Actions: stevenfackley/StackAlchemist
Actions
740 workflow runs
740 workflow runs
Audit Dependencies step has been failing on main with 11
high-severity findings. Two distinct advisories, with two distinct answers.
Fixable, and fixed:
- postcss GHSA-r28c-9q8g-f849 (path traversal via sourceMappingURL
auto-loading): the override pinned ^8.5.10, below the 8.5.18 patch.
Raised to ^8.5.18. postcss reaches us through next, so this was a
production exposure, not just a lint-time one.
- ...
CI
#735:
Commit f4665de
pushed
by
stevenfackley