Skip to content

chore: fix security vulnerabilities#305

Open
hurali97 wants to merge 2 commits intomainfrom
chore/security-fix
Open

chore: fix security vulnerabilities#305
hurali97 wants to merge 2 commits intomainfrom
chore/security-fix

Conversation

@hurali97
Copy link
Copy Markdown
Member

@hurali97 hurali97 commented Apr 20, 2026

Summary

This fixes the reported security issues https://github.com/callstack/react-native-brownfield/security/dependabot

Test plan

  • CI Passes 🟢
  • Verified locally 🟢

Copilot AI review requested due to automatic review settings April 20, 2026 10:49
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates dependency versions across the monorepo to address Dependabot-reported security vulnerabilities, primarily by bumping toolchain/test/build dependencies and refreshing the Yarn lockfile.

Changes:

  • Bumped various dev/build/test dependencies (e.g., vitest, jest, react-native-builder-bob, @rspress/core).
  • Refreshed yarn.lock to reflect the new dependency graph.
  • Added root resolutions to pin chromium-edge-launcher and glob.

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
yarn.lock Updated lockfile entries for upgraded dependencies and transitive graph changes.
package.json Added resolutions for chromium-edge-launcher and glob.
docs/package.json Bumped @rspress/core.
apps/RNApp/package.json Bumped jest.
packages/react-native-brownfield/package.json Bumped react-native-builder-bob and vitest.
packages/cli/package.json Bumped vitest.
packages/brownie/package.json Bumped react-native-builder-bob.
packages/brownfield-navigation/package.json Bumped react-native-builder-bob.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json
@hurali97 hurali97 requested a review from artus9033 April 20, 2026 11:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants