Skip to content

Conversation

@MikeMcC399
Copy link
Collaborator

Situation

npm audit reports a moderate severity vulnerability CVE-2025-64718 from the transient dependency js-yaml used by eslint and semantic-release.

Change

Update to latest as follows:

From To
[email protected] [email protected]
@eslint/[email protected] @eslint/[email protected]

and execute npm audit fix.

Verification

npm ci
npm audit # confirm no vulnerabilities reported
npm run lint # confirm no linting errors
npm test # confirm test runs successfully

@cypress-app-bot
Copy link

@MikeMcC399 MikeMcC399 marked this pull request as ready for review November 17, 2025 07:58
@MikeMcC399 MikeMcC399 self-assigned this Nov 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants