Skip to content

Remediate website runtime dependency advisories - #204

Merged
truthixify merged 4 commits into
wraith-protocol:developfrom
Nacho1499:refactor/Remediate-website-runtime
Oct 19, 2026
Merged

truthixify merged 4 commits into
wraith-protocol:developfrom
Nacho1499:refactor/Remediate-website-runtime

Conversation

@Nacho1499

Copy link
Copy Markdown
Contributor

Closes #192

Summary

  • Upgrade React Router and refresh the pnpm lockfile.
  • Pin patched Axios, TOML, and WebSocket versions to remediate vulnerable dependency paths.
  • Keep @stellar/stellar-sdk at 13.3.0 to remain compatible with the Wraith SDK's declared peer dependency.
  • Add a CI gate that fails when production dependency audits report high-severity advisories.

Verification

  • Production dependency audit: clean
  • Build: passed
  • Unit tests: 359 passed
  • Smoke tests: 15 passed
  • Browser accessibility tests: 14 passed

@Nacho1499
Nacho1499 requested a review from truthixify as a code owner October 19, 2026 08:24
@vercel

vercel Bot commented Oct 19, 2026

Copy link
Copy Markdown

@Nacho1499 is attempting to deploy a commit to the truthixify's projects Team on Vercel.

A member of the Team first needs to authorize it.

@drips-wave

drips-wave Bot commented Oct 19, 2026

Copy link
Copy Markdown

@Nacho1499 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@truthixify truthixify left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed exact head eadf91e. The dependency overrides produce a clean high-severity production audit, the production build passes, and all required repository checks are green. The workflow changes are scoped to the audit and generated-report hygiene.

@truthixify
truthixify merged commit c915a20 into wraith-protocol:develop Oct 19, 2026
6 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Wave 10] Remediate website runtime dependency advisories

2 participants