22971559577

Committed 11 Mar 2026 07:52PM UTC coverage: 89.311% (+0.004%) from 89.307%

Build # 22971559577

Build Type

push

github

Committed by

web-flow

Commit Message

fix(security): redact API key from logs + audit fix dev deps (#1931)

* fix(security): redact API key from logger output

The logger serialized the full request headers including X-API-KEY,
which could expose the key in console logs, log files, or
observability tools. Strip the key before logging.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore(deps): npm audit fix for dev dependency patches

Resolves 8 of 10 dev dependency vulnerabilities (ReDoS in minimatch,
babel, ajv, brace-expansion, diff; prototype pollution in lodash,
js-yaml). Remaining 2 (serialize-javascript via mocha) require a
breaking major version upgrade.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Coverage Stats

526 of 711 branches covered (73.98%)

Branch coverage included in aggregate %.

4763 of 5211 relevant lines covered (91.4%)

4.03 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

67.33

/src/api/api.ts

Build SHA Not Found

The commit SHA "1e50e90afed4a54b488bf1b953041ec2e84272d1" was not found in your repository, so the file cannot be loaded. This may be because you posted from a local development environment, or your CI created an ephemeral commit.

ProjectOpenSea / opensea-js / 22971559577

Source File Press 'n' to go to next uncovered line, 'b' for previous

Build SHA Not Found

Source File
Press 'n' to go to next uncovered line, 'b' for previous