Skip to content

Fix v4 dependency audit failures - #1188

Merged
brunoborges merged 3 commits into
actions:releases/v4from
brunoborges:brunoborges-fix-v4-npm-audit
Jul 31, 2026
Merged

Fix v4 dependency audit failures#1188
brunoborges merged 3 commits into
actions:releases/v4from
brunoborges:brunoborges-fix-v4-npm-audit

Conversation

@brunoborges

@brunoborges brunoborges commented Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

  • update @actions/http-client to 3.0.2 and @actions/tool-cache to 2.0.2
  • resolve vulnerable transitives with Node 20-compatible overrides and in-range lockfile updates
  • rebuild the tracked setup and cleanup bundles

This is a prerequisite for #1187.

Validation

  • npm audit --audit-level=high (0 high, 0 critical; 6 moderate remain)
  • npm run format-check
  • npm run lint
  • npm run build
  • npm test (562 tests)
  • replace retired macos-13 workflow runners with macos-15-intel
@brunoborges
Fix v4 dependency audit failures
58f5af7 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: bd43d0d4-83e5-4c36-a328-cde537cf6673
@brunoborges
brunoborges requested a review from a team as a code owner July 31, 2026 15:21
@brunoborges
Make lint file discovery cross-platform
d068f6c 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: bd43d0d4-83e5-4c36-a328-cde537cf6673
This was referenced Jul 31, 2026
Merged
Closed
@brunoborges
Replace retired macOS 13 runners
005df82 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: bd43d0d4-83e5-4c36-a328-cde537cf6673
@brunoborges
brunoborges merged commit 0132de5 into actions:releases/v4 Jul 31, 2026
361 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant

@brunoborges