Skip to content

fix(deps): resolve known dependency vulnerabilities - #3

Closed
furedea-agent[bot] wants to merge 1 commit into
mainfrom
fix/dependency-vulnerabilities
Closed

furedea-agent[bot] wants to merge 1 commit into
mainfrom
fix/dependency-vulnerabilities

Conversation

@furedea-agent

@furedea-agent furedea-agent Bot commented Oct 17, 2026

Copy link
Copy Markdown
Contributor

Summary

Resolve the osv-scanner advisory for tinypool 2.1.0 in pnpm-lock.yaml.

  • Add a tinypool override in pnpm-workspace.yaml (transitive via oxfmt 0.45.0), resolving to 2.2.0

Verification

  • osv-scanner scan source -r .: no issues found
  • Repository checks (format, lint, typecheck, test, knip): pass

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@furedea furedea closed this Oct 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant