Skip to content

fix(deps): patch workspace security advisories - #52

Merged
joelfickson merged 1 commit into
masterfrom
chore/dependabot-security-fixes
Oct 31, 2026
Merged

joelfickson merged 1 commit into
masterfrom
chore/dependabot-security-fixes

Conversation

@joelfickson

@joelfickson joelfickson commented Oct 31, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

  • Update workspace dependency overrides and the lockfile to patched releases for the open security advisories.
  • Add the MCP SDK's required patched Zod peer and a patch changeset.

Test plan

  • pnpm install --lockfile-only --ignore-scripts
  • pnpm install --ignore-scripts
  • pnpm audit leaves one low-severity deepmerge advisory with no patched release.
  • GitHub Test workflow

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need.

@joelfickson
joelfickson merged commit e47c81e into master Oct 31, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant