[PR #11559] chore(vscode): fix bun audit vulnerabilities #13836

Closed
opened 2026-02-16 18:18:40 -05:00 by yindo · 0 comments
Owner

Original Pull Request: https://github.com/anomalyco/opencode/pull/11559

State: closed
Merged: No


Fixes #11556

Summary

  • Updated eslint 9.25.1 → 9.39.2 (fixes @eslint/plugin-kit ReDoS).
  • Updated @vscode/test-cli 0.0.11 → 0.0.12.
  • Added overrides for transitive dependencies: glob, diff, js-yaml.

Test plan

  • bun install
  • bun audit (0 vulnerabilities)
  • bun run check-types
  • bun run compile

How I verified it is working

I ran bun audit and got this output:

No vulnerabilities found

What Changed

  • package.json: updated eslint and @vscode/test-cli (added overrides for glob, diff, js-yaml)
  • bun.lock: lockfile updated

Impact

Updated dev dependencies only, no runtime impact.

**Original Pull Request:** https://github.com/anomalyco/opencode/pull/11559 **State:** closed **Merged:** No --- Fixes #11556 ## Summary - Updated eslint 9.25.1 → 9.39.2 (fixes @eslint/plugin-kit ReDoS). - Updated @vscode/test-cli 0.0.11 → 0.0.12. - Added overrides for transitive dependencies: glob, diff, js-yaml. ## Test plan - bun install - bun audit (0 vulnerabilities) - bun run check-types - bun run compile ## How I verified it is working I ran `bun audit` and got this output: No vulnerabilities found ## What Changed - package.json: updated eslint and @vscode/test-cli (added overrides for glob, diff, js-yaml) - bun.lock: lockfile updated ## Impact Updated dev dependencies only, no runtime impact.
yindo added the pull-request label 2026-02-16 18:18:40 -05:00
yindo closed this issue 2026-02-16 18:18:40 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#13836