Skip to content

Fix high-severity Dependabot alerts#2801

Merged
Lagoja merged 3 commits intomainfrom
mikeland73/fix-dependabot-alerts
Mar 25, 2026
Merged

Fix high-severity Dependabot alerts#2801
Lagoja merged 3 commits intomainfrom
mikeland73/fix-dependabot-alerts

Conversation

@mikeland73
Copy link
Collaborator

Summary

  • Go: Update buger/jsonparser 1.1.1 → 1.1.2 (DoS fix)
  • Django: Update 4.2.27 → 4.2.29 (SQL injection + uncontrolled resource consumption fixes)
  • Rails example: Upgrade Rails 7.1.5 → 7.2.0, bringing rack 2.2.14 → 3.2.5 (directory traversal + Active Storage path traversal fixes)
  • VS Code extension: Add yarn resolutions to update minimatch 3.1.2 → 3.1.5 (ReDoS) and serialize-javascript 6.0.2 → 7.0.4 (RCE via RegExp.flags)

Test plan

  • Verify go build ./... still passes
  • Verify VS Code extension compiles (cd vscode-extension && yarn compile)
  • Confirm Dependabot alerts close after merge

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@mikeland73 mikeland73 requested review from Lagoja and gcurtis March 24, 2026 20:03
Copy link
Collaborator

@Lagoja Lagoja left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM if tests are passing

mikeland73 and others added 2 commits March 24, 2026 13:09
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The Rails 7.1→7.2 upgrade (with rack 2→3) caused
TestExamples/stacks_rails_run_test to fail in CI. Reverting to the
original Rails 7.1.x versions until the upgrade can be properly
validated.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@Lagoja Lagoja merged commit ab5eba0 into main Mar 25, 2026
24 checks passed
@Lagoja Lagoja deleted the mikeland73/fix-dependabot-alerts branch March 25, 2026 00:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants