Skip to content

fix: regenerate lockfile to apply npm overrides#550

Merged
heyitsaamir merged 1 commit into
mainfrom
fix/regenerate-lockfile-with-overrides
Apr 30, 2026
Merged

fix: regenerate lockfile to apply npm overrides#550
heyitsaamir merged 1 commit into
mainfrom
fix/regenerate-lockfile-with-overrides

Conversation

@heyitsaamir

@heyitsaamir heyitsaamir commented Apr 30, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • the previous audit fix PR (fix: address npm audit vulnerabilities #546) merged overrides for follow-redirects and path-to-regexp, but the lockfile merge resolved from main without them applied
  • clean rm -rf node_modules package-lock.json && npm install to get overrides into the lockfile
  • drops audit from 26 vulns (3 high, 1 critical) → 14 (0 high, 0 critical). remaining 14 are all upstream botbuilder/azure uuid+elliptic

Test plan

  • npm audit — 14 remaining, 0 high, 0 critical
  • npm run build — all tasks pass
  • npm run test — all test suites pass
  • verify examples still build: examples/echo, examples/botbuilder, examples/a2a

previous merge resolved the lockfile from main without applying overrides for follow-redirects and path-to-regexp. clean reinstall to get from 26 → 14 vulns (0 high, 0 critical).

Co-Authored-By: Claude <[email protected]>
Copilot AI review requested due to automatic review settings April 30, 2026 20:46

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@heyitsaamir
heyitsaamir merged commit 48b13ed into main Apr 30, 2026
7 checks passed
@heyitsaamir
heyitsaamir deleted the fix/regenerate-lockfile-with-overrides branch April 30, 2026 21:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants