fix(deps): brace-expansion 을 올린다 — high 권고 2건 - #1047
Merged
Merged
Conversation
dev → main PR(#1046)의 CI 가 Gate 0.7(의존성 감사)에서 실패했다. 같은 커밋이 네 시간 전 dev 의 push 검사에서는 통과했다 — 그 사이에 brace-expansion 의 high 권고가 새로 나왔다. - GHSA-qhr7-859c-m2p7 중첩된 중괄호 그룹에서 재귀가 제한 없이 깊어져 스택이 고갈된다 - GHSA-6j4f-fj2g-mc7p parseCommaParts 의 같은 문제 2.1.4 → 2.1.7, 5.0.9 → 5.0.12, 1.1.18 → 1.1.21. babel-jest → test-exclude → glob·minimatch 가 끌어오는 간접 의존성이라 lockfile 만 바뀐다. npm run audit:gate 통과(허용 0건). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Contributor
평가 회귀 리포트 (
|
| 평가 | 통과율 | 통과/전체 | 베이스라인 | 상태 |
|---|---|---|---|---|
| Routing (Gate 5) | 100.0% | 120/120 | 50.0% | ✅ |
| Response (Gate 6) | 100.0% | 30/30 | 50.0% | ✅ |
| Prompt·Tool Budget (Gate 7) | 13/13 지표 | 증가율 ≤ 10% | 기준선 2026-09-16 | ✅ |
| Tool Selection (Gate 8) | 100.0% | 40/40 | 97.0% | ✅ |
| Runtime Red Team (Gate 9) | 100.0% | 18/18 | 100.0% | ✅ |
- 데이터셋 버전: routing=
0.9.0, response=0.9.0 - 베이스라인은
OMK_EVAL_PASS_THRESHOLD/OMK_EVAL_RESPONSE_THRESHOLD환경변수 기준 (이력 비교 아님) - 상세 결과: Actions 실행의
evaluation-results-3b961aed307494161d30b7179f130005ef90df4e아티팩트 참조
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
무엇을
brace-expansion의 high 권고 2건을 해소한다.package-lock.json만 바뀐다.babel-jest→babel-plugin-istanbul→test-exclude→glob·minimatch왜
dev→mainPR(#1046)의 CI 가 Gate 0.7 에서 실패했다. 같은 커밋(cf098bfa)이 네 시간 전dev의 push 검사에서는통과했다 — 코드가 아니라 그 사이에 새로 나온 권고 때문이다. 이것이
dev에 들어가야 #1046 이 통과한다.확인
npm run audit:gate→ 통과 (level high, 허용 0건).🤖 Generated with Claude Code