Skip to content

build(deps): update transient dependencies - #4182

Merged
erickzhao merged 2 commits into
nextfrom
transient
Mar 20, 2026
Merged

build(deps): update transient dependencies#4182
erickzhao merged 2 commits into
nextfrom
transient

Conversation

@erickzhao

@erickzhao erickzhao commented Mar 19, 2026

Copy link
Copy Markdown
Member

The next branch isn't set up to get Dependabot PRs yet. This PR runs yarn up -R on a bunch of dependencies that had CVEs recently:

  • tar
  • minimatch
  • webpack
  • rollup
  • brace-expansion
  • lodash

@socket-security

socket-security Bot commented Mar 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedwebpack@​5.94.0 ⏵ 5.105.482 -1100 +293 +198 +1100

View full report

@erickzhao
erickzhao marked this pull request as ready for review March 19, 2026 19:22
@erickzhao
erickzhao requested a review from a team as a code owner March 19, 2026 19:22
@erickzhao erickzhao added the next label Mar 19, 2026
@erickzhao
erickzhao merged commit 05bcf5f into next Mar 20, 2026
11 checks passed
@erickzhao
erickzhao deleted the transient branch March 20, 2026 17:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@erikian erikian erikian approved these changes

Assignees

No one assigned

Labels

next

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@erickzhao @erikian