Skip to content

chore: resolve open dependabot security alerts - #272

Merged
jonathannorris merged 2 commits into
mainfrom
chore/dependabot-alerts-2
Jul 27, 2026
Merged

chore: resolve open dependabot security alerts#272
jonathannorris merged 2 commits into
mainfrom
chore/dependabot-alerts-2

Conversation

@jonathannorris

Copy link
Copy Markdown
Member

Summary

  • Bumped excon 0.112.0 -> 1.6.0 to resolve medium vulnerability (CVE-2026-54171): Excon does not redact additional sensitive/risky headers when following redirects (alert add allFeatures/allVariables functions #18). Also pulled fastlane 2.235.0 -> 2.237.0 which updated its excon constraint to allow 1.x.

- excon 0.112.0 -> 1.6.0 (medium, alert #18)
Copilot AI review requested due to automatic review settings July 22, 2026 13:40
@jonathannorris
jonathannorris requested a review from a team as a code owner July 22, 2026 13:40

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@jonathannorris
jonathannorris enabled auto-merge (squash) July 23, 2026 13:33
- json 2.19.5 -> 2.21.1 (low, alert #19)
@jonathannorris
jonathannorris merged commit 58fb0be into main Jul 27, 2026
8 checks passed
@jonathannorris
jonathannorris deleted the chore/dependabot-alerts-2 branch July 27, 2026 17:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants