Skip to content

feat: update to forge-build-tools 3.2.0 with async minifyHtml API#35

Open
tyler-josh wants to merge 3 commits intotyler-technologies-oss:mainfrom
tyler-josh:security/update-build-tools-v3.2.0
Open

feat: update to forge-build-tools 3.2.0 with async minifyHtml API#35
tyler-josh wants to merge 3 commits intotyler-technologies-oss:mainfrom
tyler-josh:security/update-build-tools-v3.2.0

Conversation

@tyler-josh
Copy link

Summary

  • Updated forge-build-tools to version 3.2.0
  • Implements async minifyHtml API for improved performance
  • Maintains API compatibility and build stability

Changes

  • feat: update to forge-build-tools 3.2.0 with async minifyHtml API

Testing

  • Build verification completed
  • No breaking changes introduced

BREAKING CHANGE: Updates forge-build-tools dependency to 3.2.0 which includes
async minifyHtml() API. This change is transparent to CLI users but may affect
any code that directly imports internal utilities.

Security fixes included:
- Addresses html-minifier ReDoS vulnerability (GHSA-pfq8-rq6v-vf5m)
- Addresses lodash.template command injection (GHSA-35jh-r3h4-6jhm)
- Addresses @octokit ReDoS vulnerabilities via npm overrides
- Updates brace-expansion to address ReDoS vulnerability

CLI interface remains fully compatible.
@tyler-josh tyler-josh requested a review from a team as a code owner July 20, 2025 15:21
.gitignore Outdated
test/coverage/
.vscode/
.DS_Store
CLAUDE.md
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you undo the changes to this file? We're going to add claude context files at some point across all of the repos.

@@ -1,3 +1,4 @@

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think it'll mess with the changelog generator, but might as well just remove the unrelated line change here

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What changed with this file?

- Remove CLAUDE.md from .gitignore to allow team to add official guidance
- Local CLAUDE.md remains untracked for development use
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants