Skip to content

Updates doc build dependencies to avoid vulnerabilities#429

Merged
anarthal merged 1 commit into
boostorg:developfrom
anarthal:feature/update-doc-packages
Jun 19, 2026
Merged

Updates doc build dependencies to avoid vulnerabilities#429
anarthal merged 1 commit into
boostorg:developfrom
anarthal:feature/update-doc-packages

Conversation

@anarthal

Copy link
Copy Markdown
Collaborator

Updates antora to 3.1.15
Upgrades Axios from 1.13, which had a critical security vulnerability, to 1.16

@cppalliance-bot

Copy link
Copy Markdown

An automated preview of the documentation is available at https://429.redis.prtest3.cppalliance.org/libs/redis/doc/html/index.html

If more commits are pushed to the pull request, the docs will rebuild at the same URL.

2026-06-18 09:17:02 UTC

@mborland

Copy link
Copy Markdown
Member

Since I saw you post about this on the ML, have you considered enabling Dependabot on the repo? Then these dependencies and vulnerabilities are automatically taken care of. It's worked pretty well for me on Decimal. You enable it in the settings and then you can put together a trivial yaml file like this: https://github.com/boostorg/decimal/blob/develop/.github/dependabot.yml. Grouped updates really reduces noise.

@anarthal

Copy link
Copy Markdown
Collaborator Author

I see. Thanks for sharing @mborland. The neat thing is that I've been receiving emails from dependabot since forever, and I've always thought they related to the benchmark programs and ignoring them. Re-reading them again, it looks like the tokio version used in the Rust benchmarks is also flagged. I suspect if I enable dependabot now, it will try to fix it, too.

@mzimbres I recall that your intention was to completely extract the benchmarks out of this repo, which would solve the problem. How is it going? Can I help anyhow?

@anarthal anarthal merged commit 62b0024 into boostorg:develop Jun 19, 2026
40 checks passed
@anarthal anarthal deleted the feature/update-doc-packages branch June 19, 2026 11:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants