Skip to content

Update dependencies#494

Open
morganchen12 wants to merge 2 commits into
masterfrom
mc/updates
Open

Update dependencies#494
morganchen12 wants to merge 2 commits into
masterfrom
mc/updates

Conversation

@morganchen12

Copy link
Copy Markdown
Contributor

No description provided.

@wiz-9635d3485b

Copy link
Copy Markdown

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 1 High
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 1 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates dependency versions in both the frontend and functions packages, alongside minor code formatting adjustments. However, the review highlights critical issues with the dependency upgrades: several specified versions do not exist on npm (including @docsearch/js, eslint, firebase, nuxt, vue, cheerio, @types/node, and prettier), which will break package installation. Furthermore, upgrading marked, parse-link-header, and url-join to ESM-only versions will cause runtime crashes in the project's CommonJS environment.

Comment thread frontend/package.json
Comment thread frontend/package.json
Comment thread frontend/package.json
Comment thread frontend/package.json
Comment thread frontend/package.json
Comment thread functions/package.json
Comment thread functions/package.json
Comment thread functions/package.json
Comment thread functions/package.json
Comment thread functions/package.json
@morganchen12 morganchen12 requested a review from hsubox76 June 24, 2026 23:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant