Skip to content

VULN UPGRADE: minor: ajv · patch: json-schema-to-typescript - #364

Merged
BenoitZugmeyer merged 1 commit into
masterfrom
engraver-auto-version-upgrade/minorpatch/npm/0-1772823569
Mar 9, 2026
Merged

VULN UPGRADE: minor: ajv · patch: json-schema-to-typescript #364
BenoitZugmeyer merged 1 commit into
masterfrom
engraver-auto-version-upgrade/minorpatch/npm/0-1772823569

Conversation

@campaigner-prod

Copy link
Copy Markdown
Contributor

Summary: Security update — 2 packages upgraded (MINOR changes included)

Manifests changed:

  • . (npm)

Updates

Package From To Type Vulnerabilities Fixed
ajv 8.17.1 8.18.0 minor 1 MODERATE
json-schema-to-typescript 15.0.3 15.0.4 patch -

Packages marked with "-" are updated due to dependency constraints.


Security Details

ℹ️ Other Vulnerabilities (1)
Package CVE Severity Summary Unsafe Version Fixed In
ajv GHSA-2g4f-4pwh-qvx6 MODERATE ajv has ReDoS when using $data option 8.17.1 8.18.0

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System

@dd-prapprover

dd-prapprover Bot commented Mar 7, 2026

Copy link
Copy Markdown

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

🔗 Workflow Link

  • ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-03-07T13:42:44Z
  • ✅ CI tests passed - 2026-03-07T13:43:49Z
  • ✅ Approved (commit: 9c85f10) - 2026-03-07T13:43:51Z
  • ✅ Approved and Merge Started (merge manually)
  • ⬜ Merged

➡️ Current phase: merge in progress... (merge manually)

@dd-prapprover dd-prapprover Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR has been automatically approved by the DD PR Approver bot.

@BenoitZugmeyer
BenoitZugmeyer merged commit 9e4074b into master Mar 9, 2026
15 checks passed
@BenoitZugmeyer
BenoitZugmeyer deleted the engraver-auto-version-upgrade/minorpatch/npm/0-1772823569 branch March 9, 2026 10:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant