Skip to content

chore: define ajv resolutions#14758

Open
bobbor wants to merge 1 commit intomainfrom
fix/bobbor/ajv
Open

chore: define ajv resolutions#14758
bobbor wants to merge 1 commit intomainfrom
fix/bobbor/ajv

Conversation

@bobbor
Copy link
Copy Markdown
Member

@bobbor bobbor commented Mar 23, 2026

Description of changes

a run of yarn audit showed 16 ajv vulnerabilities.
these are best resolved by bumping dependencies, but since ajv is transitive dependency of babel and eslint, it is ok to work with resolutions.

Issue #, if available

- none -

Description of how you validated changes

  • yarn audit -> errors gone
  • lint / build passed.

Checklist

  • PR description included
  • yarn test passes
  • Unit Tests are changed or added
  • Relevant documentation is changed or added (and PR referenced)

Checklist for repo maintainers

  • Verify E2E tests for existing workflows are working as expected or add E2E tests for newly added workflows
  • New source file paths included in this PR have been added to CODEOWNERS, if appropriate

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@bobbor bobbor requested a review from a team as a code owner March 23, 2026 13:47
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Mar 23, 2026

⚠️ No Changeset found

Latest commit: b32d8c9

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant