Fix npm audit security vulnerabilities #117

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

pete-the-pete wants to merge 1 commit into dotenv-org:master from pete-the-pete:npm-audit-fix

pete-the-pete commented Jan 10, 2026 •

edited

Loading

Summary

Fixes #116

Updates package-lock.json to address npm audit security vulnerabilities and update transitive dependencies to their latest patched versions.

Changes

Remove unused @ungap/promise-all-settled dependency
Update vulnerable dependencies to patched versions:
- ansi-colors 4.1.1 → 4.1.3
- brace-expansion 1.1.11 → 1.1.12
- braces 3.0.2 → 3.0.3
- cross-spawn 7.0.3 → 7.0.6
- debug 4.3.4 → 4.4.3
- diff 5.0.0 → 5.2.0

🤖 Generated with Claude Code


          Adding unused-imports since we aren't extending the global config any…

1814fb2

…more

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet