• Joined on 2026-02-23
maximus pushed tag v1.6.6 to maximus/simpl-liste 2026-08-12 18:21:02 +00:00
maximus pushed to master at maximus/simpl-liste 2026-08-12 18:21:00 +00:00
b9f45be8df chore: bump version to 1.6.6 (versionCode 18)
maximus deleted branch issue-103-babel-brace-overrides from maximus/simpl-liste 2026-08-12 18:14:20 +00:00
maximus pushed to master at maximus/simpl-liste 2026-08-12 18:14:19 +00:00
96adf00495 Merge pull request 'fix(security): resolve brace-expansion + @babel/core via version-scoped overrides' (#111) from issue-103-babel-brace-overrides into master
98cd423a50 fix(security): resolve brace-expansion + @babel/core via version-scoped overrides
Compare 2 commits »
maximus merged pull request maximus/simpl-liste#111 2026-08-12 18:14:18 +00:00
fix(security): resolve brace-expansion + @babel/core via version-scoped overrides
maximus closed issue maximus/simpl-liste#103 2026-08-12 18:14:18 +00:00
[security] deps: vulnerability in brace-expansion (high)
maximus closed issue maximus/simpl-liste#110 2026-08-12 18:14:18 +00:00
[security] deps: vulnerability in @babel/core (low)
maximus commented on pull request maximus/simpl-liste#111 2026-08-12 18:12:58 +00:00
fix(security): resolve brace-expansion + @babel/core via version-scoped overrides

Review — APPROVE

Override de sécurité propre et ciblé : 2 fichiers touchés (package.json + package-lock.json), diff lock strictement symétrique (102/102 lignes, 22 bumps de version,…

maximus created pull request maximus/simpl-liste#111 2026-08-12 18:07:12 +00:00
fix(security): resolve brace-expansion + @babel/core via version-scoped overrides
maximus created branch issue-103-babel-brace-overrides in maximus/simpl-liste 2026-08-12 18:06:52 +00:00
maximus pushed to issue-103-babel-brace-overrides at maximus/simpl-liste 2026-08-12 18:06:52 +00:00
98cd423a50 fix(security): resolve brace-expansion + @babel/core via version-scoped overrides
maximus commented on issue maximus/simpl-liste#103 2026-08-12 18:06:38 +00:00
[security] deps: vulnerability in brace-expansion (high)

Rouverte -- debloquee par la technique version-scoped

Le verdict initial (non fixable in-place) tenait pour un override blanket brace-expansion: ^5.0.8 (qui force 5.x sur minimatch@3/@9…

maximus opened issue maximus/simpl-liste#110 2026-08-12 18:06:38 +00:00
[security] deps: vulnerability in @babel/core (low)
maximus commented on issue maximus/simpl-liste#108 2026-08-12 18:06:38 +00:00
[security] deps: image-size DoS (high) -- bloque upstream, suivi

Re-verifie (passe "tout corriger")

Toujours bloque upstream. La derniere version publiee d'image-size reste 2.0.2, elle-meme dans le range vulnerable (<=2.0.2) ; aucune 2.0.3 ni…

maximus reopened issue maximus/simpl-liste#103 2026-08-12 18:06:37 +00:00
[security] deps: vulnerability in brace-expansion (high)
maximus merged pull request maximus/simpl-liste#109 2026-08-12 01:41:31 +00:00
fix(security): bump undici + js-yaml overrides to patched versions
maximus closed issue maximus/simpl-liste#106 2026-08-12 01:41:31 +00:00
[security] deps: vulnerability in undici (moderate)
maximus closed issue maximus/simpl-liste#107 2026-08-12 01:41:31 +00:00
[security] deps: vulnerability in js-yaml (high)
maximus pushed to master at maximus/simpl-liste 2026-08-12 01:41:31 +00:00
5aec3b5271 Merge pull request 'fix(security): bump undici + js-yaml overrides to patched versions' (#109) from issue-106-107-deps-overrides into master
0e4c5cdb4e fix(security): bump undici + js-yaml overrides to patched versions
Compare 2 commits »
maximus deleted branch issue-106-107-deps-overrides from maximus/simpl-liste 2026-08-12 01:41:31 +00:00