Skip to content

Update ajv to 6.15.0 - #1755

Merged
gcatanese merged 1 commit into
mainfrom
fix-ajv-vulnerability
Aug 24, 2026
Merged

gcatanese merged 1 commit into
mainfrom
fix-ajv-vulnerability

Conversation

@gcatanese

Copy link
Copy Markdown
Contributor

Description
Updates the transitive ajv 6.x dependency from 6.12.6 to 6.15.0 in package-lock.json, resolving the related Dependabot alert.

Tested scenarios

  • npm ci
  • npm run build
  • npm run lint
  • npm test -- --runInBand
  • npm audit --json confirms the vulnerable ajv 6.x package is no longer reported; unrelated existing advisories remain

Fixed issue:

@gcatanese
gcatanese requested a review from a team as a code owner August 21, 2026 11:41

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the ajv dependency version from 6.12.6 to 6.15.0 in package-lock.json. There are no review comments, and I have no feedback to provide.

@gcatanese gcatanese added the security Pull requests that address a security vulnerability label Aug 21, 2026
@gcatanese
gcatanese enabled auto-merge August 21, 2026 11:43
@gcatanese
gcatanese added this pull request to the merge queue Aug 24, 2026
Merged via the queue into main with commit ce3dd2a Aug 24, 2026
4 checks passed
@gcatanese
gcatanese deleted the fix-ajv-vulnerability branch August 24, 2026 09:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security Pull requests that address a security vulnerability

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants