Skip to content

fix: update vulnerable dependencies - #13

Open
TheCryptoDonkey wants to merge 1 commit into
tompro:mainfrom
TheCryptoDonkey:security/dependencies-2026-10-28
Open

TheCryptoDonkey wants to merge 1 commit into
tompro:mainfrom
TheCryptoDonkey:security/dependencies-2026-10-28

Conversation

@TheCryptoDonkey

Copy link
Copy Markdown

Summary

  • update Capacitor to 8.5.3 and Vitest to 5
  • add the missing service-worker registration package used by the PWA build
  • refresh root and PWA lockfiles

Verification

  • 518 tests passed
  • typecheck passed
  • production and PWA builds passed
  • Android Capacitor sync passed
  • production audit: 0 vulnerabilities

The remaining full-tree findings are development-only: three moderate CLI/Xcode/uuid advisories and three low Workbox advisories without a non-breaking upstream fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant