TLLX/CHAT-TLLX
Watch
3
0
Fork
You've already forked CHAT-TLLX
 0
Code Issues Pull requests 1 Releases 54 Activity Actions

fix(ci): update audited nanoid override #56

Merged
LHa merged 1 commit from fix/nanoid-audit-3-3-18 into main 2026-08-15 16:19:53 +00:00
Conversation 0 Commits 1 Files changed 4 +7 -7
LHa commented 2026-08-15 16:13:57 +00:00
Owner
Copy link

Problem

The newly published GHSA-2v37-7h3g-55p8 advisory makes the required npm audit --audit-level=moderate CI step fail on unchanged main. ChatTLLX intentionally pinned Excalidraw’s Nano ID dependency to 3.3.17.

Change

  • pin the reviewed Excalidraw override to patched nanoid 3.3.18
  • refresh the lockfile integrity and third-party inventory
  • advance the exact dependency-policy assertion

No application behavior or public interface changes.

Verification

  • npm audit --audit-level=moderate: 0 vulnerabilities
  • lint, architecture, i18n, docs, licenses and public checks: green
  • unit: 795 passed, 2 expected skips
  • PostgreSQL integration: green
  • UI smoke: desktop, mobile and boot green
## Problem The newly published GHSA-2v37-7h3g-55p8 advisory makes the required `npm audit --audit-level=moderate` CI step fail on unchanged `main`. ChatTLLX intentionally pinned Excalidraw’s Nano ID dependency to 3.3.17. ## Change - pin the reviewed Excalidraw override to patched `nanoid` 3.3.18 - refresh the lockfile integrity and third-party inventory - advance the exact dependency-policy assertion No application behavior or public interface changes. ## Verification - `npm audit --audit-level=moderate`: 0 vulnerabilities - lint, architecture, i18n, docs, licenses and public checks: green - unit: 795 passed, 2 expected skips - PostgreSQL integration: green - UI smoke: desktop, mobile and boot green
fix(ci): update audited nanoid override
Some checks failed
CI / Safe checks (pull_request) Successful in 5m35s
Details
Container images / Build temporary amd64 candidates (push) Failing after 12m32s
Details
Container images / Smoke-test App candidate (push) Has been skipped
Details
Container images / Smoke-test Whisper candidate (push) Has been skipped
Details
Container images / Publish immutable amd64 candidates (push) Has been skipped
Details
4a5fe5187a
LHa merged commit 4a5fe5187a into main 2026-08-15 16:19:53 +00:00
LHa deleted branch fix/nanoid-audit-3-3-18 2026-08-15 16:19:53 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
TLLX/CHAT-TLLX!56
No description provided.