Skip to content

Refactor package updates for audit vulnerabilities#10169

Open
Copilot wants to merge 4 commits into
masterfrom
copilot/refactor-package-updates
Open

Refactor package updates for audit vulnerabilities#10169
Copilot wants to merge 4 commits into
masterfrom
copilot/refactor-package-updates

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Jun 3, 2026

How the feature works? / How did you fix the issue?

npm audit reported vulnerable transitive packages across the workspace dependency tree.

  • Dependency updates

    • Updated npm lockfile resolutions to remove reported audit vulnerabilities.
    • Added targeted overrides for vulnerable transitive packages where upstream packages have not yet released compatible updates.
  • Compatibility fixes

    • Preserved compatible AJV, TypeScript, and type-package resolution for existing build/test tooling.
    • Added explicit ketcher-react root re-exports for existing public symbols consumed by workspace packages.

Check list

  • unit-tests written
  • e2e-tests written
  • documentation updated
  • PR name follows the pattern #1234 – issue name
  • branch name doesn't contain '#'
  • PR is linked with the issue
  • base branch (master or release/xx) is correct
  • task status changed to "Code review"
  • reviewers are notified about the pull request

Copilot AI linked an issue Jun 3, 2026 that may be closed by this pull request
Copilot AI changed the title [WIP] Refactor package updates to address vulnerabilities Refactor package updates for audit vulnerabilities Jun 3, 2026
Copilot AI requested a review from AlexeyGirin June 3, 2026 20:18
@AlexeyGirin AlexeyGirin marked this pull request as ready for review June 3, 2026 20:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Refactor: Package updates

2 participants