Skip to content

Commit 3daca64

Browse files
committed
CCM-15826: Fix dependency audit critical warning
Removed the unnecessary workspace-local ts-jest dependency from frontend/ so the package now uses the shared root test tooling, in line with the repo’s AGENTS.md guidance to centralise dev tooling unless a local override is strictly needed. This eliminated the only dependency path that introduced vulnerable handlebars@4.7.8, resolving the critical npm audit finding without changing frontend runtime behaviour. Validated with npm audit, npm ls handlebars ts-jest --all, frontend build, lint, typecheck, and test:unit. Ran root pre-commit checks; the full run was blocked by unrelated unstaged workspace changes, but the changed files passed targeted pre-commit validation. AI assistance was used to prepare this change.
1 parent 717e209 commit 3daca64

4 files changed

Lines changed: 34 additions & 140 deletions

File tree

.gitignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ dist
2424
.reports
2525
/.idea
2626
**/.next
27+
.tsconfig.tsbuildinfo
2728

2829
.env
2930
/.envrc

frontend/package.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,6 @@
2222
"eslint-config-next": "^15.4.6",
2323
"prettier": "^3.5.3",
2424
"sass": "^1.86.0",
25-
"ts-jest": "^29.4.6",
2625
"typescript": "^5.9.3"
2726
},
2827
"name": "@supplier-config/frontend",

frontend/tsconfig.tsbuildinfo

Lines changed: 0 additions & 1 deletion
This file was deleted.

package-lock.json

Lines changed: 33 additions & 138 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)