All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Bumped
swagger-ui-reactto^5.32.14(root andexample/), which transitively resolves:js-yamlto>=4.3.1, fixing merge-key/omap quadratic complexity issues (CVE-2026-59869, CVE-2026-59868)dompurifyto>=3.4.13, fixing anIN_PLACEXSS bypassimmutable(nested instance) to4.3.9, removing the vulnerable3.xline entirely (CVE-2026-59880, CVE-2026-59879)
- Bumped the
immutabledevDependency floor to^4.3.9(CVE-2026-59880, CVE-2026-59879) - Updated transitive
brace-expansionto>=1.1.18/>=5.0.9, fixing DoS via unbounded expansion (CVE-2026-14257, CVE-2026-69152) - Updated transitive
postcssto>=8.5.23, fixing an incompletesourceMappingURLpath-traversal fix (CVE-2026-69153) - Updated transitive
undicito>=7.29.0, fixing several request/response handling issues
0.1.0 - 2026-07-20
- Initial OSS repository shell.
- Original code, including the diff highlighting plugin, and the example React application.