Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Security] Resolve Vulnerabilities - Attempt 2 #88

Merged
merged 2 commits into from
Feb 7, 2025
Merged

Conversation

bh2smith
Copy link
Member

@bh2smith bh2smith commented Feb 7, 2025

Resolves security vulnerabilities: https://github.com/BitteProtocol/make-agent/security/dependabot

The previous attempt #65 did nothing. I kept digging and found this solution works (at least locally)

Test Plan

pnpm i && pnpm audit

Before removing localtunnel, the audit report with just the overrides showed axios (>=0.8.1 <0.28.0).

So then

$ pnpm why axios
Legend: production dependency, optional only, dev only

make-agent@0.0.0 /Users/bh2smith/Projects/mintbase/ai/make-agent

dependencies:
localtunnel 2.0.2
└── axios 0.21.4

Removing local tunnel (no longer used) removed these issues!

@bh2smith bh2smith changed the title Security Warnings - Attempt 2 [Security] Resolve Vulnerabilities - Attempt 2 Feb 7, 2025
@bh2smith bh2smith merged commit 5d25b01 into main Feb 7, 2025
2 checks passed
@bh2smith bh2smith deleted the security-warnings branch February 7, 2025 22:29
Copy link
Contributor

@sainthiago sainthiago left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants