fix(security): Various security patches; new GitHub release workflow; update to pnpm 12.8.1; release 3.13.11 - #6325
Conversation
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* chore(deps): update pnpm to 12.8.1 and i18next to 19.9.2 - Pin packageManager to pnpm@12.8.1 and raise engines.pnpm to >=12 in the root, .netlify and the CLI templates. - Install pnpm 12 in CircleCI and in the Dockerfile. - Update pnpm/action-setup to v6.1.0, the first release that supports pnpm v12. - Raise i18next from 17.3.1 to 19.9.2. react-i18next 12 has an i18next >=19 peer. pnpm 12 otherwise installs i18next 26 for the extensions that do not list i18next. An override holds all packages on 19.9.2. - The lockfile change makes the CircleCI security audit run. Raise the overrides for brace-expansion, fast-uri and joi, and ignore GHSA-hrh2-vp3x-79xf for decompress, which has no fixed version. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore(deps): move the i18next override next to the React 19 pins Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
…bilities. Release 3.13.11.
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review for a one-time review, or @claude review always to subscribe this PR to a review on every future push.
Tip: disable this comment in your organization's Code Review settings.
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Context
The following security patches addressed:
The following PRs cherry-picked as well:
Changes & Results
Testing
All automated checks and tests must pass.