chore(deps): raise the devalue and undici security floors

chore(deps): raise the devalue and undici security floorssona-fast/sona #492 · 1 diagram

◈ Rendered by PR Lens · crafted with ❤️ by the Coldtea team

100%

01 / 05Dependabot configuration addedMonthly PRs now group npm updates and actions with a 7-day cooldown. schedules grouped updates for npm and actions in +30 −0.
02 / 05Dependency overrides and lockfile bumpedDevalue is pinned above 5.9.3 and undici reaches 7.30.1. adds a devalue override in +3 −2 and updates +6 −6.
03 / 05Security checker floors raisedThe pre-install checker now rejects devalue under 5.9.3 and undici under 7.29.1. checks new minimum versions in +2 −1.
04 / 05Tests added for new advisory floorsUnit tests confirm the guard flags vulnerable devalue and undici releases. tests verify advisory detection in +15 −2.
05 / 05Everything this change touchedDependabot automation, manifest overrides, and lockfile security guards in one view.

esc to leave