stacklok / toolhive-studio / 27779811784

71%

push

github

fix(security): override dompurify >=3.4.11, jsdom>undici >=7.28.0 (#2323)

* fix(security): override dompurify >=3.4.11, jsdom>undici >=7.28.0 (GHSA-cmwh-pvxp-8882, GHSA-vmh5-mc38-953g, GHSA-pr7r-676h-xcf6)

* fix(security): constrain jsdom>undici to <8 to avoid breaking file layout change

undici 8.x removed lib/handler/wrap-handler.js which jsdom@29 requires,
causing all vitest workers to crash with MODULE_NOT_FOUND.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Eleftheria Stein-Kousathana <eleftheria@stacklok.com>
Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

5231 of 8006 branches covered (65.34%)

7753 of 10937 relevant lines covered (70.89%)

115.0 hits per line