stacklok / toolhive-studio / 27720791520

71%

push

github

fix(root): add always-present drag region so window is movable on chrome-less routes (#2316) (#2317)

* fix(root): add always-present drag region so window is movable on chrome-less routes (#2316)

* fix(security): override hono >=4.12.25, dompurify, @opentelemetry/core

Bump hono override to >=4.12.25 and add dompurify >=3.4.7 and
@opentelemetry/core >=2.8.0 overrides to clear pnpm audit findings
(GHSA-88fw-hqm2-52qc and others). Resolves 14 transitive vulns to 1 low.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(security): dedupe overrides after merging main

The PR-merge ref combined this branch's dompurify/@opentelemetry/core
overrides with main's, producing duplicate YAML keys that pnpm rejected
during setup. Drop the duplicates (keep main's higher dompurify >=3.4.9),
retaining only the unique hono >=4.12.25 bump from this branch.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(security): cap @babel/core override below 8.0 to fix build

The unbounded '@babel/core': '>=7.29.6' override (merged from main)
resolved to the just-published Babel 8.0.0, whose breaking removal of
Scope#references crashes the Vite/Babel transform during electron-forge
make on all platforms. Bound the range to '>=7.29.6 <8.0.0' so it still
patches GHSA-4x5r-pxfx-6jf8 while staying on the 7.x line.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Reynier Ortiz Vega <reynier@stacklok.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

5231 of 8006 branches covered (65.34%)

7753 of 10937 relevant lines covered (70.89%)

115.03 hits per line