Fix vulnerable build dependencies - #300

No actionable comments were generated in the recent review.

Walkthrough

The pnpm workspace configuration adds an override that resolves minimatch@>=7 <11.0.1 to 11.0.4. It also adds an override that resolves uuid requested by @tryghost/errors@1 to 11.1.1.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Possibly related PRs

• TryGhost/Source#198: This PR also changes pnpm installation policy in pnpm-workspace.yaml; its release-age setting applies alongside the dependency overrides.

Suggested reviewers: 9larsons

Merge Risk: Minimal · up to e500c

No actionable merge-blocking risk was identified in the dependency overrides.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly identifies the change: fixing vulnerable build dependencies.
Description check		The description explains the dependency updates, their purpose, and reported validation results.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 827f9868-bd8e-4d4d-96e1-0594dcbb49fd

Commits

Reviewing files that changed from the base of the PR and between d03b8dc and e500ca9.

Files ignored due to path filters: 1

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

Files selected for processing: 1

• pnpm-workspace.yaml

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review.