Skip to content

[Security] NPM: Add Glob Dependency Version + String Escaping #7271

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
deeleeramone merged 1 commit into from
Nov 24, 2025
Merged

[Security] NPM: Add Glob Dependency Version + String Escaping #7271

deeleeramone merged 1 commit into from
Nov 24, 2025
+430 −181

Conversation

@deeleeramone
Copy link
Contributor

@deeleeramone deeleeramone commented Nov 20, 2025

This PR closes all open security items:

  • Dependabot: Adds Glob as a dependency as an alternative to bumping Tailwinds to V4.
  • CodeQL: Adds escape sequence to the Apple Tell execution in /desktop/src/routes/environments.tsx

There is no impact expected as a result of the changes.

@deeleeramone deeleeramone added bug Bugs and bug fixes dependencies Work related to dependencies security labels Nov 20, 2025
@deeleeramone deeleeramone requested a review from piiq November 20, 2025 05:55
@piiq piiq added the P2 label Nov 24, 2025
@deeleeramone deeleeramone added this pull request to the merge queue Nov 24, 2025
Merged via the queue into develop with commit ec4f445 Nov 24, 2025
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@piiq piiq piiq approved these changes

Assignees

@deeleeramone deeleeramone

Labels

bug Bugs and bug fixes dependencies Work related to dependencies P2 security

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@deeleeramone @piiq