Skip to content

Snyk fix and npm audit fix for all extensions. #575

Merged
PriteshJain merged 26 commits intomasterfrom
fix/snyk-fixes-dec-25
Dec 23, 2025
Merged

Snyk fix and npm audit fix for all extensions. #575
PriteshJain merged 26 commits intomasterfrom
fix/snyk-fixes-dec-25

Conversation

@anupsingh244
Copy link
Contributor

@anupsingh244 anupsingh244 commented Dec 19, 2025

chore: Security fixes and build tool modernization

  • Update axios, googleapis, and 50+ dependencies
  • Migrate React apps to Vite 7
  • Upgrade Gulp 4 → 5 across extensions
  • Update RTE plugins to Venus Components 3.x
  • Fix CSS typo in highlight plugin
  • Remove audience-app (moved to separate repo)

@anupsingh244 anupsingh244 requested a review from a team as a code owner December 19, 2025 14:00
PriteshJain
PriteshJain previously approved these changes Dec 19, 2025
- Replace deprecated gulp-inline with gulp-inline-source
- Add npm overrides for nth-check, terser, and svgo
- Update gulpfile and source HTML for new inline-source API
- All 7 high-severity vulnerabilities resolved
- Upgrade Vite from 5.x to 7.3.0 (fixes esbuild CVE-2024-XXXX)
- Upgrade @types/node from 16.x to 22.x (Node 22/24 compatibility)
- Update TypeScript target from ES2020 to ES2022
- Add @babel/runtime override to fix nested dependency vulnerabilities
- All npm audit issues resolved (0 vulnerabilities)
@PriteshJain PriteshJain requested a review from a team December 23, 2025 09:08
Copy link
Contributor

@rahul-contentstack rahul-contentstack left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@PriteshJain PriteshJain merged commit 07259ef into master Dec 23, 2025
6 of 7 checks passed
@PriteshJain PriteshJain deleted the fix/snyk-fixes-dec-25 branch December 23, 2025 09:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants