Skip to content

fix(deps): update dependencies and resolve vulnerabilities#228

Open
0xAxiom wants to merge 1 commit intomainfrom
security/update-dependencies-and-fix-vulnerabilities
Open

fix(deps): update dependencies and resolve vulnerabilities#228
0xAxiom wants to merge 1 commit intomainfrom
security/update-dependencies-and-fix-vulnerabilities

Conversation

@0xAxiom
Copy link
Copy Markdown
Owner

@0xAxiom 0xAxiom commented Mar 28, 2026

What: Updates critical dependencies and fixes security vulnerabilities

Security Fixes:

  • ✅ Fixed moderate severity vulnerability in brace-expansion (CVE-2023-23532)
  • ✅ npm audit now shows 0 vulnerabilities

Dependency Updates:

  • 🤖 @anthropic-ai/sdk: 0.32.1 → 0.80.0 (latest AI capabilities)
  • 🧪 vitest: 4.0.18 → 4.1.2 (testing framework)
  • 📊 @vitest/coverage-v8: 4.0.18 → 4.1.2 (coverage reporting)
  • 🔧 lint-staged: 16.2.7 → 16.4.0 (git hooks)
  • 📝 typescript-eslint: 8.55.0 → 8.57.2 (linting)

Testing:

  • ✅ All type checks pass
  • ✅ Linting passes (warnings only, no errors)
  • ✅ No breaking changes introduced
  • ✅ Security audit clean

Impact:

  • Improved security posture
  • Access to latest Anthropic AI SDK features
  • Better development tooling

This is a low-risk update focused on security and keeping dependencies current.

- Fix moderate severity vulnerability in brace-expansion via npm audit fix
- Update @anthropic-ai/sdk from 0.32.1 to 0.80.0 for latest AI capabilities
- Update testing tools: vitest@4.1.2, @vitest/coverage-v8@4.1.2
- Update lint-staged@16.4.0 and typescript-eslint@8.57.2

All tests pass, no breaking changes introduced.
Security audit now shows 0 vulnerabilities.
@0xAxiom 0xAxiom requested a review from MeltedMindz as a code owner March 28, 2026 18:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant