Skip to content

chore(upgrade-core): fix vulnerable transitive dependencies - #1618

Merged
stephanbcbauer merged 2 commits into
mainfrom
chore/dependency-issues-upgrade
Oct 22, 2026
Merged

chore(upgrade-core): fix vulnerable transitive dependencies#1618
stephanbcbauer merged 2 commits into
mainfrom
chore/dependency-issues-upgrade

Conversation

@stephanbcbauer

@stephanbcbauer stephanbcbauer commented Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Description

This pull request updates the Markdown linting setup and related documentation formatting, mainly to support a newer version of markdownlint-cli2 and ensure consistent behavior. It also updates Node.js and several dependencies for improved compatibility and security.

Markdown Linting and Configuration Updates:

  • Upgraded markdownlint-cli2 from version 0.5.1 to 0.22.0 in package.json and updated lint scripts to use the new CLI syntax. [1] [2]
  • Added new rules to .markdownlint.yaml to disable those introduced in recent markdownlint-cli2 versions, preserving previous lint behavior, and adjusted the MD001 rule to ignore front matter titles.
  • Added explicit dependency overrides in package.json to ensure compatible versions for markdownlint-cli2 and other packages.

Documentation Formatting Improvements:

  • Updated example email addresses in docs-kits/kits/cbam-kit/development-view/development-view.md to use backticks for consistent formatting. [1] [2]
  • Added a missing blank line in docs-kits/kits/supply-chain-disruption-notification-kit/software-development-view/policies.md for improved Markdown rendering.

Node.js Version Requirement:

  • Increased the minimum required Node.js version from >=16.14 to >=20.0 in package.json for better compatibility with dependencies.

Pre-review checks

Please ensure to do as many of the following checks as possible, before asking for committer review:

@stephanbcbauer
chore: fix vulnerable transitive dependencies via npm overrides
308e06e 
- refresh lockfile within existing semver ranges
- add targeted overrides (tinypool, serialize-javascript,
  postcss-selector-parser, katex, uuid, markdown-it, js-yaml, smol-toml)
- upgrade markdownlint-cli2 to 0.22 (latest Node 20 compatible)
- disable markdownlint rules added after 0.5.1 to keep lint behavior
- fix three newly detected lint issues in KIT docs
- require Node >=20 (already required by Docusaurus 3.10)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@stephanbcbauer stephanbcbauer self-assigned this Oct 21, 2026
@github-actions

github-actions Bot commented Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

🔍 Pull request preview

This pull request is closed, so the preview has been removed.

@stephanbcbauer

stephanbcbauer commented Oct 22, 2026

Copy link
Copy Markdown
Member Author

Review requested

[main] INFO A review is required for npm/npmjs/@algolia/ingestion/1.60.0.
[main] INFO A review request was created https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32660 .
[main] INFO A review is required for npm/npmjs/-/mdast-util-gfm-strikethrough/2.0.1.
[main] INFO A review request was created https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32661 .
[main] INFO A review is required for npm/npmjs/@swc/core-darwin-arm64/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32599 .
[main] INFO A review is required for npm/npmjs/@swc/core/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32600 .
[main] INFO A review is required for npm/npmjs/@docsearch/core/4.7.1.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32601 .
[main] INFO A review is required for npm/npmjs/@algolia/client-insights/5.60.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32602 .
[main] INFO A review is required for npm/npmjs/@algolia/abtesting/1.26.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32603 .
[main] INFO A review is required for npm/npmjs/-/markdownlint-cli2/0.22.1.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32604 .
[main] INFO A review is required for npm/npmjs/-/react-big-calendar/1.20.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32605 .
[main] INFO A review is required for npm/npmjs/@swc/core-linux-arm64-gnu/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32606 .
[main] INFO A review is required for npm/npmjs/-/asn1js/3.1.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32607 .
[main] INFO A review is required for npm/npmjs/-/webpack/5.112.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32608 .
[main] INFO A review is required for npm/npmjs/@peculiar/asn1-x509-attr/2.11.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32609 .
[main] INFO A review is required for npm/npmjs/-/regenerate-unicode-properties/10.3.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32610 .
[main] INFO A review is required for npm/npmjs/@swc/html-linux-arm64-musl/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32611 .
[main] INFO A review is required for npm/npmjs/-/date-holidays/3.37.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32612 .
[main] INFO A review is required for npm/npmjs/-/mdast-util-find-and-replace/3.0.3.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32613 .
[main] INFO A review is required for npm/npmjs/@swc/core-darwin-x64/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32614 .
[main] INFO A review is required for npm/npmjs/-/algoliasearch/5.60.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32615 .
[main] INFO A review is required for npm/npmjs/@algolia/requester-browser-xhr/5.60.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32616 .
[main] INFO A review is required for npm/npmjs/@swc/html-win32-ia32-msvc/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32617 .
[main] INFO A review is required for npm/npmjs/-/mdast-util-from-markdown/2.1.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32618 .
[main] INFO A review is required for npm/npmjs/@algolia/monitoring/1.60.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32619 .
[main] INFO A review is required for npm/npmjs/@peculiar/asn1-pkcs9/2.11.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32620 .
[main] INFO A review is required for npm/npmjs/@swc/core-win32-x64-msvc/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32621 .
[main] INFO A review is required for npm/npmjs/@swc/core-linux-arm-gnueabihf/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32622 .
[main] INFO A review is required for npm/npmjs/-/autoprefixer/10.6.1.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32623 .
[main] INFO A review is required for npm/npmjs/@swc/html-linux-s390x-gnu/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32624 .
[main] INFO A review is required for npm/npmjs/@algolia/requester-node-http/5.60.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32625 .
[main] INFO A review is required for npm/npmjs/-/core-js-compat/3.51.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32626 .
[main] INFO A review is required for npm/npmjs/-/tinypool/2.2.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32627 .
[main] INFO A review is required for npm/npmjs/@peculiar/asn1-schema/2.11.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32628 .
[main] INFO A review is required for npm/npmjs/@swc/html-linux-x64-musl/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32629 .
[main] INFO A review is required for npm/npmjs/@swc/core-win32-arm64-msvc/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32630 .
[main] INFO A review is required for npm/npmjs/@algolia/client-search/5.60.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32631 .
[main] INFO A review is required for npm/npmjs/-/js-yaml/5.5.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32632 .
[main] INFO A review is required for npm/npmjs/@peculiar/asn1-pfx/2.11.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32633 .
[main] INFO A review is required for npm/npmjs/-/micromark-factory-space/2.1.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32634 .
[main] INFO A review is required for npm/npmjs/-/minimizer-webpack-plugin/5.13.1.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32635 .
[main] INFO A review is required for npm/npmjs/@swc/html-win32-arm64-msvc/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32636 .
[main] INFO A review is required for npm/npmjs/-/mdast-util-directive/3.1.1.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32637 .
[main] INFO A review is required for npm/npmjs/@swc/html-linux-arm-gnueabihf/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32638 .
[main] INFO A review is required for npm/npmjs/-/mdast-util-to-markdown/2.2.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32639 .
[main] INFO A review is required for npm/npmjs/@swc/core-win32-ia32-msvc/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32640 .
[main] INFO A review is required for npm/npmjs/-/cssdb/8.12.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32641 .
[main] INFO A review is required for npm/npmjs/@swc/core-linux-x64-gnu/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32642 .
[main] INFO A review is required for npm/npmjs/@swc/html-linux-arm64-gnu/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32643 .
[main] INFO A review is required for npm/npmjs/-/image-size/2.0.4.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32644 .
[main] INFO A review is required for npm/npmjs/-/regenerate/1.5.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32645 .
[main] INFO A review is required for npm/npmjs/-/schema-utils/4.8.1.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32646 .
[main] INFO A review is required for npm/npmjs/@swc/html-linux-x64-gnu/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32647 .
[main] INFO A review is required for npm/npmjs/@algolia/client-common/5.60.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32648 .
[main] INFO A review is required for npm/npmjs/@peculiar/asn1-csr/2.11.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32649 .
[main] INFO A review is required for npm/npmjs/@swc/core-linux-ppc64-gnu/1.16.18.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32650 .
[main] INFO A review is required for npm/npmjs/-/algoliasearch-helper/3.30.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32651 .
[main] INFO A review is required for npm/npmjs/-/micromark-extension-gfm-table/2.1.2.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32652 .
[main] INFO A review is required for npm/npmjs/@docsearch/css/4.7.1.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32653 .
[main] INFO A review is required for npm/npmjs/@peculiar/asn1-ecc/2.11.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32654 .
[main] INFO A review is required for npm/npmjs/@algolia/client-analytics/5.60.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32655 .
[main] INFO A review is required for npm/npmjs/@peculiar/asn1-x509/2.11.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32656 .
[main] INFO A review is required for npm/npmjs/-/unicorn-magic/0.4.1.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32657 .
[main] INFO A review is required for npm/npmjs/@algolia/requester-fetch/5.60.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32658 .
[main] INFO A review is required for npm/npmjs/-/sass/1.106.0.
[main] INFO A review request already exists https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab/-/work_items/32659 .

@stephanbcbauer

stephanbcbauer commented Oct 22, 2026

Copy link
Copy Markdown
Member Author

PR created by committer -> even if it exceeds the LoC max of 1000 -> still fine to merge

jSchuetz88
jSchuetz88 approved these changes Oct 22, 2026
View reviewed changes

@jSchuetz88 jSchuetz88 left a comment •
edited
Loading

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All critical vulnerabilities have been resolved. Unfortunately, the dash licence tool does not respond, but it seems all restricted references / open IP issues have been resolved and the build works as usual -> LGTM.

@stephanbcbauer
stephanbcbauer merged commit 8868b95 into main Oct 22, 2026
6 checks passed
@stephanbcbauer
stephanbcbauer deleted the chore/dependency-issues-upgrade branch October 22, 2026 14:44
@github-project-automation github-project-automation Bot moved this from Inbox to Done in Tractus-X Webpage Oct 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jSchuetz88 jSchuetz88 jSchuetz88 approved these changes
@ther3sa ther3sa Awaiting requested review from ther3sa

Assignees

@stephanbcbauer stephanbcbauer

Labels

None yet

Projects

Tractus-X Webpage
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@stephanbcbauer @jSchuetz88