Skip to content

chore: update dependencies and security tooling - #149

Merged
95gabor merged 3 commits into
mainfrom
cursor/dependency-and-infrastructure-security-1237
Jul 6, 2026
Merged

chore: update dependencies and security tooling#149
95gabor merged 3 commits into
mainfrom
cursor/dependency-and-infrastructure-security-1237

Conversation

@cursor

@cursor cursor Bot commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Updated npm dependencies and pnpm to 11.10.0
  • Updated the reusable Node bootstrap action to pnpm/action-setup@v6 and actions/setup-node@v6
  • Added pnpm 11 security config for approved build scripts and transitive overrides
  • Kept Docker base images on the latest verified explicit LTS pins: node:24.18.0-alpine3.24 and nginx:1.31.2-alpine3.23-slim

Verification

  • CI=true corepack pnpm install --frozen-lockfile --strict-peer-dependencies
  • corepack pnpm audit --audit-level moderate ✅ No known vulnerabilities
  • corepack pnpm run lint ✅ (2 existing warnings)
  • corepack pnpm run typecheck
  • corepack pnpm run build ⚠️ blocked in this runner: build requires Supabase env/local Supabase, and Docker is not installed to run scripts/prepare-static-site.sh

Notes

  • Left @percy/cli pinned at 1.31.14 because the newer 1.32.3 line remains vulnerable via transitive dependency history.
  • Left ESLint on v9 and @types/node on Node 24 for peer/runtime compatibility.
Open in Web View Automation 

@95gabor
95gabor marked this pull request as ready for review July 6, 2026 13:45
@95gabor
95gabor self-requested a review as a code owner July 6, 2026 13:45
@cursor

cursor Bot commented Jul 6, 2026

Copy link
Copy Markdown
Contributor Author

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown

Lighthouse results

URL Performance Accessibility Best Practices SEO
http://127.0.0.1:4173/ 69% 99% 96% 100%

Updated automatically by CI.

95gabor
95gabor previously approved these changes Jul 6, 2026
github-actions Bot added a commit that referenced this pull request Jul 6, 2026
@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown

Latest full-page screenshot

Full-page PR screenshot

@cursor

cursor Bot commented Jul 6, 2026

Copy link
Copy Markdown
Contributor Author

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

@95gabor
95gabor merged commit 2fd8ee9 into main Jul 6, 2026
10 checks passed
@95gabor
95gabor deleted the cursor/dependency-and-infrastructure-security-1237 branch July 6, 2026 14:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants