Skip to content

fix(security): [FIX] Corrige alertas do Dependabot e do Code Scanning - #6

Merged
kelsoncm merged 1 commit into
mainfrom
issues/5
Oct 27, 2026
Merged

kelsoncm merged 1 commit into
mainfrom
issues/5

Conversation

@kelsoncm

Copy link
Copy Markdown
Contributor

Closes #5

Detalhes no commit. Pendente por exigir major: tinypool (critical) e @vitest/mocker (moderate), só no vitest 5 (Node >= 22). São dependências de desenvolvimento; atualizar exige tirar Node 18/20 da matriz do CI.

🤖 Generated with Claude Code

Motivo: zerar alertas abertos (vitest/vite/markdown-it/source-map-js etc., js/polynomial-redos e permissions do workflow).
Impacto: vitest e coverage-v8 2.x -> 3.2.x (suporta Node 18/20/22/24 da matriz de CI); Reader.js remove CR/LF finais em tempo linear; qa.yml com permissions: contents: read; versão 1.0.0 -> 1.0.1. Restam tinypool (critical) e @vitest/mocker (moderate), só corrigidos no vitest 5 (Node >= 22), que derrubaria Node 18/20 da matriz.
Arquivos: package.json, package-lock.json, src/readers/Reader.js, tests/readers.test.js, .github/workflows/qa.yml

Refs #5
@kelsoncm
kelsoncm merged commit a7395ec into main Oct 27, 2026
7 checks passed
@kelsoncm
kelsoncm deleted the issues/5 branch October 27, 2026 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Corrigir alertas de segurança (Dependabot e Code Scanning)

1 participant