ci: update release process - #57
Merged
Merged
Conversation
Signed-off-by: Michael Beemer <beeme1mr@users.noreply.github.com>
jonathannorris
added a commit
that referenced
this pull request
Aug 17, 2026
* chore: resolve open dependabot security alerts - vite ^6.4.2 -> ^6.4.3 (medium/high, alerts #57 #58) - @babel/core transitive -> ^7.29.6 via override (low, alert #56) - @angular/common, @angular/core, @angular/compiler 19.x -> 20.3.25 (high/medium, alerts #52 #53 #54 #55) Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * chore: align @openfeature/web-sdk with angular-sdk peer dependency Address Copilot review feedback on PR #253: @openfeature/angular-sdk 1.3.1 requires @openfeature/web-sdk ^1.9.0 as a peer dependency, but package.json still allowed ^1.7.3. Bump the declared range to match and regenerate the lockfile. Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * chore: resolve additional dependabot alerts for fast-uri - fast-uri ^3.1.2 -> ^3.1.4 (high, alert #59: host confusion via failed IDN canonicalization) - fast-uri ^3.1.2 -> ^3.1.4 (high, alert #60: host confusion via literal backslash authority delimiter) Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * fix(deps): regenerate OpenAPI client for oapi-codegen v2.8.0 Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * chore: resolve postcss alert and pin fast-uri exactly - postcss <= 8.5.17 -> ^8.5.18 override (high, alert #62) - pin fast-uri override to exact 3.1.4 per CodeRabbit review suggestion Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * chore: bump fast-uri to 3.1.5 for dependabot alert #64 - fast-uri 3.1.4 -> 3.1.5 (high, alert #64: host confusion via backslash authority introducer) Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * chore: resolve open dependabot security alerts - @angular/core 20.3.25 -> 20.3.28 (high, alert #75: XSS via event-handler attributes) - @angular/compiler 20.3.25 -> 20.3.28 (high, alert #74: XSS via event-handler attributes) - @angular/common 20.3.25 -> 20.3.28 (high, alert #73: cache-key ambiguity in HttpTransferCache) - brace-expansion 2.1.0 -> 2.1.4 (high, alert #72: DoS via exponential-time expansion) Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> --------- Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
beeme1mr
pushed a commit
to joshhunt/cli
that referenced
this pull request
Aug 18, 2026
* chore: resolve open dependabot security alerts - vite ^6.4.2 -> ^6.4.3 (medium/high, alerts open-feature#57 open-feature#58) - @babel/core transitive -> ^7.29.6 via override (low, alert open-feature#56) - @angular/common, @angular/core, @angular/compiler 19.x -> 20.3.25 (high/medium, alerts open-feature#52 open-feature#53 open-feature#54 open-feature#55) Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * chore: align @openfeature/web-sdk with angular-sdk peer dependency Address Copilot review feedback on PR open-feature#253: @openfeature/angular-sdk 1.3.1 requires @openfeature/web-sdk ^1.9.0 as a peer dependency, but package.json still allowed ^1.7.3. Bump the declared range to match and regenerate the lockfile. Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * chore: resolve additional dependabot alerts for fast-uri - fast-uri ^3.1.2 -> ^3.1.4 (high, alert open-feature#59: host confusion via failed IDN canonicalization) - fast-uri ^3.1.2 -> ^3.1.4 (high, alert open-feature#60: host confusion via literal backslash authority delimiter) Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * fix(deps): regenerate OpenAPI client for oapi-codegen v2.8.0 Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * chore: resolve postcss alert and pin fast-uri exactly - postcss <= 8.5.17 -> ^8.5.18 override (high, alert open-feature#62) - pin fast-uri override to exact 3.1.4 per CodeRabbit review suggestion Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> * chore: bump fast-uri to 3.1.5 for dependabot alert open-feature#64 - fast-uri 3.1.4 -> 3.1.5 (high, alert open-feature#64: host confusion via backslash authority introducer) Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com> --------- Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.