Skip to content

[deps] Dependency update: web - #6042

Open
replicated-software-factory[bot] wants to merge 1 commit into
mainfrom
deps/kots-update-web
Open

[deps] Dependency update: web#6042
replicated-software-factory[bot] wants to merge 1 commit into
mainfrom
deps/kots-update-web

Conversation

@replicated-software-factory

Copy link
Copy Markdown
Contributor

This PR was generated by the kots-update-web Factory workflow.

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.


ElasticClaw Factory seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

@greptile-apps

greptile-apps Bot commented Sep 2, 2026

Copy link
Copy Markdown

Reviews (1): Last reviewed commit: "chore(deps): pin elliptic to latest avai..." | Re-trigger Greptile

CVE-2025-14505 remains because no patched version of elliptic exists yet.
The package is pulled in transitively by crypto-browserify and
node-polyfill-webpack-plugin, both required by the webpack build.
Pinning to 6.6.1 ensures the latest available version is used.
@greptile-apps

greptile-apps Bot commented Sep 4, 2026

Copy link
Copy Markdown

Reviews (2): Last reviewed commit: "chore(deps): pin elliptic to latest avai..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant