Repository navigation
Bump source-map-js from 1.2.1 to 1.2.2 in /web - #910
Conversation
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2. - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2) --- updated-dependencies: - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Validate pull request 910 against the current released source. Generated-by: codex/gpt-6
![svanlabs[bot]](https://avatars.githubusercontent.com/u/334655405?s=60&v=4){kind=small}
There was a problem hiding this comment.
Reviewed integration head 280163c66dd90d01000d060565027fdafb1466ad against 15c3d730814f5e9465b6dc0b34073052b071fee3 through the shared local runner and independent reviewers.
Standards
No substantive violations found. The only changed file is the lockfile: source-map-js 1.2.1 to 1.2.2, including registry URL and integrity. It satisfies PostCSS's existing version range, remains development-only and BSD-3-Clause, and introduces no architecture or source change. npm ci succeeded and generated runtime notices remain unchanged. The original Dependabot commit is exempt under CONTRIBUTING section 0; our integration commit declares provenance.
Spec
No findings. The immutable diff matches the supplied PR description's dependency-update scope and contains no unrelated changes. No originating issue is referenced; the PR description and commit supplied the spec.
Validation: exact-head full gate passed: 892 passed, 0 failed, 4 ignored, 35 binaries. Dashboard production build succeeded. Full Playwright suite passed: 126 tests, 0 failures, 1.2 minutes, two workers, using an isolated real-server sandbox and a separate public-TV port. npm ci and notices regeneration succeeded with no notices diff.
Summary: Standards 0 findings; Spec 0 findings.
Generated-by: codex/gpt-6
Bumps source-map-js from 1.2.1 to 1.2.2.
Release notes
Sourced from source-map-js's releases.
Changelog
Sourced from source-map-js's changelog.
Commits
0a1d3341.2.24c6fa26Update changelogcf76580Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)7899a86Fix crash when executing browser with CSP script-src that don't permit unsafe...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Validation refreshed at
280163c66dd90d01000d060565027fdafb1466adagainst main15c3d730814f5e9465b6dc0b34073052b071fee3: shared local review runner/full gate passed, 892 passed, 0 failed, 4 ignored, 35 binaries. Independent Standards and Spec reviews found no substantive issues.Generated-by: codex/gpt-6
Dashboard production build and full isolated Playwright suite passed (see review evidence). Generated third-party notices unchanged.