Dependency updates #318
Dependency updates #318
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
Pull Request Overview
This PR updates multiple dependencies for security purposes, including Astro (5.14.6 → 5.15.8), React integration packages, ESLint, and several other packages. The changes also include CSP configuration adjustments where three directives are commented out due to Astro compatibility, and formatting improvements across documentation files (adding blank lines for better readability). Security overrides for js-yaml (≥4.1.1) and tar (≥7.5.2) are also added to address vulnerabilities.
Key Changes
- Dependency updates for security patches across Astro ecosystem and dev tooling
- CSP directives commented out due to Astro framework changes
- Documentation formatting improvements with added blank lines
Reviewed Changes
Copilot reviewed 6 out of 8 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| package.json | Updates package versions and adds security overrides for js-yaml and tar |
| pnpm-lock.yaml | Lock file updates reflecting dependency version changes |
| src/config/csp.ts | Comments out three CSP directives (style-src-attr, script-src-elem, style-src-elem) with explanation |
| src/content/docs/build/indexer/txn-stream/txn-filtering.mdx | Adds blank lines after headings for improved formatting |
| src/content/docs/build/indexer/indexer-api/indexer-reference.mdx | Fixes table column alignment |
| src/content/docs/build/cli/working-with-move-contracts/transaction-simulation-sessions.mdx | Adds proper indentation in Aside components and blank lines throughout |
| src/content/docs/build/cli/working-with-move-contracts.mdx | Fixes indentation in Aside component |
| src/content/docs/build/cli/install-cli/install-cli-specific-version.mdx | Adds blank line before commented code |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Signed-off-by: Greg Nazario <greg@gnazar.io>
Updates some dependencies for security purposes.
Unfortunately, this causes the CSP to be changed.
Additionally, cleaned up formatting of files.