Skip to content

Comments

chore: fix security vulnerabilities, updates husky hook#15

Merged
vigneshrajsb merged 2 commits intoGoodRxOSS:mainfrom
vigneshrajsb:fix-security-vulns
Jun 27, 2025
Merged

chore: fix security vulnerabilities, updates husky hook#15
vigneshrajsb merged 2 commits intoGoodRxOSS:mainfrom
vigneshrajsb:fix-security-vulns

Conversation

@vigneshrajsb
Copy link
Contributor

What

  • Update versions for security vulnerability patches
  • removes unused packages
  • updates husky commit-msg hook

@vigneshrajsb vigneshrajsb requested a review from a team as a code owner June 26, 2025 23:59
@vigneshrajsb vigneshrajsb requested a review from Copilot June 26, 2025 23:59
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates various dependencies to patch security vulnerabilities, removes unused packages, and updates husky hooks to improve commit validation.

  • Upgraded dependency versions and removed unused packages in package.json.
  • Added a pnpm overrides block to enforce a specific @kubernetes/client-node version.
  • Updated husky hooks by removing commitlint from pre-commit and adding a dedicated commit-msg hook.

Reviewed Changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File Description
package.json Updated dependency versions, removed unused packages, and added a pnpm overrides block.
.husky/pre-commit Removed commitlint invocation, leaving only lint-staged.
.husky/commit-msg Added a new commit-msg hook to run commitlint.
Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported
Comments suppressed due to low confidence (2)

package.json:207

  • [nitpick] Consider adding a comment to clarify the need for the pnpm overrides block, as it enforces the version of @kubernetes/client-node even though the dependency is already updated.
  "pnpm": {

.husky/pre-commit:4

  • [nitpick] The commitlint command was removed from the pre-commit hook; please confirm that running commitlint solely in the commit-msg hook is the intended behavior to avoid accidental omission of commit message validation.
npx lint-staged

@vigneshrajsb vigneshrajsb merged commit 00d90fc into GoodRxOSS:main Jun 27, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants