supabase

dima/supabase

0 Fork 0

mirror of https://github.com/supabase/supabase.git synced 2026-10-07 18:35:07 +03:00

Files

T

History

Ivan VasilovandClaude Sonnet 5.5 075c611463 chore: bump vulnerable dependencies (#51381 )

## Summary

- Bumps vulnerable transitive dependencies flagged by `pnpm audit`, one
commit per dependency (lockfile only, no permanent overrides):
proxy-addr, shell-quote, @fastify/busboy,
@graphql-tools/executor-legacy-ws, @modelcontextprotocol/sdk,
compression, http-cache-semantics, source-map-js, smol-toml, dompurify.
- Updates `scripts/fix-audit-vulnerability.ts` to be agent-friendly:
accepts a dependency name argument, adds `--json` (single JSON object on
stdout, logs on stderr, never prompts) and `--help`.

## Not fixed

The remaining audit findings could not be resolved by this script. Some
are blocked by `minimumReleaseAge` (braces, node-forge, sprintf-js);
others stay vulnerable even with an override and need a parent
dependency update or scoped override.

## Test plan

- [ ] CI passes (typecheck, lint, prettier)
- [ ] `pnpm audit` shows fewer findings than on master

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-07 16:23:43 +02:00

authorizeVercelDeploys.ts

chore: skip auto approve for studio (#45781 )

2026-05-11 10:00:25 +02:00

bump-package.ts

chore: Bump vulnerable dependencies (#44428 )

2026-04-01 13:10:37 +02:00

check-case-hazards.mjs

fix(ui-patterns): fix admonition self-import + add case-sensitivity guard (#48344 )

2026-07-27 16:24:45 +10:00

fix-audit-vulnerability.ts

chore: bump vulnerable dependencies (#51381 )