Dependabot/npm and yarn/npm and yarn f3562b46b9#1084

Open

Wbaker7702 wants to merge 126 commits into

thecartercenter:mainfrom

Wbaker7702:dependabot/npm_and_yarn/npm_and_yarn-f3562b46b9

Commits on Sep 26, 2025

Merge pull request #91 from Wbaker7702/snyk-upgrade-37e9b7431e6b54f176c5bc70b9f872c7
Wbaker7702
authored
Merge branch 'main' into snyk-upgrade-14203e4cb95051ff8d07172df422773c
Wbaker7702
authored
Merge pull request #90 from Wbaker7702/snyk-upgrade-14203e4cb95051ff8d07172df422773c
Wbaker7702
authored
Merge branch 'main' into snyk-upgrade-492865c46be53b195870ae797a06641a
Wbaker7702
authored
Merge pull request #89 from Wbaker7702/snyk-upgrade-492865c46be53b195870ae797a06641a
Wbaker7702
authored
Merge branch 'main' into snyk-upgrade-9205f62806316a37eeb007a9218cf7be
Wbaker7702
authored
Merge pull request #88 from Wbaker7702/snyk-upgrade-9205f62806316a37eeb007a9218cf7be
Wbaker7702
authored
Merge branch 'main' into snyk-upgrade-69f9219c4a1e4af19e5314e5c10c2c6c
Wbaker7702
authored
Merge pull request #87 from Wbaker7702/snyk-upgrade-69f9219c4a1e4af19e5314e5c10c2c6c
Wbaker7702
authored
Create SECURITY.md
Wbaker7702
authored
Potential fix for code scanning alert no. 29: Dependency download using unencrypted communication channel

Wbaker7702
and
github-advanced-security[bot]
authored
Merge pull request #92 from Wbaker7702/alert-autofix-29
Wbaker7702
authored
Potential fix for code scanning alert no. 2: Useless regular-expression character escape

Wbaker7702
and
github-advanced-security[bot]
authored
Merge pull request #93 from Wbaker7702/alert-autofix
Wbaker7702
authored
Potential fix for code scanning alert no. 23: Incomplete regular expression for hostnames

Wbaker7702
and
github-advanced-security[bot]
authored
Merge pull request #94 from Wbaker7702/alert-autofix-23
Wbaker7702
authored
Potential fix for code scanning alert no. 24: Clear-text storage of sensitive information

Wbaker7702
and
github-advanced-security[bot]
authored
Merge pull request #95 from Wbaker7702/alert-autofix-24
Wbaker7702
authored
Potential fix for code scanning alert no. 19: CSRF protection weakened or disabled

Wbaker7702
and
github-advanced-security[bot]
authored
Merge pull request #96 from Wbaker7702/alert-autofix-19
Wbaker7702
authored
Potential fix for code scanning alert no. 15: DOM text reinterpreted as HTML

Wbaker7702
and
github-advanced-security[bot]
authored
Merge pull request #97 from Wbaker7702/alert-autofix-16
Wbaker7702
authored
Potential fix for code scanning alert no. 28: Workflow does not contain permissions

Wbaker7702
and
github-advanced-security[bot]
authored
Merge pull request #98 from Wbaker7702/alert-autofix-28
Wbaker7702
authored
Potential fix for code scanning alert no. 21: Overly permissive regular expression range

Wbaker7702
and
github-advanced-security[bot]
authored
Merge pull request #99 from Wbaker7702/alert-autofix-21
Wbaker7702
authored

Commits on Oct 2, 2025

Commits on Oct 8, 2025

fix: Gemfile to reduce vulnerabilities
snyk-bot
committed

Commits on Oct 10, 2025

Merge pull request #101 from Wbaker7702/snyk-fix-908d87151e87cacd97d798c633c65261
Wbaker7702
authored

Commits on Oct 16, 2025

Commits on Oct 22, 2025

Commits on Oct 23, 2025

Commits on Oct 28, 2025

Commits on Nov 1, 2025

Fix JSON syntax error in package.json (#148)

Copilot
and
Wbaker7702
authored

Commits on Nov 4, 2025

Refactor: Send emails individually to recipients (#149)

Wbaker7702
and
cursoragent
authored
Refactor: Use instance_double for mailer expectations (#150)

Wbaker7702
and
cursoragent
authored
Snyk upgrade f3045ebd27d2663e76be4d021444556e (#151)

authored
Add AI validation routes and implement OpenAI service integration
root
committed
ok main
VibePocket User
committed
Build production artifacts and update webpack config
VibePocket User
committed
Add comprehensive deployment documentation with historical records
VibePocket User
committed
Add deployment summary document
VibePocket User
committed
Add comprehensive production deployment package
VibePocket User
committed
Add production package summary document
VibePocket User
committed
Build production artifacts and add summary
VibePocket User
committed
Add development deployment script and improve asset build detection
VibePocket User
committed
Add deployment execution summary
VibePocket User
committed
Add complete Docker setup with Ruby 3.3.4
VibePocket User
committed
Add Docker quick start script
VibePocket User
committed
Add Docker installation scripts and documentation
VibePocket User
committed
Fix Gemfile: Remove duplicate bootstrap gem specification
VibePocket User
committed
ok main
VibePocket User
committed
ok main
VibePocket User
committed
Add comprehensive RSpec tests and enhanced React components for AI validation
VibePocket User
committed

Commits on Nov 5, 2025

Commits on Nov 8, 2025

Commits on Nov 14, 2025

fix: upgrade cheerio from 1.0.0-rc.12 to 1.1.2 (#162)

Wbaker7702
and
snyk-bot
authored

Commits on Dec 2, 2025

Commits on Dec 3, 2025

Commits on Dec 4, 2025

build(deps): bump express in the npm_and_yarn group across 1 directory (#166)

dependabot[bot]
and
Wbaker7702
authored

Commits on Dec 12, 2025

Commits on Dec 21, 2025

build(deps): bump aws-sdk-s3 in the bundler group across 1 directory (#173)
dependabot[bot]
authored

Commits on Jan 4, 2026

Refactor: Improve AI validation and add security gems (#174)

Wbaker7702
and
cursoragent
authored

Commits on Jan 14, 2026

Commits on Jan 20, 2026

Commits on Jan 22, 2026