Skip to content

chore(deps): bump faker to 10.5.0 for snyk - #8344

Merged
Anemy merged 1 commit into
mainfrom
bump-faker-snyk
Aug 13, 2026
Merged

chore(deps): bump faker to 10.5.0 for snyk#8344
Anemy merged 1 commit into
mainfrom
bump-faker-snyk

Conversation

@Anemy

@Anemy Anemy commented Aug 12, 2026

Copy link
Copy Markdown
Member

Doesn't impact us, we block the required functions in

function isAllowedFakerFn(moduleName: string, methodName: string) {

@Anemy
Anemy requested a review from a team as a code owner August 12, 2026 21:05
@Anemy
Anemy requested review from paula-stacho and a lite review from Copilot August 12, 2026 21:05
@Anemy Anemy added the no-title-validation Skips validation of PR titles (conventional commit adherence + JIRA ticket inclusion) label Aug 12, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the @faker-js/faker dependency to address Snyk findings, aligning both workspace manifests and the root lockfile so installs remain deterministic across the monorepo.

Changes:

  • Bumped @faker-js/faker from ^10.4.0 to ^10.5.0 in compass-collection and compass-generative-ai.
  • Updated package-lock.json to reflect the new resolved Faker version and hoisting layout.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
packages/compass-generative-ai/package.json Updates Faker devDependency version to the patched release.
packages/compass-collection/package.json Updates Faker runtime dependency version to the patched release.
package-lock.json Locks the repository to Faker 10.5.0 and updates resolved metadata accordingly.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@Anemy
Anemy merged commit 2556b86 into main Aug 13, 2026
59 checks passed
@Anemy
Anemy deleted the bump-faker-snyk branch August 13, 2026 00:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

no-title-validation Skips validation of PR titles (conventional commit adherence + JIRA ticket inclusion)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants