Skip to content

[stable32] Fix npm audit - #18833

Open
nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit
Open

[stable32] Fix npm audit#18833
nextcloud-command wants to merge 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Audit report

No fixable problems found (6 unfixable, 14 only fixable manually using --force)

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Jul 27, 2026
@nickvergessen
nickvergessen requested a review from Antreesy July 27, 2026 11:30

@Antreesy Antreesy left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's touching all nextcloud-libraries, that might also include breaking changes

Also in our libraries brace-expansion is correctly deduped, the issue is with 3rd party:

β”œβ”€β”¬ @nextcloud/eslint-config@9.0.1
β”‚ β”œβ”€β”¬ eslint@10.2.0
β”‚ β”‚ β”œβ”€β”¬ @eslint/config-array@0.23.5
β”‚ β”‚ β”‚ └─┬ minimatch@10.2.5
β”‚ β”‚ β”‚   └── brace-expansion@5.0.8
β”‚ β”‚ └─┬ minimatch@10.2.5
β”‚ β”‚   └── brace-expansion@5.0.8
β”‚ └─┬ typescript-eslint@8.63.0
β”‚   └─┬ @typescript-eslint/typescript-estree@8.63.0
β”‚     └─┬ minimatch@10.2.5
β”‚       └── brace-expansion@5.0.8
β”œβ”€β”¬ openapi-typescript@7.13.0
β”‚ └─┬ @redocly/openapi-core@1.34.16
β”‚   └─┬ minimatch@5.1.9
β”‚     └── brace-expansion@2.1.2 deduped
└─┬ webdav@5.10.0
  └─┬ minimatch@9.0.9
    └── brace-expansion@2.1.2

@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from cfc4f48 to eb8c874 Compare August 2, 2026 06:09
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from eb8c874 to 5d32a0c Compare August 9, 2026 04:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants