Skip to content

chore(deps): bump js deps to fix security warnings #6257

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
hanabi1224 merged 1 commit into from
Nov 20, 2025
Merged

chore(deps): bump js deps to fix security warnings #6257

hanabi1224 merged 1 commit into from
Nov 20, 2025

Conversation

@hanabi1224
Copy link
Contributor

@hanabi1224 hanabi1224 commented Nov 20, 2025 •
edited
Loading

Summary of changes

Fixes:
https://github.com/ChainSafe/forest/security/dependabot/121
https://github.com/ChainSafe/forest/security/dependabot/122
https://github.com/ChainSafe/forest/security/dependabot/125

Changes introduced in this pull request:

Reference issue to close (if applicable)

Closes

Other information and links

Change checklist

  • I have performed a self-review of my own code,
  • I have made corresponding changes to the documentation. All new code adheres to the team's documentation standards,
  • I have added tests that prove my fix is effective or that my feature works (if possible),
  • I have made sure the CHANGELOG is up-to-date. All user-facing changes should be reflected in this document.

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 20, 2025 •
edited
Loading

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • docs/yarn.lock is excluded by !**/yarn.lock, !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch hm/bump-js-deps

Comment @coderabbitai help to get the list of available commands and usage tips.

@hanabi1224 hanabi1224 marked this pull request as ready for review November 20, 2025 09:02
@hanabi1224 hanabi1224 requested a review from a team as a code owner November 20, 2025 09:02
@hanabi1224 hanabi1224 requested review from LesnyRumcajs and removed request for a team November 20, 2025 09:02
@LesnyRumcajs LesnyRumcajs added this pull request to the merge queue Nov 20, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Nov 20, 2025
@hanabi1224 hanabi1224 added this pull request to the merge queue Nov 20, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Nov 20, 2025
@hanabi1224 hanabi1224 added this pull request to the merge queue Nov 20, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Nov 20, 2025
@hanabi1224 hanabi1224 added this pull request to the merge queue Nov 20, 2025
Merged via the queue into main with commit 48a8d99 Nov 20, 2025
19 checks passed
@hanabi1224 hanabi1224 deleted the hm/bump-js-deps branch November 20, 2025 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@LesnyRumcajs LesnyRumcajs LesnyRumcajs approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@hanabi1224 @LesnyRumcajs