Skip to content

fix: critical, high, and moderate vulnerabilities#1775

Merged
ericdouglaspratt merged 1 commit into
mainfrom
jun-30-fix-vulnerabilities
Jul 1, 2026
Merged

fix: critical, high, and moderate vulnerabilities#1775
ericdouglaspratt merged 1 commit into
mainfrom
jun-30-fix-vulnerabilities

Conversation

@ericdouglaspratt

Copy link
Copy Markdown
Collaborator

🔗 Linked issue

  • n/a

❓ Type of change

  • 📖 Documentation (updates to the documentation or readme)
  • 🐞 Bug fix (a non-breaking change that fixes an issue)
  • 👌 Enhancement (improving an existing functionality like performance)
  • ✨ New feature (a non-breaking change that adds functionality)
  • ⚠️ Breaking change (fix or feature that would cause existing functionality to change)

📚 Description

  • Ran npm run audit in all three packages to reduce the vulnerabilities
  • In es-ds-styles:
    - Before: 2 vulnerabilities (1 moderate, 1 critical)
    - After: 0 vulnerabilities
  • In es-ds-components:
    - Before: 11 vulnerabilities (4 low, 3 moderate, 3 high, 1 critical)
    - After: 2 low severity vulnerabilities
  • In es-ds-docs:
    - Before: 12 vulnerabilities (4 low, 3 moderate, 4 high, 1 critical)
    - After: 2 low severity vulnerabilities

🥼 Testing

  • Ran make dev locally and tested various pages and no issues

🧐 Feedback Requested / Focus Areas

  • Overall

📝 Checklist

  • I have verified accessibility of any new components by:
    • automated check with the WAVE browser extension
    • navigating by keyboard
    • using with a screen reader (e.g. VoiceOver on Safari)
  • I have updated any applicable documentation.

@hroth1994 hroth1994 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🔒 👍

@ericdouglaspratt
ericdouglaspratt merged commit 5453306 into main Jul 1, 2026
6 checks passed
@ericdouglaspratt
ericdouglaspratt deleted the jun-30-fix-vulnerabilities branch July 1, 2026 16:58
@github-actions github-actions Bot mentioned this pull request Jul 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants