Skip to content

[stable32] Fix npm audit - #2540

Merged
AndyScherzinger merged 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit
Aug 9, 2026
Merged

[stable32] Fix npm audit#2540
AndyScherzinger merged 1 commit into
stable32from
automated/noid/stable32-fix-npm-audit

Conversation

@nextcloud-command

@nextcloud-command nextcloud-command commented Apr 26, 2026

Copy link
Copy Markdown
Contributor

Audit report

This audit fix resolves 4 of the total 31 vulnerabilities found in your project.

Updated dependencies

Fixed vulnerabilities

@nextcloud/cypress #

  • Caused by vulnerable dependency:
  • Affected versions:
  • Package usage:
    • node_modules/@nextcloud/cypress

@testing-library/cypress #

  • Caused by vulnerable dependency:
  • Affected versions: 9.0.0 - 10.0.3
  • Package usage:
    • node_modules/@testing-library/cypress

@vitest/coverage-v8 #

  • Caused by vulnerable dependency:
  • Affected versions: 4.0.0-beta.1 - 4.1.0-beta.6
  • Package usage:
    • node_modules/@vitest/coverage-v8

vitest #

  • When Vitest UI server is listening, arbitrary file can be read and executed
  • Severity: critical 🚨 (CVSS 9.8)
  • Reference: GHSA-5xrq-8626-4rwp
  • Affected versions: >=4.0.0 <4.1.0
  • Package usage:
    • node_modules/vitest

@nextcloud-command nextcloud-command added 3. to review dependencies Pull requests that update a dependency file labels Apr 26, 2026
@codecov

codecov Bot commented Apr 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@cypress

cypress Bot commented Apr 26, 2026

Copy link
Copy Markdown

Activity    Run #4102

Run Properties:  status check passed Passed #4102  •  git commit 070df4c99d: [stable32] Fix npm audit
Project Activity
Branch Review automated/noid/stable32-fix-npm-audit
Run status status check passed Passed #4102
Run duration 02m 20s
Commit git commit 070df4c99d: [stable32] Fix npm audit
Committer Nextcloud Command Bot
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 1
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 9
View all changes introduced in this branch ↗︎

@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from bb72b5a to f6c145b Compare May 3, 2026 04:09
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from f6c145b to 8c97e47 Compare May 10, 2026 04:12
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 8c97e47 to ff8e36c Compare May 17, 2026 04:17
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch 2 times, most recently from b283b3b to 2376162 Compare May 31, 2026 04:22
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 2376162 to 8e7d8d2 Compare June 7, 2026 04:23
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from 8e7d8d2 to 5cb93df Compare June 21, 2026 04:22
@AndyScherzinger AndyScherzinger added this to the Nextcloud 32.0.13 milestone Jul 7, 2026
Signed-off-by: GitHub <noreply@github.com>
@nextcloud-command
nextcloud-command force-pushed the automated/noid/stable32-fix-npm-audit branch from a26b59f to 164d525 Compare August 9, 2026 10:12
@AndyScherzinger
AndyScherzinger merged commit 2359dd5 into stable32 Aug 9, 2026
56 of 58 checks passed
@AndyScherzinger
AndyScherzinger deleted the automated/noid/stable32-fix-npm-audit branch August 9, 2026 10:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants