Skip to content

Clear Dependabot high alerts (ansi-regex, y18n) - #7

Open
thomasrockhu-codecov wants to merge 4 commits into
masterfrom
th/cve-ansi-regex-y18n
Open

Clear Dependabot high alerts (ansi-regex, y18n)#7
thomasrockhu-codecov wants to merge 4 commits into
masterfrom
th/cve-ansi-regex-y18n

Conversation

@thomasrockhu-codecov

Copy link
Copy Markdown
Contributor

Summary

  • Add npm overrides for ansi-regex and y18n to clear open high Dependabot alerts.

Test plan

  • npm audit --audit-level=high clean
  • Confirm Dependabot highs clear after merge

thomasrockhu-codecov and others added 3 commits August 7, 2026 15:45
CodeQL was failing with "no source code seen" because the repo had no
.github/workflows files for the actions language extractor.

Co-authored-by: Cursor <cursoragent@cursor.com>
Comment thread .github/workflows/ci.yml
Comment on lines +10 to +17
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with:
node-version: "20"
- run: npm ci
- run: node generate-codecov-json.js --help
iPhone 8 / Xcode 11.4 is unavailable on current CircleCI macOS images.
GHA already validates the npm override install.

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants