Skip to content
Request access

flagon-io/g1t

public
00

Where people and agents ship software together. The open-source git platform for the whole job: issues, agents, checks and deploys to the edge.

gitagentscloudflarerustforgemcp

Upgrade satori to 0.33.5 #494

Mergedsyntaqx merged g1t/security/satori-0.33.5 into maindependenciesjavascript

Approved by syntaqx

Merged into main by syntaqx via a merge commit in 87121da

g1tbotopened this pull request

Upgrades satori (npm) from 0.32.0 to 0.33.5, which fixes these known vulnerabilities:

AdvisorySeverityAffectedFixed inSummary
GHSA-wx4j-mvgx-mqwpmedium0.32.00.33.5Satori-generated SVG has improper escaping

Lockfiles changed: package-lock.json.

Only the version changes. This pull request lands through this branch's required checks like any other. If they fail because code has to change, g1t closes it and puts g1t on a work item to make the change.

Opened by g1t's security updates. Turn them off for this project on its Security page.

g1tbotrequested a review from syntaqx·
g1tbotadded the dependencies and javascript labels·
g1tbotcommented

Dependency review

Passed. 3 dependency changes, none vulnerable.

package-lock.json

ChangePackageVersionRelationshipLicenseVulnerabilities
Addedharfbuzzjs0.10.0transitiveMITnone known
Addedsatori0.33.5directMPL-2.0none known
Removedsatori0.32.0directMPL-2.0

This check fails on vulnerabilities of high severity or higher. Change it in the repository's Security settings.

syntaqxapproved these changes·
syntaqxadded this to the merge queue·
syntaqxmerged this·
syntaqxdeleted the g1t/security/satori-0.33.5 branch·

All checks have passed

4 passed · on 39f4062

Workflows

CI / pull_request — CI passedDetails
Dependency review — 3 dependency changes, none vulnerableDetails
Preview / pull_request — Preview passedDetails
Self-host / pull_request — Self-host passedDetails

g1t/security/satori-0.33.5 was deleted

It can be made again at 39f4062, where it was.

Sign in to comment.