Skip to content

chore: websocket-driver 보안 취약점 수정#609

Merged
manNomi merged 1 commit into
mainfrom
fix/dependabot-alert-231
Jul 18, 2026
Merged

chore: websocket-driver 보안 취약점 수정#609
manNomi merged 1 commit into
mainfrom
fix/dependabot-alert-231

Conversation

@manNomi

@manNomi manNomi commented Jul 18, 2026

Copy link
Copy Markdown
Contributor

관련 이슈

작업 내용

  • 전이 의존성 websocket-driver를 취약한 0.7.4에서 패치 버전 0.7.5로 업데이트했습니다.
  • 불필요한 의존성 변경 없이 pnpm-lock.yaml만 최소 범위로 갱신했습니다.

특이 사항

  • pnpm audit --prod=false --audit-level=critical: 알려진 취약점 없음
  • pnpm typecheck: 통과
  • 커밋 및 푸시 훅의 Web/University Web/Admin CI 동등성 검사와 빌드: 통과

리뷰 요구사항 (선택)

  • 잠금 파일에서 websocket-driver 참조가 모두 0.7.5로 변경되었는지 확인 부탁드립니다.

@manNomi
manNomi requested a review from wibaek as a code owner July 18, 2026 12:28
@vercel

vercel Bot commented Jul 18, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
solid-connect-university-web Ready Ready Preview, Comment Jul 18, 2026 12:30pm
solid-connect-web-admin Ready Ready Preview, Comment Jul 18, 2026 12:30pm
solid-connection-web Ready Ready Preview, Comment Jul 18, 2026 12:30pm

@coderabbitai

coderabbitai Bot commented Jul 18, 2026

Copy link
Copy Markdown

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: b7b09b4d-a1f6-4a5e-a8c6-793206da5064

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/dependabot-alert-231

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant