From 9063959bef896a4619b834a5439b61a9bce6863e Mon Sep 17 00:00:00 2001 From: joe345-str Date: Wed, 7 Jan 2026 08:50:34 -0700 Subject: [PATCH 1/2] Add Node.js CI workflow for testing and building This workflow automates the installation of Node.js dependencies, builds the source code, and runs tests across multiple Node.js versions. --- .github/workflows/node.js.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/node.js.yml diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml new file mode 100644 index 00000000000000..2284b93570365d --- /dev/null +++ b/.github/workflows/node.js.yml @@ -0,0 +1,31 @@ +# This workflow will do a clean installation of node dependencies, cache/restore them, build the source code and run tests across different versions of node +# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-nodejs + +name: Node.js CI + +on: + push: + branches: [ "main" ] + pull_request: + branches: [ "main" ] + +jobs: + build: + + runs-on: ubuntu-latest + + strategy: + matrix: + node-version: [18.x, 20.x, 22.x] + # See supported Node.js release schedule at https://nodejs.org/en/about/releases/ + + steps: + - uses: actions/checkout@v4 + - name: Use Node.js ${{ matrix.node-version }} + uses: actions/setup-node@v4 + with: + node-version: ${{ matrix.node-version }} + cache: 'npm' + - run: npm ci + - run: npm run build --if-present + - run: npm test From b86c8ad509dbd0f2fe29096cd2426b9548757e9e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 2 Apr 2026 01:07:57 +0000 Subject: [PATCH 2/2] fix: deps/uv/docs/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-7430173 - https://snyk.io/vuln/SNYK-PYTHON-IDNA-6597975 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-9292516 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-15746419 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-15763443 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- deps/uv/docs/requirements.txt | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/deps/uv/docs/requirements.txt b/deps/uv/docs/requirements.txt index 2e310ebe7283af..c65fa7cba022cf 100644 --- a/deps/uv/docs/requirements.txt +++ b/deps/uv/docs/requirements.txt @@ -6,20 +6,20 @@ Sphinx==6.1.3 alabaster==0.7.13 Babel==2.11.0 beautifulsoup4==4.12.2 -certifi==2022.12.7 +certifi==2024.7.4 charset-normalizer==3.0.1 colorama==0.4.6 docutils==0.19 -idna==3.4 +idna==3.7 imagesize==1.4.1 importlib-metadata==6.0.0 -Jinja2==3.1.2 +Jinja2==3.1.6 livereload==2.6.3 MarkupSafe==2.1.2 packaging==23.0 -Pygments==2.14.0 +Pygments==2.20.0 pytz==2022.7.1 -requests==2.28.2 +requests==2.33.0 six==1.16.0 snowballstemmer==2.2.0 soupsieve==2.4.1 @@ -32,5 +32,5 @@ sphinxcontrib-qthelp==1.0.3 sphinxcontrib-serializinghtml==1.1.5 sphinxcontrib.applehelp==1.0.3 tornado==6.3.2 -urllib3==1.26.14 -zipp==3.11.0 +urllib3==2.6.3 +zipp==3.19.1