Skip to content

fix(deps): resolve moderate/low Dependabot alerts (uuid, @babel/core) - #20

Open
devin-ai-integration[bot] wants to merge 1 commit into
mainfrom
devin/1788724404-dependabot-moderate
Open

fix(deps): resolve moderate/low Dependabot alerts (uuid, @babel/core)#20
devin-ai-integration[bot] wants to merge 1 commit into
mainfrom
devin/1788724404-dependabot-moderate

Conversation

@devin-ai-integration

Copy link
Copy Markdown
Contributor

Summary

npm overrides for two transitive deps:

uuid        7.0.3  -> 11.1.1   (#9, via xcode@3.0.1; CJS `require('uuid').v4` still works)
@babel/core 7.29.0 -> 7.29.6   (#19)

uuid uses a bare key (no range) because npm ignored the ranged uuid@<11.1.1 form for this dep.

Not addressed:

  • decode-uri-component #52: patched 0.5.0 is ESM-only but is require()d by CJS query-string@7.1.3 (via expo-router), so forcing it would break URL parsing at runtime. Stays open until expo-router drops query-string@7.
  • image-size #42/#43 (high): no patched release.

tsc --noEmit and expo lint pass.

Link to Devin session: https://app.devin.ai/sessions/1af64696671b47e1a74a14c4d5f1d4d6
Open in Devin Desktop: https://app.devin.ai/desktop/session/1af64696671b47e1a74a14c4d5f1d4d6?variant=devin
Requested by: @szymonrybczak

…ot alerts)

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
@devin-ai-integration

Copy link
Copy Markdown
Contributor Author

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment, CI, and merge conflict monitoring

@testerarmy

testerarmy Bot commented Sep 6, 2026

Copy link
Copy Markdown

TesterArmy ran predefined tests on this Pull Request.

Test Results (2/2 completed)

Group: All Tests

Test Status Duration
Open app and verify homepage loaded 15s
Click through all tabs and verify Home and Explore tabs 18s

2/2 passed

Commit: 494f43f

Updated: Sep 6, 2026 8:16pm UTC

@testerarmy

testerarmy Bot commented Sep 6, 2026

Copy link
Copy Markdown

TesterArmy ran predefined tests on this Pull Request.

Test Results (2/2 completed)

Group: All Tests

Test Status Duration
Open app and verify homepage loaded 10s
Click through all tabs and verify Home and Explore tabs 22s

2/2 passed

Commit: 5ff5928

Updated: Sep 6, 2026 7:58pm UTC

@testerarmy

testerarmy Bot commented Sep 6, 2026

Copy link
Copy Markdown

TesterArmy is running exploration tests on this Pull Request.

Result Dashboard Duration Commit Updated (UTC)
Open 35s 494f43f Sep 6, 2026 8:14pm

Summary

All 4 steps passed.

Planned Steps (4/4 completed)

# Step Result
1 Launch the iOS app
2 Verify the initial screen renders without an error or crash
3 Open another primary screen using the visible app navigation
4 Verify the destination screen renders and remains interactive
Recording (1)

Test Recording

@testerarmy

testerarmy Bot commented Sep 6, 2026

Copy link
Copy Markdown

TesterArmy is running exploration tests on this Pull Request.

Result Dashboard Duration Commit Updated (UTC)
Open 37s 494f43f Sep 6, 2026 8:16pm

Summary

All 4 steps passed.

Planned Steps (4/4 completed)

# Step Result
1 Launch the iOS app
2 Verify the initial screen renders without an error or crash
3 Open another primary screen using the visible app navigation
4 Verify the destination screen renders and remains interactive
Recording (1)

Test Recording

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant