Skip to content

fix(devvit): override image-size, js-yaml, tmp for Dependabot alerts - #97

Merged
bakerboy448 merged 1 commit into
mainfrom
fix/devvit-dependabot-overrides
Nov 5, 2026
Merged

bakerboy448 merged 1 commit into
mainfrom
fix/devvit-dependabot-overrides

Conversation

@bakerboy448

Copy link
Copy Markdown
Collaborator

TLDR: clears the 5 open Dependabot alerts in devvit/package-lock.json.

  • image-size 2.0.2 to 2.0.3, js-yaml 4.3.1 to 4.3.2, tmp 0.0.33 to 0.2.7 via npm overrides (the devvit CLI pins the old ranges).
  • Local: type-check, test (50 pass), build pass; devvit --version runs.

🤖 Generated with Claude Code

…erts

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@bakerboy448
bakerboy448 merged commit 4c89d7d into main Nov 5, 2026
4 checks passed
@bakerboy448
bakerboy448 deleted the fix/devvit-dependabot-overrides branch November 5, 2026 23:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant