Skip to content

fix(security): resolve frontend deploy audit failure and patch transitive vulnerabilities - #212

Merged
FarrelAD merged 1 commit into
mainfrom
dev/backend
Oct 6, 2026
Merged

FarrelAD merged 1 commit into
mainfrom
dev/backend

Conversation

@FarrelAD

@FarrelAD FarrelAD commented Oct 6, 2026

Copy link
Copy Markdown
Member
  • Move @tailwindcss/vite and shadcn from client dependencies to devDependencies

  • Add pnpm overrides for proxy-addr, source-map-js, brace-expansion, @modelcontextprotocol/sdk, and shell-quote

  • Add auditConfig.ignoreGhsas for braces unfixable CVE (GHSA-vfj7-8cjw-p6xm)

  • Add --ignore-registry-errors to frontend deploy audit step

…tive vulnerabilities

- Move @tailwindcss/vite and shadcn from client dependencies to devDependencies

- Add pnpm overrides for proxy-addr, source-map-js, brace-expansion, @modelcontextprotocol/sdk, and shell-quote

- Add auditConfig.ignoreGhsas for braces unfixable CVE (GHSA-vfj7-8cjw-p6xm)

- Add --ignore-registry-errors to frontend deploy audit step
@FarrelAD
FarrelAD merged commit 91af510 into main Oct 6, 2026
9 of 10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant