Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Fix security vulnerability: override istanbul-lib-processinfo uuid to 11.1.1 - #2673

Merged
ConnorQi01 merged 2 commits into
masterfrom
dev/v-peq/security_uuid_fix
May 29, 2026
Merged

Fix security vulnerability: override istanbul-lib-processinfo uuid to 11.1.1#2673
ConnorQi01 merged 2 commits into
masterfrom
dev/v-peq/security_uuid_fix

Conversation

@ConnorQi01

@ConnorQi01 ConnorQi01 commented May 28, 2026

Copy link
Copy Markdown
Collaborator

Summary

Upgrade the remaining vulnerable uuid transitive dependency to 11.1.1 via npm overrides to address Dependabot alert #352.

Proposed Changes

  • Add an istanbul-lib-processinfo > uuid override to 11.1.1.
  • Keep the existing mochawesome > uuid override unchanged.
  • Refresh package-lock.json so the nested uuid dependency resolves to 11.1.1.

Test Plan

  • Verify node_modules/istanbul-lib-processinfo/node_modules/uuid is 11.1.1 after npm install.

Closes #2672

@ConnorQi01
ConnorQi01 force-pushed the dev/v-peq/security_uuid_fix branch from 04a9ee0 to 809e8d8 Compare May 28, 2026 02:27
@ConnorQi01 ConnorQi01 changed the title Upgrade uuid transitive deps to 11.1.1 via overrides Fix security vulnerability: override istanbul-lib-processinfo uuid to 11.1.1 May 28, 2026
@ConnorQi01

Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

@ConnorQi01
ConnorQi01 merged commit 8162904 into master May 29, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix security vulnerability: override istanbul-lib-processinfo uuid to 11.1.1

2 participants