Skip to content

chore(deps): raise js-yaml and postcss resolutions - #70

Merged
Starosdev merged 1 commit into
developfrom
deps/js-yaml-postcss-advisories
Jul 26, 2026
Merged

Starosdev merged 1 commit into
developfrom
deps/js-yaml-postcss-advisories

Conversation

@Starosdev

Copy link
Copy Markdown
Owner

Part of the org-wide dependency sweep (INF-511). Second pass on this fork after #69.

Raises the existing pinned resolutions:

  • js-yaml 4.2.0 to 4.3.0 (high)
  • postcss 8.5.10 to 8.5.23, covering both advisories (patched in 8.5.12 and 8.5.18)

Both stay within their current major. Lockfile regenerated with yarn install --mode=update-lockfile; the resolved versions match.

This fork is built and published as ghcr.io/staros-labs/radarr and runs on Zeus, so these describe a live image.

Bump the pinned resolutions to js-yaml 4.3.0 and postcss 8.5.23,
clearing the three open advisories on the frontend lockfile. This fork
is built and deployed as ghcr.io/staros-labs/radarr.
@Starosdev
Starosdev merged commit 4244959 into develop Jul 26, 2026
27 checks passed
@Starosdev
Starosdev deleted the deps/js-yaml-postcss-advisories branch July 26, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant