Skip to content

Conversation

@jlorper
Copy link
Member

@jlorper jlorper commented Jul 2, 2025

Fixes

  • Try to address multiple software vulnerabilities

Change implications

  • includes or requires infrastructure changes? (tag 'infra-change')

@jlorper jlorper requested a review from Copilot July 2, 2025 22:18
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates several dependencies to newer versions to address security vulnerabilities.

  • Bumps major and minor versions of key libraries
  • Ensures the project uses patched releases for known issues
Comments suppressed due to low confidence (4)

package.json:19

  • Major bump to @google-cloud/datastore may include breaking changes; verify compatibility and update usage accordingly.
    "@google-cloud/datastore": "^10.0.1",

package.json:22

  • Upgrading commander from v4 to v14 includes significant API changes; ensure all command definitions and option parsing are updated.
    "commander": "^14.0.0",

package.json:23

  • load-json-file v7 is ESM-only; confirm project build and import patterns support ESM or add interop workarounds.
    "load-json-file": "^7.0.1",

package.json:27

  • Ensure the test suite runs under Mocha v11 and update any deprecated CLI flags or config options.
    "mocha": "^11.7.1",

@jlorper jlorper self-assigned this Jul 18, 2025
@jlorper jlorper merged commit faf10b5 into main Jul 22, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants