Skip to content

fix: update @vercel/analytics to resolve Nuxt CVEs#163

Draft
dannyneira wants to merge 1 commit into
mainfrom
independabot/nuxt-nitro-server-CVE-2026-47200
Draft

fix: update @vercel/analytics to resolve Nuxt CVEs#163
dannyneira wants to merge 1 commit into
mainfrom
independabot/nuxt-nitro-server-CVE-2026-47200

Conversation

@dannyneira
Copy link
Copy Markdown
Member

Summary

  • Update @vercel/analytics from ^2.0.0 to ^2.0.1.
  • Remove the auto-installed Nuxt peer dependency tree from package-lock.json because @vercel/analytics@2.0.1 marks nuxt as optional.
  • Resolve the transitive @nuxt/nitro-server Dependabot alerts without adding overrides.

Dependabot alerts resolved

Advisories

Verification

  • npx -y npm@10 --prefix /workspace/independabot/docs ci
  • npx -y npm@10 --prefix /workspace/independabot/docs audit --json no longer reports nuxt or @nuxt/nitro-server.
  • npm --prefix /workspace/independabot/docs run typecheck completed with 0 errors.
  • npm --prefix /workspace/independabot/docs run build completed successfully.

Conversation: https://staging.warp.dev/conversation/79e9ea5c-ebe9-48ed-badb-67c5d48cd4d2
Run: https://oz.staging.warp.dev/runs/019e7ec3-80e6-7d0a-9b4a-bc409953b38b
This PR was generated with Oz.

Co-Authored-By: Oz <oz-agent@warp.dev>
@dannyneira dannyneira requested a review from hongyi-chen May 31, 2026 16:08
@cla-bot cla-bot Bot added the cla-signed label May 31, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented May 31, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs Ready Ready Preview, Comment May 31, 2026 4:11pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants