[kanywst]

Resolves the open Dependabot alerts for re2js (#4), minimatch (#5) and katex (#1), plus a zod advisory (GHSA-mrhx-c7xc-m3w5) that npm audit reports.

The parents have no fixed release yet: markdownlint-cli2 0.24.0 pins markdownlint 0.42.0, which pins re2js 2.8.6 and pulls katex 0.16 via micromark-extension-math, and eslint 10.14.0 still asks for minimatch ^10.2.6. So this adds npm overrides (same versions as 0-draft/aws-credentials#18):

• katex 0.18.10
• minimatch 11.0.5
• re2js 2.9.1

zod is bumped 4.4.3 → 4.6.7 in the lockfile only (in range, via npm audit fix).

Checks run locally: npm run build, npm test (17 tests), npm run lint and npm run lint:md pass; npm audit reports 0 vulnerabilities.

[coderabbitai]

Important

• Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 80d51021-a116-4be3-b062-8640f630b27f

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn