• Joined on 2026-02-23
maximus commented on pull request maximus/simpl-liste#116 2026-09-04 20:35:39 +00:00
fix(security): raise browserslist floor to 4.28.7 via override

Correction — « bundle au hash identique »

Le tableau de vérifications de cette PR affirme que expo export produit un bundle Hermes au hash identique avant/après le bump. **C'est…

maximus pushed to master at maximus/simpl-liste 2026-09-04 20:27:41 +00:00
813b9de2ea Merge pull request 'fix(security): raise browserslist floor to 4.28.7 via override' (#116) from issue-115-browserslist-4.28.7 into master
5e7a566155 fix(security): raise browserslist floor to 4.28.7 via override
Compare 2 commits »
maximus merged pull request maximus/simpl-liste#116 2026-09-04 20:27:39 +00:00
fix(security): raise browserslist floor to 4.28.7 via override
maximus closed issue maximus/simpl-liste#115 2026-09-04 20:27:39 +00:00
[security] deps: browserslist OOM + prototype write (high) -- corrigeable, 4.28.7
maximus pushed to master at maximus/simpl-liste 2026-09-04 20:25:09 +00:00
dfd4004cdc state: sync after #108 and #115
maximus created pull request maximus/simpl-liste#116 2026-09-04 20:24:17 +00:00
fix(security): raise browserslist floor to 4.28.7 via override
maximus created branch issue-115-browserslist-4.28.7 in maximus/simpl-liste 2026-09-04 20:23:50 +00:00
maximus pushed to issue-115-browserslist-4.28.7 at maximus/simpl-liste 2026-09-04 20:23:50 +00:00
5e7a566155 fix(security): raise browserslist floor to 4.28.7 via override
maximus opened issue maximus/simpl-liste#115 2026-09-04 20:19:08 +00:00
[security] deps: browserslist OOM + prototype write (high) -- corrigeable, 4.28.7
maximus commented on pull request maximus/simpl-liste#113 2026-09-04 20:18:29 +00:00
fix(deps): audit fix @react-native/community-cli-plugin HIGH

Fermée sans merge — la vulnérabilité visée est corrigée autrement, par #114 (mergée).

Trois raisons :

  1. Ne corrige pas ce qu'elle annonce. Le diff est limité à package-lock.json…
maximus closed pull request maximus/simpl-liste#113 2026-09-04 20:18:29 +00:00
fix(deps): audit fix @react-native/community-cli-plugin HIGH
maximus merged pull request maximus/simpl-liste#114 2026-09-04 20:16:41 +00:00
fix(security): drop image-size via metro 0.83.8 overrides
maximus closed issue maximus/simpl-liste#108 2026-09-04 20:16:41 +00:00
[security] deps: image-size DoS (high) -- bloque upstream, suivi
maximus pushed to master at maximus/simpl-liste 2026-09-04 20:16:41 +00:00
eff15ca9b8 Merge pull request 'fix(security): drop image-size via metro 0.83.8 overrides' (#114) from issue-108-metro-0.83.8 into master
290c4e5e2f fix(security): drop image-size via metro 0.83.8 overrides
Compare 2 commits »
maximus pushed to main at maximus/Simpl-Resultat 2026-09-04 20:11:38 +00:00
65f6c778a4 state: sync after #343/#344 (daily audit was red for 17 days, now green)
maximus opened issue maximus/Simpl-Resultat#345 2026-09-04 20:09:30 +00:00
deps: domicilier la contrainte windows-sys 0.61.2 — elle ne vit que dans STATE.md et sera régressée au prochain cargo update
maximus commented on pull request maximus/simpl-liste#114 2026-09-04 20:09:27 +00:00
fix(security): drop image-size via metro 0.83.8 overrides

Verdict : APPROVE

Chaque affirmation du corps de la PR a été reproduite indépendamment — audit, arbre de dépendances, lockfile, tests, export et serveur de dev (surface que le corps…

maximus deleted branch issue-343-h2-rustsec-2026-0258 from maximus/Simpl-Resultat 2026-09-04 20:08:21 +00:00
maximus pushed to main at maximus/Simpl-Resultat 2026-09-04 20:08:20 +00:00
5154c5276b fix(deps): update h2 to 0.4.19 to clear RUSTSEC-2026-0258
maximus merged pull request maximus/Simpl-Resultat#344 2026-09-04 20:08:19 +00:00
fix(deps): update h2 to 0.4.19 to clear RUSTSEC-2026-0258