Skip to content

deps: bump orval to 8.22.0 - #522

Open
katsugtgz wants to merge 1 commit into
plotwist-app:mainfrom
katsugtgz:deps/orval-8.22.0
Open

katsugtgz wants to merge 1 commit into
plotwist-app:mainfrom
katsugtgz:deps/orval-8.22.0

Conversation

@katsugtgz

Copy link
Copy Markdown

Updates orval from 8.5.3 to 8.22.0 in apps/web.

Evidence:

Validation:

  • osv-scanner no longer reports any advisory for orval after the update
  • pnpm install completes
  • vitest run in apps/web: 128 passed, 2 failed (src/utils/currency/format.spec.ts and src/components/videos/videos.test.tsx). Both fail identically on the base commit without this change, so they are pre-existing.
  • tsc --noEmit passes in apps/web

Note: SDK regeneration (pnpm generate:api) needs the local API at localhost:3333, which is unchanged by this patch.

Scope: apps/web/package.json and pnpm-lock.yaml only.

Clears 12 advisories affecting orval < 8.21.0 and GHSA-cxq5-97v7-87j8
(fixed in 8.22.0).

orval 8.22.0 is the lowest version clear of all current advisories.
@vercel

vercel Bot commented Sep 21, 2026

Copy link
Copy Markdown

@katsugtgz is attempting to deploy a commit to the status-451 Team on Vercel.

A member of the Team first needs to authorize it.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant