Skip to content

Full dependency audit, chores and fixes Rust and JS #381

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Cristian-Vogel wants to merge 27 commits into
base: main
Choose a base branch
from
Open

Full dependency audit, chores and fixes Rust and JS #381

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
27 commits
Select commit Hold shift + click to select a range
f8eebf3
chore: ran `pnpm update`
Cristian-Vogel Mar 8, 2026
4dde7f2
fix: correctly exclude v1, path was incorrect
Cristian-Vogel Mar 8, 2026
106a615
chore: bump dependabot critical deps first
Cristian-Vogel Mar 8, 2026
22efcd9
chore: bump eslint ^10.0
Cristian-Vogel Mar 8, 2026
3f947c8
chore: bump
Cristian-Vogel Mar 8, 2026
5571f7c
chore: bump
Cristian-Vogel Mar 8, 2026
4e66d38
chore: bump
Cristian-Vogel Mar 8, 2026
cba4fb8
Create dependabot.yml
Cristian-Vogel Mar 8, 2026
2f36865
Merge pull request #1 from Cristian-Vogel/Cristian-Vogel-patch-depend…
Cristian-Vogel Mar 8, 2026
a72cfe1
Create dependabot.yml
Cristian-Vogel Mar 8, 2026
1756ea0
Update dependabot.yml
Cristian-Vogel Mar 8, 2026
6e7943f
chore: bump jsdom version to 28.1
Cristian-Vogel Mar 8, 2026
354f702
Update dependabot.yml
Cristian-Vogel Mar 8, 2026
c15cc9f
Merge branch 'main' into cristian/audit
Cristian-Vogel Mar 8, 2026
c3b7da3
Merge pull request #2 from Cristian-Vogel/cristian/audit
Cristian-Vogel Mar 8, 2026
aef6008
Merge remote-tracking branch 'origin/cristian/audit' into cristian/audit
Cristian-Vogel Mar 8, 2026
1a88ae5
Merge pull request #3 from Cristian-Vogel/cristian/audit
Cristian-Vogel Mar 8, 2026
3f2f89c
chore: use a pnpm-workspace to scan deps properly in all folders
Cristian-Vogel Mar 8, 2026
3a36de2
mitigate breaking changes:
Cristian-Vogel Mar 8, 2026
8a1dc67
Added `src/lib/console/fixtures/monitor-data.ts` to the `ignores` list
Cristian-Vogel Mar 8, 2026
89899c7
### ESLint v9 Migration, Build Fixes, and Code Cleanup
Cristian-Vogel Mar 8, 2026
10204cc
docs: update prerequisites to include `protobuf` native compiler
Cristian-Vogel Mar 9, 2026
3cc2bb1
chore: run cargo update
Cristian-Vogel Mar 9, 2026
c5f6954
chore: passes cargo deny, after full Rust advisories check
Cristian-Vogel Mar 9, 2026
1b83a0d
chore: ran cargo update; passing cargo-deny locally ✅
Cristian-Vogel Mar 9, 2026
52c41b6
chore: bump CI to use cargo-deny-action@v2 ✅
Cristian-Vogel Mar 9, 2026
9e0d201
chore: bump ci-v1 to use cargo-deny-action@v2
Cristian-Vogel Mar 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
version: 2
updates:
- package-ecosystem: "cargo"
directory: "/"
schedule:
interval: "daily"
2 changes: 1 addition & 1 deletion .github/workflows/ci-v1.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -109,7 +109,7 @@ jobs:
steps:
- uses: actions/checkout@v4
- name: Check Rust Licenses
uses: EmbarkStudios/cargo-deny-action@v1
uses: EmbarkStudios/cargo-deny-action@v2
with:
manifest-path: crates/v1/Cargo.toml

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -105,7 +105,7 @@ jobs:
steps:
- uses: actions/checkout@v4
- name: Check Rust Code
uses: EmbarkStudios/cargo-deny-action@v1
uses: EmbarkStudios/cargo-deny-action@v2

check-js-licenses:
runs-on: ubuntu-latest
Expand Down
Loading
Loading