Skip to content

SYN-674: Fix high vulnerabilities in example dependencies - #60

Merged
KARSE22 merged 4 commits into
mainfrom
chore/SYN-674/high-vulnerabilities-only
Sep 21, 2026
Merged

KARSE22 merged 4 commits into
mainfrom
chore/SYN-674/high-vulnerabilities-only

Conversation

@KARSE22

@KARSE22 KARSE22 commented Sep 16, 2026 •

Copy link
Copy Markdown
Collaborator

SYN-674

Updates the example dependencies to clear the High findings while keeping CRA. Also fixes compatible Moderate/Low findings without adding more overrides. Only the example manifest and lockfile change.

Approach

Uses three overrides for the SVG loader, URL loader, and serializer. Updates CRA's Babel preset to declare its existing plugin dependency, and refreshes webpack within CRA's allowed range. The serializer requires Node 20+, matching the repository minimum.

Validation

  • Clean installs, tests, and lint passed. Example builds passed on Node 20 and 24, including relative PUBLIC_URL paths.
  • Mocked Chrome checks passed for autocomplete, autofill, and edits in development and production. SVG/CSS loader, minifier, cookie, redirect, and glob comparisons passed.
  • npm audits show zero High/Critical findings in both packages. Remaining: example 5 Moderate / 9 Low; root 1 Low.

@KARSE22
KARSE22 marked this pull request as ready for review September 17, 2026 13:53
@KARSE22
KARSE22 merged commit 3dcfedc into main Sep 21, 2026
4 checks passed
@KARSE22
KARSE22 deleted the chore/SYN-674/high-vulnerabilities-only branch September 21, 2026 21:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants