stacklok / toolhive-cloud-ui

78%

main: 79%

LAST BUILD ON BRANCH chore/fix-security-vulnerabilities

branch: chore/fix-security-vulnerabilities

CHANGE BRANCH

x

Reset

• chore/fix-security-vulnerabilities
• add-needs-triage-workflow
• add-playground
• add-tool-use
• agent-skills
• assistant-openrouter-models
• assistant-system-prompt
• avoid-excessive-gha-triggers
• brand-refresh
• chore-coveralls
• chore/fix-path-to-regexp-vulns
• chore/grype-config-and-vuln-fixes
• chore/improve-dockerignore-and-deps
• chore/migrate-to-new-registry-api
• chore/migrate-trivy-to-grype
• chore/min-release-age
• chore/remove-deprecated-hey-api-client-next
• ci/pin-ollama-version
• ci/release-workflows-use-github-app
• copy-prompt-composer
• doc-assistant
• docker-compose-registry-server
• dropdown-mcp-servers
• e2e-model-test
• feat-pagination-number
• feat-use-mcp-latest-version
• feat/all-registries-merge
• feat/release-app-token
• feat/releaseo-integration
• fix-better-auth-account-cookie
• fix-chat-input-prompt
• fix-claude-code-action
• fix-console-error-test
• fix-create-release-tag-check
• fix-k8s-tools-definition
• fix-mcp-sdk-vuln
• fix-openrouter-missing-apikey
• fix-refresh-token
• fix-release
• fix-rollup-vuln
• fix-style
• fix-tools-fetch
• fix-undici-vuln
• fix-vulnerability
• fix/assistant-e2e-flaky-qwen3
• fix/exclude-static-assets-from-middleware
• fix/get-latest-filtered
• fix/hardcode-oidc-provider-id
• fix/release-tag-token
• fix/release-trigger-on-published
• fix/token-refresh-infinite-redirect-db-mode
• fix/token-refresh-loop-and-logout
• handle-missing-mcp-meta
• issues/168
• issues/193
• issues/200
• issues/202
• issues/216
• issues/242
• issues/244
• issues/246
• issues/251
• issues/284
• issues/302
• issues/304
• issues/317
• issues/364
• issues/407
• issues/417
• issues/483
• issues/57
• main
• mcp-sdk-version
• refactor-assistant
• refactor-assistant-folders
• refactor-auth
• refactor-chat-message
• refresh-token-fix
• release/v0.2.0
• release/v0.3.0
• release/v0.3.1
• release/v0.3.2
• release/v0.4.0
• release/v0.4.1
• release/v0.4.2
• release/v0.4.3
• release/v0.4.4
• release/v0.5.0
• release/v0.5.1
• release/v0.6.0
• release/v0.6.1
• renovate/actions-cache-5.x
• renovate/actions-cache-digest
• renovate/actions-checkout-4.x
• renovate/actions-checkout-6.x
• renovate/actions-checkout-digest
• renovate/actions-download-artifact-digest
• renovate/actions-setup-node-6.x
• renovate/actions-upload-artifact-digest
• renovate/ai-5.x-lockfile
• renovate/ai-6.x
• renovate/ai-6.x-lockfile
• renovate/ai-sdk-mcp-0.x
• renovate/ai-sdk-mcp-1.x
• renovate/ai-sdk-mcp-1.x-lockfile
• renovate/ai-sdk-ollama-3.x
• renovate/ai-sdk-ollama-3.x-lockfile
• renovate/ai-sdk-react-2.x-lockfile
• renovate/ai-sdk-react-3.x
• renovate/ai-sdk-react-3.x-lockfile
• renovate/ajv-8.x-lockfile
• renovate/anchore-scan-action-7.x
• renovate/anthropics-claude-code-action-1.x
• renovate/aquasecurity-trivy-action-0.x
• renovate/azure-setup-helm-5.x
• renovate/better-auth-1.x
• renovate/biomejs-biome-2.x
• renovate/defu-6.x
• renovate/dexie-4.x-lockfile
• renovate/docker-build-push-action-6.x
• renovate/docker-build-push-action-7.x
• renovate/docker-login-action-4.x
• renovate/docker-setup-buildx-action-3.x
• renovate/docker-setup-buildx-action-4.x
• renovate/docker-setup-qemu-action-4.x
• renovate/dotenv-17.x-lockfile
• renovate/helm-kind-action-1.x
• renovate/hey-api-openapi-ts-0.x
• renovate/hono-4.x
• renovate/hono-node-server-1.x
• renovate/jose-6.x-lockfile
• renovate/jsdom-27.x-lockfile
• renovate/jsdom-28.x
• renovate/jsdom-29.x
• renovate/json-schema-faker-0.x
• renovate/lint-staged-16.x-lockfile
• renovate/lucide-monorepo
• renovate/major-github-artifact-actions
• renovate/major-shiki-monorepo
• renovate/modelcontextprotocol-sdk-1.x-lockfile
• renovate/msw-2.x-lockfile
• renovate/mswjs-http-middleware-0.x
• renovate/nanoid-5.x-lockfile
• renovate/nextjs-monorepo
• renovate/node-24.x-lockfile
• renovate/nuqs-2.x-lockfile
• renovate/oidc-provider-9.x-lockfile
• renovate/openrouter-ai-sdk-provider-2.x
• renovate/openrouter-ai-sdk-provider-2.x-lockfile
• renovate/openrouter-sdk-0.x
• renovate/openrouter-sdk-0.x-lockfile
• renovate/pg-8.x-lockfile
• renovate/pin-dependencies
• renovate/playwright-monorepo
• renovate/pnpm-10.x
• renovate/pnpm-action-setup-4.x
• renovate/pnpm-action-setup-5.x
• renovate/postgres-18.x
• renovate/react-monorepo
• renovate/shiki-monorepo
• renovate/sigstore-cosign-installer-4.x
• renovate/stacklok-releaseo-0.x
• renovate/stacklok-toolhive-registry-server-0.x
• renovate/streamdown-2.x
• renovate/streamdown-2.x-lockfile
• renovate/tailwind-merge-3.x
• renovate/tailwindcss-monorepo
• renovate/testing-library-monorepo
• renovate/typescript-6.x
• renovate/undici-7.x
• renovate/vite-7.x-lockfile
• renovate/vite-8.x
• renovate/vite-8.x-lockfile
• renovate/vite-tsconfig-paths-6.x
• renovate/vite-tsconfig-paths-6.x-lockfile
• renovate/vitejs-plugin-react-5.x-lockfile
• renovate/vitejs-plugin-react-6.x
• renovate/vitest-monorepo
• revert-release-v0.2.0
• run-e2e-against-prod-build
• server-title
• updates-versions

Build # 24260116560

Build Type

Pull #488

github

Committed by web-flow

Commit Message

Merge fc0ce2f76 into 9fc734127

Pull Request Pull Request #488: chore: fix security vulnerabilities in dependencies

Coverage Stats

244 of 323 branches covered (75.54%)

470 of 598 relevant lines covered (78.6%)

13.4 hits per line