Skip to content

fix: changelog headings, vitest 4.1.12, minimatch override - #50

Merged
TheStreamCode merged 1 commit into
mainfrom
fix/changelog-deps-audit
Oct 31, 2026
Merged

TheStreamCode merged 1 commit into
mainfrom
fix/changelog-deps-audit

Conversation

@TheStreamCode

Copy link
Copy Markdown
Owner

Changelog: all 13 version headings now use the Keep-a-Changelog hyphen form instead of the em dash.

Security (dev-only, clears Dependabot alerts #33, #34, #35 and the failing updater jobs):

  • vitest and @vitest/coverage-v8 4.1.11 -> 4.1.12 (fixes @vitest/mocker GHSA-qxg6-89mg-rqv8 and GHSA-xp26-3454-mjgp).
  • Scoped minimatch ^11.0.3 overrides for eslint, @eslint/config-array and @typescript-eslint/typescript-estree (fixes GHSA-g3hv-75wg-m249; parents still declare ^10.2.x so no plain bump can fix it).

Verified locally: npm run check, verify:mcp, release:check and npm audit (0 vulnerabilities) all pass.

@TheStreamCode
TheStreamCode merged commit 26b69cf into main Oct 31, 2026
9 checks passed
@TheStreamCode
TheStreamCode deleted the fix/changelog-deps-audit branch October 31, 2026 23:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant