Skip to content

Conversation

@theianmay
Copy link
Member

  • Added resolutions for js-yaml, parse-url, tmp, and webpack-dev-server to address known vulnerabilities
  • Added multiple semver version resolutions to ensure secure versions across dependency tree
  • Removed lodash.template resolution (covered by lodash)

- Added resolutions for js-yaml, parse-url, tmp, and webpack-dev-server to address known vulnerabilities
- Added multiple semver version resolutions to ensure secure versions across dependency tree
- Removed lodash.template resolution (covered by lodash)
@theianmay theianmay self-assigned this Nov 15, 2025
@theianmay theianmay merged commit 0142345 into react-native-elements:next Nov 15, 2025
5 checks passed
@codecov
Copy link

codecov bot commented Nov 15, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.29%. Comparing base (6268212) to head (e8a8540).
⚠️ Report is 11 commits behind head on next.

Additional details and impacted files
@@           Coverage Diff           @@
##             next    #4000   +/-   ##
=======================================
  Coverage   79.29%   79.29%           
=======================================
  Files          90       90           
  Lines        2144     2144           
  Branches      924      957   +33     
=======================================
  Hits         1700     1700           
  Misses        442      442           
  Partials        2        2           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@theianmay theianmay deleted the chore/resolve-alerts branch November 15, 2025 07:45
github-actions bot pushed a commit that referenced this pull request Nov 15, 2025
chore: update dependency resolutions
github-actions bot pushed a commit that referenced this pull request Nov 15, 2025
chore: update dependency resolutions
@theianmay theianmay moved this to Closed or Merged 🏁 in Community Roadmap 🛣 Nov 16, 2025
@theianmay theianmay added this to the v5.0.0 milestone Nov 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: Closed or Merged 🏁

Development

Successfully merging this pull request may close these issues.

1 participant