Skip to content

chore(deps): resolve open Dependabot alerts#55

Merged
MarshallOfSound merged 1 commit intomainfrom
deps/security-updates
Apr 7, 2026
Merged

chore(deps): resolve open Dependabot alerts#55
MarshallOfSound merged 1 commit intomainfrom
deps/security-updates

Conversation

@MarshallOfSound
Copy link
Copy Markdown
Member

Note

3 vite alerts remain: vite@7.3.2 is blocked by npmMinimalAgeGate: 10080 in .yarnrc.yml. Re-run yarn up -R vite on or after 2026-04-13.

Resolves 7/10 open Dependabot alerts via a single bump:

  • @electron/rebuild ^3.7.1^4.0.3 — drops the tar@6 / node-gyp@8 / make-fetch-happen@10 chain, eliminating 6 tar alerts and the @tootallnate/once alert.

@MarshallOfSound MarshallOfSound marked this pull request as ready for review April 7, 2026 03:52
@MarshallOfSound MarshallOfSound requested a review from a team as a code owner April 7, 2026 03:52
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​electron/​rebuild@​3.7.2 ⏵ 4.0.399 +910010083100

View full report

@MarshallOfSound MarshallOfSound merged commit fc7dbf8 into main Apr 7, 2026
7 checks passed
@MarshallOfSound MarshallOfSound deleted the deps/security-updates branch April 7, 2026 05:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants