Fresh advisory-rot round (same class as #5417, hours after #5418 cleared the last one):
Observed on docs-only PR #5422 (touches no lockfiles); security-audit is a required gate so every open PR is blocked. Fix per the established recipe: npm audit fix --package-lock-only per affected dir (lockfile-only, package.json ranges unchanged), verify each leg with node .github/scripts/audit-production-dependencies.mjs, keep the root esbuild override arrangement intact (guarded by tests/security-audit-baseline.test.mjs).
https://claude.ai/code/session_01AKbRZXV6kKe8MTYpKZSLBM
Fresh advisory-rot round (same class as #5417, hours after #5418 cleared the last one):
sharp(high) → failsaudit-lockfile (root)andaudit-lockfile (blog-site)fast-xml-parser(high) → failsaudit-lockfile (scripts)Observed on docs-only PR #5422 (touches no lockfiles);
security-auditis a required gate so every open PR is blocked. Fix per the established recipe:npm audit fix --package-lock-onlyper affected dir (lockfile-only, package.json ranges unchanged), verify each leg withnode .github/scripts/audit-production-dependencies.mjs, keep the root esbuild override arrangement intact (guarded by tests/security-audit-baseline.test.mjs).https://claude.ai/code/session_01AKbRZXV6kKe8MTYpKZSLBM