Skip to content

Conversation

@bh2smith
Copy link
Contributor

@bh2smith bh2smith commented Feb 7, 2025

Resolves security vulnerabilities: https://github.com/BitteProtocol/make-agent/security/dependabot

The previous attempt #65 did nothing. I kept digging and found this solution works (at least locally)

Test Plan

pnpm i && pnpm audit

Before removing localtunnel, the audit report with just the overrides showed axios (>=0.8.1 <0.28.0).

So then

$ pnpm why axios
Legend: production dependency, optional only, dev only

[email protected] /Users/bh2smith/Projects/mintbase/ai/make-agent

dependencies:
localtunnel 2.0.2
└── axios 0.21.4

Removing local tunnel (no longer used) removed these issues!

@bh2smith bh2smith changed the title Security Warnings - Attempt 2 [Security] Resolve Vulnerabilities - Attempt 2 Feb 7, 2025
@bh2smith bh2smith merged commit 5d25b01 into main Feb 7, 2025
2 checks passed
@bh2smith bh2smith deleted the security-warnings branch February 7, 2025 22:29
Copy link
Member

@sainthiago sainthiago left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants