Skip to content

chore: pin frodo-lib 5.0.0-5 - #771

Merged
vscheuber merged 1 commit into
mainfrom
chore/pin-frodo-lib-5.0.0-5
Oct 9, 2026
Merged

vscheuber merged 1 commit into
mainfrom
chore/pin-frodo-lib-5.0.0-5

Conversation

@vscheuber

Copy link
Copy Markdown
Contributor

Summary

Pins @rockcarver/frodo-lib to 5.0.0-5 (from 5.0.0-4), picking up the frodo-lib dev-dependency audit clear-up shipped in frodo-lib#693 / release v5.0.0-5:

  • handlebars resolved to 4.7.10 (clears the two critical + one moderate advisories published Oct 8)
  • the argparse override removes the sprintf-js chain

The CLI's own dev-tree findings (braces via del, sprintf-js) are handled separately in #770 — this PR only tracks the library bump.

Verification

  • Lockfile regenerated with npm install --package-lock-only; @rockcarver/frodo-lib resolves to 5.0.0-5
  • npm@10/npm@11 compatibility unaffected (pin-only change)

🤖 Generated with Claude Code

Picks up the frodo-lib dev-dependency audit clear-up (handlebars 4.7.10,
argparse override removing the sprintf-js chain) shipped in
frodo-lib 5.0.0-5 (#693).

Co-Authored-By: Claude Code <noreply@anthropic.com>
@vscheuber
vscheuber force-pushed the chore/pin-frodo-lib-5.0.0-5 branch from 5aad149 to 9efca2d Compare October 9, 2026 16:10
@vscheuber
vscheuber merged commit e970e86 into main Oct 9, 2026
13 checks passed
@vscheuber
vscheuber deleted the chore/pin-frodo-lib-5.0.0-5 branch October 9, 2026 16:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant