Skip to content

Conversation

krgjert
Copy link
Member

@krgjert krgjert commented Nov 12, 2026

Purpose

Resolve the minimatch denial-of-service vulnerability in frontend and backend development dependencies.

Changes

  • Add minimatch overrides in both package.json files.
  • Update both lockfiles to resolve minimatch to 11.0.8.
  • Fix import casing in App.tsx and BuildProvider.tsx to restore the frontend build.

Related issues

None.

Verification

  • Confirmed both lockfiles resolve minimatch to 11.0.8.
  • Backend: build and lint passed; npm audit no longer reports minimatch.
  • Frontend: build and lint passed; all 12 tests passed.
  • Frontend tests emit existing duplicate React key warnings.
  • Backend tests are not configured.
  • Backend audit still reports separate body-parser and qs vulnerabilities.
  • Closure of both Dependabot alerts must be confirmed after merging.

Checklist

  • I have reviewed my own changes.
  • The changes meet the linked issue's acceptance criteria, where applicable.
  • I have verified the changes and recorded the results above.
  • I have added or updated tests where needed.
  • I have updated documentation where needed.
  • I have included screenshots for visual changes, or marked them not applicable.

@krgjert krgjert added the bug Something isn't working label Nov 12, 2026
@krgjert krgjert added this to the 4. underveisinnlevering milestone Nov 12, 2026
@krgjert krgjert self-assigned this Nov 12, 2026
@krgjert krgjert requested a review from a team as a code owner November 12, 2026 17:48
@wilhelsr wilhelsr merged commit d76862d into dev Nov 12, 2026
@krgjert krgjert deleted the 104-fix-minimatch-dependency-vulnerabilities branch November 14, 2026 09:30
Sign in to join this conversation on GitHub.
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants