Skip to content

npm audit fix#496

Merged
erikras merged 1 commit intomainfrom
audit
May 25, 2025
Merged

npm audit fix#496
erikras merged 1 commit intomainfrom
audit

Conversation

@erikras
Copy link
Member

@erikras erikras commented May 25, 2025

fixed a few things with RFF, too

@erikras erikras requested a review from Copilot May 25, 2025 10:50
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Bumps the package version, loosens a type definition, and adds dependency resolutions to address audit fixes.

  • Updated the exported version constant to 5.0.0-1.
  • Modified Subscription type to allow undefined values.
  • Introduced a resolutions section in package.json to pin downstream dependencies.

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File Description
src/version.ts Bumped version string from "4.20.10" to "5.0.0-1".
src/types.ts Expanded Subscription type to `boolean
package.json Added resolutions field to pin specific dependency versions.
Comments suppressed due to low confidence (1)

src/types.ts:1

  • With the updated Subscription type accepting undefined, add unit tests covering both true, false, and undefined cases to ensure correct behavior.
export type Subscription = { [key: string]: boolean | undefined };

@@ -1,4 +1,4 @@
export type Subscription = { [key: string]: boolean };
export type Subscription = { [key: string]: boolean | undefined };
Copy link

Copilot AI May 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Subscription type now allows undefined values; consider adding comments or updating documentation to clarify when a subscription can be undefined.

Copilot uses AI. Check for mistakes.
"dependencies": {
"@babel/runtime": "^7.10.0"
},
"resolutions": {
Copy link

Copilot AI May 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The resolutions field is specific to Yarn v1; please document this requirement in the README or switch to npm’s overrides for npm v8+ compatibility.

Suggested change
"resolutions": {
"overrides": {

Copilot uses AI. Check for mistakes.
@erikras erikras merged commit a8110cb into main May 25, 2025
3 checks passed
@erikras erikras deleted the audit branch May 25, 2025 10:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants