Skip to content

Chore/fix vulnerabilities#4155

Open
dquadrantdev wants to merge 6 commits intoIntersectMBO:developfrom
cardanoapi:chore/fix-vulnerabilities
Open

Chore/fix vulnerabilities#4155
dquadrantdev wants to merge 6 commits intoIntersectMBO:developfrom
cardanoapi:chore/fix-vulnerabilities

Conversation

@dquadrantdev
Copy link
Copy Markdown

@dquadrantdev dquadrantdev commented Apr 16, 2026

List of changes

Fix in dependencies versions across the board.

  • Changed gov-action-loader/frontend/package.json,
    govtool/analytics-dashboard/package.json,
    govtool/frontend/package.json,
    govtool/metadata-validation/package.json,
    tests/govtool-backend/requirements.txt,
    tests/govtool-frontend/playwright/package.json,
    tests/test-metadata-api/package.json

Checklist

  • related issue
  • My changes generate no new warnings
  • My code follows the style guidelines of this project
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the changelog
  • I have added tests that prove my fix is effective or that my feature works

mesudip and others added 6 commits April 8, 2026 12:09
next 14 -> 16, next-intl 3 -> 4, @sentry/nextjs updated
Nest stack moved to 11.x, axios updated
jsonld upgraded to 9.x where applicable
@playwright/test/playwright upgraded in playwright workspace
Yarn workspaces upgraded aggressively (vite 8, vue 3.5, express 5, uuid 13, etc.)
Added targeted overrides in frontend/metadata-validation to clear additional transitive highs where fixable
@dquadrantdev
Copy link
Copy Markdown
Author

dquadrantdev commented Apr 16, 2026

Other vulnerabilities will be solved after the new npm package for pdf ui is updated.IntersectMBO/govtool-proposal-pillar#339

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants