Security: combine CVE fixes from #484 + #485 with clean lockfile#488

Open

fabiankaegy wants to merge 15 commits into

fix/security-cves-combined

Commits on May 5, 2026

fix: combine security CVE fixes from #484 and #485, pin webpack for clean install

fabiankaegy
and
claude
committed
fix: pin @types/node to ^20 to satisfy npm ci strict resolution

fabiankaegy
and
claude
committed
fix: drop Node 16/18 support, add stylelint override, fix prettier lint

fabiankaegy
and
claude
committed
fix: normalize eslint-config fixture paths to forward slashes for Windows

fabiankaegy
and
claude
committed
fix: use cwd-relative globs in eslint-config fixture for Windows

fabiankaegy
and
claude
committed
fix: list eslint-config fixture files explicitly instead of globbing

fabiankaegy
and
claude
committed
chore: bump changeset to minor

fabiankaegy
and
claude
committed
fix: bump webpackbar to ^7 and align workspace node engines

fabiankaegy
and
claude
committed
chore: drop unnecessary overrides covered by major plugin bumps

fabiankaegy
and
claude
committed
Merge remote-tracking branch 'origin/develop' into fix/security-cves-combined
fabiankaegy
committed
fix: strip drive letter in entry.js block-asset path comparison

fabiankaegy
and
claude
committed
fix: address PR feedback — entry.js cross-platform, sort fixtures, clarify changeset

fabiankaegy
and
claude
committed
fix: drop 3 of 6 overrides by depending on @linaria/webpack5-loader directly

fabiankaegy
and
claude
committed
fix: don't re-resolve stylesheet paths in entry.js

fabiankaegy
and
claude
committed

Commits on May 13, 2026

webpack-dev-server error fix, linaria error fix
marcovega
committed