Resolve npm audit critical & high vulnerabilities - #6229

Merged

pawelangelow merged 16 commits into

mainfrom

Jul 22, 2026

Commits on Jul 21, 2026

chore(deps): drop redundant npm overrides

pawelangelow
and
claude
committed
badc65e
fix(deps): bump rawproto>protobufjs override to patched 7.6.5

pawelangelow
and
claude
committed
4f2afdd
chore(deps): remove unused jsonpath dependency

pawelangelow
and
claude
committed
abd837b
fix(deps): update engine.io-client to pull patched ws 8.21.1

pawelangelow
and
claude
committed
16f1577
fix(deps): bump form-data override to patched 4.0.6

pawelangelow
and
claude
committed
b17fa29
fix(deps): update picomatch to patched 2.3.2

pawelangelow
and
claude
committed
237077d
fix(deps): update dev shell-quote and ws to patched versions

pawelangelow
and
claude
committed
81d75fc
fix(deps): bump eslint-plugin-sonarjs to 4.2.0 (dev)

pawelangelow
and
claude
committed
fc57574
fix(deps): update minimatch to patched 3.1.5 (dev)

pawelangelow
and
claude
committed
df60fed
fix(deps): align semver override with app-builder-lib requirement

pawelangelow
and
claude
committed
ac6df8a
fix(deps): clear newly-published critical & high npm audit findings

pawelangelow
and
claude
committed
f6d1d5c
fix(deps): clear production critical & high npm audit findings in api tree

pawelangelow
and
claude
committed
c5253b8
fix(deps): revert @nestjs/swagger bump that broke api-client enum codegen

pawelangelow
and
claude
committed
11e2e88
fix(deps): regenerate lockfiles with npm 11 to restore libc metadata

pawelangelow
and
claude
committed
01fddf9

Commits on Jul 22, 2026

fix(deps): clear high-severity advisories published after the initial sweep

pawelangelow
and
claude
committed
26fbc8d
fix(deps): give eslint-plugin-sonarjs its declared semver via scoped override

pawelangelow
and
claude
committed
91e9525