Skip to content

fix(deps): vuln ws (patch → 7.5.11) #2361

Merged
Drarig29 merged 2 commits into
masterfrom
engraver-auto-version-upgrade/minorpatch/npm/3-1781556597
Jun 24, 2026
Merged

fix(deps): vuln ws (patch → 7.5.11) #2361
Drarig29 merged 2 commits into
masterfrom
engraver-auto-version-upgrade/minorpatch/npm/3-1781556597

Conversation

@gh-worker-campaigns-3e9aa4

@gh-worker-campaigns-3e9aa4 gh-worker-campaigns-3e9aa4 Bot commented Jun 15, 2026

Copy link
Copy Markdown
Contributor

Summary: High-severity security update — 1 package upgraded (patch changes only)

Manifests changed:

  • . (yarn)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
ws 7.5.10 7.5.11 patch Direct 1 HIGH

Security Details

🚨 Critical & High Severity (1 fixed)
Package CVE Severity Summary Unsafe Version Fixed In
ws GHSA-96hv-2xvq-fx4p HIGH ws: Memory exhaustion DoS from tiny fragments and data chunks 7.5.10 5.2.5

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@datadog-official

datadog-official Bot commented Jun 15, 2026

Copy link
Copy Markdown

Pipelines

Fix all issues with BitsAI

⚠️ Warnings

🚦 2 Pipeline jobs failed

Continuous Integration | Test standalone binary in Alpine   View in Datadog   GitHub Actions

Continuous Integration | Test standalone binary in ARM Alpine   View in Datadog   GitHub Actions

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 52e10f4 | Docs | Datadog PR Page | Give us feedback!

@gh-worker-campaigns-3e9aa4

gh-worker-campaigns-3e9aa4 Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Auto-rebase complete

Branch is up to date with master — rebased onto d31db41.


Auto-Rebase · Add no-auto-rebase to opt out

@dd-octo-sts-150931
dd-octo-sts-150931 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/3-1781556597 branch from 3e47bb1 to ac70bed Compare June 22, 2026 15:27
@dd-octo-sts-4191dd
dd-octo-sts-4191dd Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/3-1781556597 branch from ac70bed to 1b82cd2 Compare June 22, 2026 16:29
@dd-octo-sts-c33ac5
dd-octo-sts-c33ac5 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/3-1781556597 branch from 1b82cd2 to f7da21f Compare June 22, 2026 17:04
@dd-octo-sts-4caf68
dd-octo-sts-4caf68 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/3-1781556597 branch from f7da21f to 23e58fd Compare June 22, 2026 18:44
@dd-octo-sts-0c48d7
dd-octo-sts-0c48d7 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/3-1781556597 branch from 23e58fd to fb0d3d3 Compare June 22, 2026 19:24
@dd-octo-sts-4caf68
dd-octo-sts-4caf68 Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/3-1781556597 branch 2 times, most recently from e1e855c to e9afb15 Compare June 23, 2026 08:42
Co-authored-by: dd-octo-sts-4caf68[bot] <266798483+dd-octo-sts-4caf68[bot]@users.noreply.github.com>
@dd-octo-sts-98cdbc
dd-octo-sts-98cdbc Bot force-pushed the engraver-auto-version-upgrade/minorpatch/npm/3-1781556597 branch from e9afb15 to 636ef85 Compare June 23, 2026 14:31
@Drarig29
Drarig29 merged commit c01d8bf into master Jun 24, 2026
61 of 65 checks passed
@Drarig29
Drarig29 deleted the engraver-auto-version-upgrade/minorpatch/npm/3-1781556597 branch June 24, 2026 09:27
@ava-silver ava-silver mentioned this pull request Jun 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant