chore: address security vulnerabilities by dtfiedler · Pull Request #385 · ardriveapp/turbo-sdk

dtfiedler · 2026-02-10T17:37:40Z

No description provided.

…update Bumps the npm_and_yarn group with 1 update in the / directory: [h3](https://github.com/h3js/h3). Bumps the npm_and_yarn group with 1 update in the /examples/next directory: [h3](https://github.com/h3js/h3). Updates `h3` from 1.15.4 to 1.15.5 - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/v1.15.5/CHANGELOG.md) - [Commits](h3js/h3@v1.15.4...v1.15.5) Updates `h3` from 1.15.4 to 1.15.5 - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/v1.15.5/CHANGELOG.md) - [Commits](h3js/h3@v1.15.4...v1.15.5) --- updated-dependencies: - dependency-name: h3 dependency-version: 1.15.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: h3 dependency-version: 1.15.5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

…nd_yarn-89e3f2da7b chore(deps): bump the npm_and_yarn group across 2 directories with 1 update

…updates Bumps the npm_and_yarn group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [diff](https://github.com/kpdecker/jsdiff) | `4.0.2` | `4.0.4` | | [h3](https://github.com/h3js/h3) | `1.15.4` | `1.15.5` | | [hono](https://github.com/honojs/hono) | `4.11.4` | `4.11.7` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [tar](https://github.com/isaacs/node-tar) | `7.5.2` | `7.5.7` | Bumps the npm_and_yarn group with 3 updates in the /examples/next directory: [h3](https://github.com/h3js/h3), [hono](https://github.com/honojs/hono) and [lodash](https://github.com/lodash/lodash). Bumps the npm_and_yarn group with 1 update in the /examples/typescript/cjs directory: [diff](https://github.com/kpdecker/jsdiff). Bumps the npm_and_yarn group with 1 update in the /examples/typescript/esm directory: [diff](https://github.com/kpdecker/jsdiff). Bumps the npm_and_yarn group with 1 update in the /examples/vite directory: [lodash](https://github.com/lodash/lodash). Updates `diff` from 4.0.2 to 4.0.4 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v4.0.2...v4.0.4) Updates `h3` from 1.15.4 to 1.15.5 - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/v1.15.5/CHANGELOG.md) - [Commits](h3js/h3@v1.15.4...v1.15.5) Updates `hono` from 4.11.4 to 4.11.7 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.11.4...v4.11.7) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `tar` from 7.5.2 to 7.5.7 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.2...v7.5.7) Updates `h3` from 1.15.4 to 1.15.5 - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/v1.15.5/CHANGELOG.md) - [Commits](h3js/h3@v1.15.4...v1.15.5) Updates `hono` from 4.11.4 to 4.11.7 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.11.4...v4.11.7) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `diff` from 4.0.2 to 4.0.4 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v4.0.2...v4.0.4) Updates `diff` from 4.0.2 to 4.0.4 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v4.0.2...v4.0.4) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: diff dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: h3 dependency-version: 1.15.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hono dependency-version: 4.11.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: h3 dependency-version: 1.15.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hono dependency-version: 4.11.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

…nd_yarn-43b8ca8fa8 chore(deps): bump the npm_and_yarn group across 5 directories with 5 updates

coderabbitai · 2026-02-10T17:37:54Z

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (6)

examples/esm/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
examples/next/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
examples/typescript/cjs/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
examples/typescript/esm/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
examples/vite/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
yarn.lock is excluded by !**/yarn.lock, !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch alpha

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

codecov · 2026-02-10T17:38:02Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.62%. Comparing base (4a45661) to head (e5362e4).
⚠️ Report is 14 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #385      +/-   ##
==========================================
+ Coverage   89.52%   89.62%   +0.09%     
==========================================
  Files          26       26              
  Lines        6561     6561              
  Branches      422      422              
==========================================
+ Hits         5874     5880       +6     
+ Misses        686      680       -6     
  Partials        1        1

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions · 2026-02-20T19:52:31Z

🎉 This PR is included in version 1.41.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

github-actions · 2026-04-14T14:51:46Z

🎉 This PR is included in version 1.41.0-alpha.2 🎉

The release is available on:

Your semantic-release bot 📦🚀

dependabot Bot and others added 4 commits January 29, 2026 06:45

Merge pull request #376 from ardriveapp/dependabot/npm_and_yarn/npm_a…

5f5ec90

…nd_yarn-89e3f2da7b chore(deps): bump the npm_and_yarn group across 2 directories with 1 update

Merge pull request #384 from ardriveapp/dependabot/npm_and_yarn/npm_a…

e5362e4

…nd_yarn-43b8ca8fa8 chore(deps): bump the npm_and_yarn group across 5 directories with 5 updates

dtfiedler requested a review from a team as a code owner February 10, 2026 17:37

dtfiedler merged commit 72de14f into main Feb 10, 2026
29 checks passed

github-actions Bot added the released label Feb 20, 2026

github-actions Bot added the released on @alpha label Apr 14, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: address security vulnerabilities#385

chore: address security vulnerabilities#385
dtfiedler merged 4 commits into
mainfrom
alpha

dtfiedler commented Feb 10, 2026

Uh oh!

coderabbitai Bot commented Feb 10, 2026

Review skipped

Uh oh!

codecov Bot commented Feb 10, 2026 •

edited

Loading

Uh oh!

Uh oh!

github-actions Bot commented Feb 20, 2026

Uh oh!

github-actions Bot commented Apr 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dtfiedler commented Feb 10, 2026

Uh oh!

coderabbitai Bot commented Feb 10, 2026

Review skipped

Uh oh!

codecov Bot commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

github-actions Bot commented Feb 20, 2026

Uh oh!

github-actions Bot commented Apr 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

codecov Bot commented Feb 10, 2026 •

edited

Loading