Skip to content

[compliance] Update dependencies in some devbox examples #2661

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 28, 2025
Merged

Conversation

loreto
Copy link
Contributor

@loreto loreto commented Jul 28, 2025

Summary

  • Updates form-data dependency from ^4.0.0 to ^4.0.4 in the VS Code extension
  • Updates packageManager from pnpm@9.12.1 to pnpm@10.13.1 in the documentation app

How was it tested?

N/A didn't change any core devbox functionality

Community Contribution License

All community contributions in this pull request are licensed to the project
maintainers under the terms of the
Apache 2 License.

By creating this pull request, I represent that I have the right to license the
contributions to the project maintainers under the Apache 2 License as stated in
the
Community Contribution License.

@loreto loreto requested review from gcurtis and Copilot July 28, 2025 14:40
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates dependencies for compliance purposes, specifically upgrading package versions in devbox examples to address potential security or compatibility concerns.

  • Updates form-data dependency from ^4.0.0 to ^4.0.4 in the VS Code extension
  • Updates packageManager from pnpm@9.12.1 to pnpm@10.13.1 in the documentation app

Reviewed Changes

Copilot reviewed 2 out of 5 changed files in this pull request and generated no comments.

File Description
vscode-extension/package.json Updates form-data package to a newer patch version
docs/app/package.json Upgrades pnpm package manager to a newer major version
Comments suppressed due to low confidence (1)

docs/app/package.json:5

  • The specified pnpm version 10.13.1 may not exist. As of my knowledge cutoff in January 2025, pnpm was at version 9.x. Please verify that version 10.13.1 is a valid and available pnpm release.
    "packageManager": "pnpm@10.13.1",

@loreto loreto merged commit 4427ad0 into main Jul 28, 2025
34 checks passed
@loreto loreto deleted the daniel/vuln branch July 28, 2025 14:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants