Skip to content

chore(deps): bump source-map-js in obsidian lockfile - #5317

Merged
cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261006-npm-obsidian
Oct 6, 2026
Merged

cdbartholomew merged 1 commit into
mainfrom
chore/security-daily-20261006-npm-obsidian

Conversation

@cdbartholomew

Copy link
Copy Markdown
Contributor

Routine dependency maintenance for hindsight-integrations/obsidian/package-lock.json.

Closes Dependabot alert #1814

  • source-map-js 1.2.1 → 1.2.2. This is an in-range update: the parent (postcss) declares ^1.2.1, so the manifest is unchanged.

Verification (npm 10.9.2, as CI)

  • npm ci from the committed lockfile: OK
  • npm install --no-audit --no-fund (what CI runs): lockfile untouched
  • npx tsc --noEmit, npm run build and npm test where the package defines them: all pass (113 passed (113))

@cdbartholomew cdbartholomew added security Security / dependency vulnerability remediation p1 High severity - remediate within 30 days labels Oct 6, 2026
@cdbartholomew cdbartholomew self-assigned this Oct 6, 2026
@cdbartholomew cdbartholomew added security Security / dependency vulnerability remediation p1 High severity - remediate within 30 days labels Oct 6, 2026
@cdbartholomew

Copy link
Copy Markdown
Contributor Author

Merging over a known, pre-existing build-docs failure. It is unrelated to this lockfile-only change.

build-docs fails at its first step, node hindsight-docs/scripts/check-integrations.mjs, before any dependency is installed:

[integrations] ❌ Changelog pages not linked from their doc page:
  agno — add [View Changelog →](/changelog/integrations/agno)

Why this is pre-existing:

Every other check that ran on this PR passed, including the job(s) that cover the changed lockfile.

@cdbartholomew
cdbartholomew merged commit bf63159 into main Oct 6, 2026
198 of 200 checks passed
@cdbartholomew
cdbartholomew deleted the chore/security-daily-20261006-npm-obsidian branch October 6, 2026 15:37
@nicoloboschi nicoloboschi mentioned this pull request Nov 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

p1 High severity - remediate within 30 days security Security / dependency vulnerability remediation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant