2026-03-09T04:23:27Z
lightningcss-linux-x64-gnu 1.32.0 package-lock.json 2026-03-09T04:23:24Z
lightningcss-linux-arm64-musl 1.32.0 package-lock.json 2026-03-09T04:23:21Z
lightningcss-linux-arm64-gnu 1.32.0 package-lock.json 2026-03-09T04:23:18Z
lightningcss-linux-arm-gnueabihf 1.32.0 package-lock.json 2026-03-09T04:23:15Z
lightningcss-freebsd-x64 1.32.0 package-lock.json 2026-03-09T04:23:12Z
lightningcss-darwin-x64 1.32.0 package-lock.json 2026-03-09T04:23:10Z
lightningcss-darwin-arm64 1.32.0 package-lock.json 2026-03-09T04:23:07Z
lightningcss-android-arm64 1.32.0 package-lock.json 2026-03-09T04:23:04Z
detect-libc 2.1.2 package-lock.json 2025-10-05T12:46:33Z