Skip to content

fix(deps): update launch-editor to address high security vulnerability - #469

Merged
igoroctaviano merged 1 commit into
masterfrom
fix/dependabot-launch-editor-2.14.2
Oct 26, 2026
Merged

igoroctaviano merged 1 commit into
masterfrom
fix/dependabot-launch-editor-2.14.2

Conversation

@igoroctaviano

Copy link
Copy Markdown
Collaborator

Fixes the high-severity Dependabot alert raised after #468 merged, by overriding the transitive dependency in pnpm-workspace.yaml:

Package From To Advisory
launch-editor 2.14.1 2.14.2 GHSA-587h-7wmj-h5pm

It's a dev-only dependency, pulled in by webpack-dev-server. Only pnpm-workspace.yaml and pnpm-lock.yaml change.

@sonarqubecloud

Copy link
Copy Markdown

@deepsource-io

deepsource-io Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in b8f8066...b8c1126 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
JavaScript Oct 26, 2026 4:59p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@github-actions

Copy link
Copy Markdown

📦 Firebase Preview - Using Published DMV

This preview is using the published dicom-microscopy-viewer from package.json:

Version ^0.49.0

To link a DMV branch for testing (requires an open PR in DMV):

  • Add dmv-branch: <branch-name> to the PR description, OR
  • Use the same branch name in both repos (automatic matching)

@github-actions

Copy link
Copy Markdown

Visit the preview URL for this PR (updated for commit b8c1126):

https://idc-external-006--pr469-fix-dependabot-launc-dh0olv6i.web.app

(expires Mon, 02 Nov 2026 17:01:10 GMT)

🔥 via Firebase Hosting GitHub Action 🌎

Sign: 88aacecd98ba54d2f9c8d201a9444e43d1ad8307

@igoroctaviano
igoroctaviano merged commit 092b34f into master Oct 26, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant