Skip to content

fix: Preact security vulnerability issue#1332

Merged
vcnainala merged 1 commit intodevelopmentfrom
fix-preact-security-vulnerability-issue
Jan 12, 2026
Merged

fix: Preact security vulnerability issue#1332
vcnainala merged 1 commit intodevelopmentfrom
fix-preact-security-vulnerability-issue

Conversation

@NishaSharma14
Copy link
Copy Markdown
Contributor

No description provided.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR addresses a security vulnerability in Preact by updating it from version 10.26.9 to 10.28.2. The fix uses npm's overrides feature in package.json to enforce a minimum version of 10.26.10 for all transitive dependencies that depend on Preact (specifically @docsearch/js used by VitePress documentation and instantsearch.js).

Key changes:

  • Added Preact version override constraint >=10.26.10 in package.json
  • Updated lock files to reflect the new Preact version 10.28.2

Reviewed changes

Copilot reviewed 1 out of 3 changed files in this pull request and generated no comments.

File Description
package.json Added Preact version override to enforce minimum secure version
package-lock.json Updated Preact dependency from 10.26.9 to 10.28.2
yarn.lock Updated Preact dependency from 10.26.9 to 10.28.2

@codecov
Copy link
Copy Markdown

codecov Bot commented Jan 8, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.63%. Comparing base (b53d08d) to head (12e45ab).
⚠️ Report is 1 commits behind head on development.

Additional details and impacted files
@@              Coverage Diff               @@
##             development    #1332   +/-   ##
==============================================
  Coverage          56.63%   56.63%           
  Complexity          2268     2268           
==============================================
  Files                207      207           
  Lines               8733     8733           
==============================================
  Hits                4946     4946           
  Misses              3787     3787           
Flag Coverage Δ
unittests 56.63% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@NishaSharma14 NishaSharma14 self-assigned this Jan 8, 2026
@vcnainala vcnainala merged commit 9ec919e into development Jan 12, 2026
13 checks passed
@vcnainala vcnainala deleted the fix-preact-security-vulnerability-issue branch January 12, 2026 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants