Skip to content

fix(deps): resolve critical/high Dependabot alerts - #17

Merged
szymonrybczak merged 1 commit into
mainfrom
devin/1788721032-dependabot-high
Sep 6, 2026
Merged

fix(deps): resolve critical/high Dependabot alerts#17
szymonrybczak merged 1 commit into
mainfrom
devin/1788721032-dependabot-high

Conversation

@devin-ai-integration

Copy link
Copy Markdown
Contributor

Summary

Closes the open critical/high Dependabot alerts that have a patched release (#10, #11, #13, #14, #18, #23, #24, #25, #31, #32, #34).

All affected packages are transitive (Expo/Metro/React Native toolchain), so the fix is an npm overrides block in package.json pinning: shell-quote -> 1.10.0, tar -> 7.5.22, ws 6.x/7.x/8.x -> 6.2.6/7.5.13/8.21.3, undici -> 6.28.0, postcss -> 8.5.26; lockfile regenerated.

Not addressed: image-size #42/#43 have no patched release (only fix path is a breaking expo@57 upgrade).

tsc --noEmit and expo lint pass locally.

Link to Devin session: https://app.devin.ai/sessions/1af64696671b47e1a74a14c4d5f1d4d6
Open in Devin Desktop: https://app.devin.ai/desktop/session/1af64696671b47e1a74a14c4d5f1d4d6?variant=devin
Requested by: @szymonrybczak

… ws, undici, postcss)

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
@devin-ai-integration

Copy link
Copy Markdown
Contributor Author

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment, CI, and merge conflict monitoring

@testerarmy

testerarmy Bot commented Sep 6, 2026

Copy link
Copy Markdown

TesterArmy ran predefined tests on this Pull Request.

Test Results (2/2 completed)

Group: All Tests

Test Status Duration
Click through all tabs and verify Home and Explore tabs 15s
Open app and verify homepage loaded 14s

2/2 passed

Commit: 0ee7005

Updated: Sep 6, 2026 7:12pm UTC

@testerarmy

testerarmy Bot commented Sep 6, 2026

Copy link
Copy Markdown

TesterArmy is running exploration tests on this Pull Request.

Result Dashboard Duration Commit Updated (UTC)
Open 41s 0ee7005 Sep 6, 2026 7:11pm

Summary

All 4 steps passed.

Planned Steps (4/4 completed)

# Step Result
1 Launch the Android app
2 Verify the Home screen loads with its header image and content
3 Open the Explore tab
4 Verify the Explore screen and its expandable topics render
Recording (1)

Test Recording

@testerarmy

testerarmy Bot commented Sep 6, 2026

Copy link
Copy Markdown

TesterArmy is running exploration tests on this Pull Request.

Result Dashboard Duration Commit Updated (UTC)
Open 33s 0ee7005 Sep 6, 2026 7:12pm

Summary

All 4 steps passed.

Planned Steps (4/4 completed)

# Step Result
1 Launch the Android app
2 Verify the Home screen loads with its header image and content
3 Open the Explore tab
4 Verify the Explore screen and its expandable topics render
Recording (1)

Test Recording

@szymonrybczak
szymonrybczak merged commit 6bc31c5 into main Sep 6, 2026
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant