Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 23, 2026

Bumps lodash from 4.17.21 to 4.17.23.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot requested a review from Nick2bad4u as a code owner January 23, 2026 17:57
@dependabot dependabot bot added dependabot Dependabot Pull Requests dependencies Pull requests that update a dependency file npm npm updates labels Jan 23, 2026
@Nick2bad4u
Copy link
Owner

Nick2bad4u commented Jan 23, 2026

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions
Copy link
Contributor

Summary of the Pull Request

This pull request updates the lodash dependency in the electron-app project from version 4.17.21 to 4.17.23. The update includes various improvements, fixes, and security patches provided by the maintainers of lodash.

Key Improvements and Fixes:

  1. Security Fix:

    • Prototype Pollution Fix: Addresses a security issue with the baseUnset function to prevent prototype pollution.
    • This is a critical security fix and important to apply for securing your application.
  2. Bug Fixes:

    • Corrects the JSDoc return type for setCacheHas to accurately reflect a boolean return type.
  3. Documentation and Quality Updates:

    • Updates JSDoc for _.compact() to enhance clarity about falsey values.
    • Fixes documentation auto-linking issues for source links.
    • Modernizes documentation and updates references related to

@codecov
Copy link

codecov bot commented Jan 23, 2026

❌ 1 Tests Failed:

Tests completed Failed Passed Skipped
4482 1 4481 1
View the top 1 failed test(s) by shortest run time
tests/unit/utils/state/core/stateMiddleware.comprehensive.test.ts > StateMiddlewareManager - comprehensive coverage > persistence middleware saves specific paths to localStorage (happy and error paths)
Stack Traces | 0.00469s run time
AssertionError: expected "setItem" to be called at least once
 ❯ .../state/core/stateMiddleware.comprehensive.test.ts:255:28

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

@github-actions
Copy link
Contributor

github-actions bot commented Jan 23, 2026

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 42 0 0 0.86s
✅ COPYPASTE jscpd yes no no 49.1s
⚠️ CSS stylelint 9 306 0 14.86s
⚠️ HTML djlint 2 3 0 3.04s
✅ HTML htmlhint 2 0 0 0.57s
⚠️ JAVASCRIPT prettier 318 318 0 108.18s
⚠️ JSON jsonlint 25 2 0 3.62s
⚠️ JSON prettier 25 21 0 9.01s
⚠️ JSON v8r 25 1 0 51.14s
⚠️ MARKDOWN markdownlint 36 58 0 21.19s
✅ MARKDOWN markdown-table-formatter 28 0 0 7.37s
✅ POWERSHELL powershell 3 0 0 5.59s
✅ POWERSHELL powershell_formatter 3 0 0 3.15s
✅ REPOSITORY checkov yes no no 54.15s
⚠️ REPOSITORY devskim yes 1 1 8.93s
✅ REPOSITORY dustilock yes no no 2.76s
✅ REPOSITORY gitleaks yes no no 5.6s
✅ REPOSITORY git_diff yes no no 0.32s
⚠️ REPOSITORY grype yes 1 4 72.77s
⚠️ REPOSITORY kics yes 1 1 6.5s
⚠️ REPOSITORY secretlint yes 3 no 17.61s
✅ REPOSITORY syft yes no no 27.74s
⚠️ REPOSITORY trivy yes 1 4 11.98s
✅ REPOSITORY trivy-sbom yes no no 6.76s
✅ REPOSITORY trufflehog yes no no 14.42s
⚠️ SPELL cspell 782 2883 0 1468.38s
⚠️ SPELL lychee 118 4 0 131.12s
⚠️ TYPESCRIPT ts-standard 306 306 0 123.05s
✅ XML xmllint 1 0 0 1.56s
⚠️ YAML prettier 54 52 104 21.38s
✅ YAML v8r 54 0 0 119.55s
✅ YAML yamllint 54 0 0 12.93s

Detailed Issues

⚠️ SPELL / cspell - 2883 errors
Results of cspell linter (version 9.3.2)
See documentation on https://megalinter.io/9.2.0/descriptors/spell_cspell/
-----------------------------------------------

✅ [SUCCESS] .checkov.yml
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .djlintrc
✅ [SUCCESS] .git/FETCH_HEAD
✅ [SUCCESS] .git/HEAD
❌ [ERROR] .git/config
    .git/config:11:13     - Unknown word (gitdir)     -- [includeIf "gitdir:/home/runner/work/FitFileView
    	 Suggestions: [gilder, girder, giddier, libdir, outdir]
    .git/config:13:13     - Unknown word (gitdir)     -- [includeIf "gitdir:/home/runner/work/FitFileView
    	 Suggestions: [gilder, girder, giddier, libdir, outdir]
    .git/config:13:71     - Unknown word (worktrees)  -- FileViewer/FitFileViewer/.git/worktrees/*"]
    	 Suggestions: [workers, worker's, workarea, workArea, worries]
    .git/config:15:13     - Unknown word (gitdir)     -- [includeIf "gitdir:.git
    	 Suggestions: [gilder, girder, giddier, libdir, outdir]
    .git/config:17:13     - Unknown word (gitdir)     -- [includeIf "gitdir:.git
    	 Suggestions: [gilder, girder, giddier, libdir, outdir]
    .git/config:17:43     - Unknown word (worktrees)  -- .git/worktrees/*"]
    	 Suggestions: [workers, worker's, workarea, workArea, worries]
    CSpell: Files checked: 1, Issues found: 6 in 1 file.

✅ [SUCCESS] .git/description
✅ [SUCCESS] .git/index
✅ [SUCCESS] .git/info/exclude
✅ [SUCCESS] .git/logs/HEAD
✅ [SUCCESS] .git/logs/refs/remotes/pull/174/merge
✅ [SUCCESS] .git/refs/remotes/pull/174/merge
✅ [SUCCESS] .git/shallow
❌ [ERROR] .github/.spellcheck.yml
    .github/.spellcheck.yml:6:11      - Unknown word (wordlists)  -- wordlists:
    	 Suggestions: [wordless, wordiest, worldliest, worsts, wrists]
    .github/.spellcheck.yml:7:18      - Unknown word (wordlist)   -- - .wordlist.txt
    	 Suggestions: [wordiest, wordless, worldliest, worlds, wordily]
    .github/.spellcheck.yml:10:17     - Unknown word (pyspelling) -- - pyspelling.filters.markdown:
    	 Suggestions: [propelling, pistolling]
    .github/.spellcheck.yml:12:23     - Unknown word (pymdownx)   -- - pymdownx.superfences
    	 Suggestions: [mydown, myDown, putdown, putdowns]
    .github/.spellcheck.yml:12:32     - Unknown word (superfences) -- - pymdownx.superfences
    	 Suggestions: [supervenes, superdense, superfine, supervene, supersedes]
    .github/.spellcheck.yml:13:17     - Unknown word (pyspelling)  -- - pyspelling.filters.html:
    	 Suggestions: [propelling, pistolling]
    CSpell: Files checked: 1, Iss

(Truncated to 2500 characters out of 567163)
⚠️ REPOSITORY / devskim - 1 error
[05:23:17 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
[05:23:17 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
.devskim.json:41:46:41:55 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:47:66:47:75 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:53:61:53:70 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:59:61:59:70 [ManualReview] DS162092 Do not leave debug code in production
[05:23:17 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
electron-app/utils/ui/quickColorSwitcher.js:82:69:82:86 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/quickColorSwitcher.js:110:49:110:66 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/quickColorSwitcher.js:387:16:388:54 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:547:12:547:25 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:1122:8:1123:44 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:1246:29:1246:42 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:1524:8:1525:44 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/settingsModal.js:38:8:38:21 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/settingsModal.js:102:50:102:67 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/settingsModal.js:108:50:108:67 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/settingsModal.js:151:53:151:70 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/settingsModal.js:409:8:409:21 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/ensureChartSettingsDropdowns.js:69:8:71:41 [ManualReview] DS172411 Review setTimeout for untrusted data
[05:23:17 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
electron-app/utils/net/networkUtils.js:22:35:22:70 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/debug/stateDevTools.js:589:43:589:52 [ManualReview] DS162092 Do not leave debug code in production
electron-app/utils/debug/sta

(Truncated to 2500 characters out of 32428)
⚠️ HTML / djlint - 3 errors
Results of djlint linter (version 1.36.4)
See documentation on https://megalinter.io/9.2.0/descriptors/html_djlint/
-----------------------------------------------

❌ [ERROR] electron-app/ffv/index.html
    
    
    Linting 0/1 files ┈┈┈┈┈┈┈┈┈┈ 00:00    
                                          
    
    Linting 1/1 files ━━━━━━━━━━ 00:00    
    Linting 1/1 files ━━━━━━━━━━ 00:00    
    
    
    electron-app/ffv/index.html
    ───────────────────────────────────────────────────────────────────────────────
    H031 2:0 Consider adding meta keywords. <html lang="en"> 
    H037 5:59 Duplicate attribute found. initial-scale
    
    Linted 1 file, found 2 errors.

❌ [ERROR] electron-app/index.html
    
    
    Linting 0/1 files ┈┈┈┈┈┈┈┈┈┈ 00:00    
    Linting 1/1 files ━━━━━━━━━━ 00:01    
                                          
    
    Linting 1/1 files ━━━━━━━━━━ 00:01    
    Linting 1/1 files ━━━━━━━━━━ 00:01    
    
    
    electron-app/index.html
    ───────────────────────────────────────────────────────────────────────────────
    H006 93:24 Img tag should have height and width attributes. <img 
    
    Linted 1 file, found 1 error.
⚠️ REPOSITORY / grype - 1 error
error: A high vulnerability in npm package: qs, version 6.13.0 was found at: /docusaurus/package-lock.json

warning: A medium vulnerability in npm package: lodash, version 4.17.21 was found at: /docusaurus/package-lock.json

warning: A medium vulnerability in npm package: lodash-es, version 4.17.21 was found at: /docusaurus/package-lock.json

warning: A medium vulnerability in npm package: undici, version 7.16.0 was found at: /docusaurus/package-lock.json

warning: A medium vulnerability in npm package: js-yaml, version 4.1.0 was found at: /electron-app/package-lock.json

warning: 4 warnings emitted
error: 1 errors emitted
⚠️ JSON / jsonlint - 2 errors
Results of jsonlint linter (version 16.0.0)
See documentation on https://megalinter.io/9.2.0/descriptors/json_jsonlint/
-----------------------------------------------

✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .jscpd.json
✅ [SUCCESS] .markdown-link-check.json
✅ [SUCCESS] .markdownlint.json
✅ [SUCCESS] .prettierrc.json
✅ [SUCCESS] .vscode/extensions.json
✅ [SUCCESS] .vscode/launch.json
✅ [SUCCESS] .vscode/settings.json
✅ [SUCCESS] .vscode/tasks.json
✅ [SUCCESS] cspell.json
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
✅ [SUCCESS] docusaurus/tsconfig.json
✅ [SUCCESS] docusaurus/typedoc.json
✅ [SUCCESS] docusaurus/typedoc.local.json
✅ [SUCCESS] electron-app/.markdown-link-check.json
✅ [SUCCESS] electron-app/.markdownlint.json
✅ [SUCCESS] electron-app/.npmpackagejsonlintrc.json
✅ [SUCCESS] electron-app/.vscode/tasks.json
✅ [SUCCESS] electron-app/ffv/manifest.json
✅ [SUCCESS] electron-app/package-lock.json
✅ [SUCCESS] electron-app/package.json
❌ [ERROR] electron-app/tsconfig.json
    File: electron-app/tsconfig.json
    Parse error on line 57, column 9:
    ...ck": false,        // We use extensive ...
    ----------------------^
    Unexpected token "/"

❌ [ERROR] electron-app/tsconfig.vitest.json
    File: electron-app/tsconfig.vitest.json
    Parse error on line 5, column 9:
    ...Options": {        // Vitest's typechec...
    ----------------------^
    Unexpected token "/"

✅ [SUCCESS] mermaid.config.json
⚠️ REPOSITORY / kics - 1 error
warning: Action is not pinned to a full length commit SHA.
   ┌─ .github/workflows/vitest.yml:92:1
   │
92 │               uses: codecov/test-results-action@v1
   │ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = Unpinned Actions Full Length Commit SHA
   = Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. When selecting a SHA, you should verify it is from the action's repository and not a repository fork.

warning: 1 warnings emitted
⚠️ SPELL / lychee - 4 errors
Results of lychee linter (version 0.18.0)
See documentation on https://megalinter.io/9.2.0/descriptors/spell_lychee/
-----------------------------------------------

✅ [SUCCESS] .checkov.yml
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .github/.spellcheck.yml
✅ [SUCCESS] .github/CHANGELOG.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/bug_report.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/custom-issue.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/feature_request.md
✅ [SUCCESS] .github/PROMPTS/Consistency-Check.prompt.md
✅ [SUCCESS] .github/PROMPTS/Continue.prompt.md
✅ [SUCCESS] .github/PROMPTS/Do-ToDo.prompt.md
❌ [ERROR] .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
    [ERROR] https://vitest.dev/guide/testing-types.html | Network error: error sending request for url (https://vitest.dev/guide/testing-types.html) Maybe a certificate error?
    [200] https://vitest.dev/api/
    [200] https://vitest.dev/guide/snapshot.html
    [200] https://vitest.dev/guide/test-context.html
    [200] https://vitest.dev/api/assert.html
    [200] https://vitest.dev/guide/mocking.html
    [200] https://vitest.dev/config/#benchmark
    
    📝 Summary
    ---------------------
    🔍 Total............7
    ✅ Successful.......6
    ⏳ Timeouts.........0
    🔀 Redirected.......0
    👻 Excluded.........0
    ❓ Unknown..........0
    🚫 Errors...........1
    
    Errors in .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
    [ERROR] https://vitest.dev/guide/testing-types.html | Network error: error sending request for url (https://vitest.dev/guide/testing-types.html) Maybe a certificate error?

✅ [SUCCESS] .github/PROMPTS/Review.prompt.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/README.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/bugfix.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/documentation.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/feature.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/maintenance.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/pull_request_template.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/quick-fix.md
✅ [SUCCESS] .github/agents/BeastMode.agent.md
✅ [SUCCESS] .github/copilot-commit-message-instructions.md
✅ [SUCCESS] .github/copilot-instructions.md
✅ [SUCCESS] .github/dependabot.yml
✅ [SUCCESS] .github/workflows/ActionLint.yml
✅ [SUCCESS] .github/workflows/Build.yml
✅ [SUCCESS] .github/workflows/VirusTotal.yml
✅ [SUCCESS] .github/workflows/build-win7.yml
✅ [SUCCESS] .github/workflows/cleanReleases.yml
✅ [SUCCESS] .github/workflows/codeql.yml
✅ [SUCCESS] .github/workflows/depende

(Truncated to 2500 characters out of 239113)
⚠️ MARKDOWN / markdownlint - 58 errors
Results of markdownlint linter (version 0.45.0)
See documentation on https://megalinter.io/9.2.0/descriptors/markdown_markdownlint/
-----------------------------------------------

✅ [SUCCESS] .github/CHANGELOG.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/bug_report.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/custom-issue.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/feature_request.md
❌ [ERROR] .github/PROMPTS/Consistency-Check.prompt.md
    .github/PROMPTS/Consistency-Check.prompt.md:54 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- Relevant file path(s) with c..."]
    .github/PROMPTS/Consistency-Check.prompt.md:65 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- The preferred approach or ex..."]
    .github/PROMPTS/Consistency-Check.prompt.md:72 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- **Quick Wins** – light stand..."]
    .github/PROMPTS/Consistency-Check.prompt.md:87 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. **Understand the Context**:..."]
    .github/PROMPTS/Consistency-Check.prompt.md:98 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- Different naming conventions..."]

❌ [ERROR] .github/PROMPTS/Continue.prompt.md
    .github/PROMPTS/Continue.prompt.md:9 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "- This is a generic continuati..."]

❌ [ERROR] .github/PROMPTS/Do-ToDo.prompt.md
    .github/PROMPTS/Do-ToDo.prompt.md:9 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "- Begin by clearing any existi..."]
    .github/PROMPTS/Do-ToDo.prompt.md:21:124 MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: '.']

❌ [ERROR] .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
    .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:53:1 MD029/ol-prefix Ordered list item prefix [Expected: 1; Actual: 6; Style: 1/2/3]
    .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:54:1 MD029/ol-prefix Ordered list item prefix [Expected: 2; Actual: 7; Style: 1/2/3]
    .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:100:32 MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: ':']

❌ [ERROR] .github/PROMPTS/Review.prompt.md
    .github/PROMPTS/Review.prompt.md:9 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Conte

(Truncated to 2500 characters out of 9755)
⚠️ JAVASCRIPT / prettier - 318 errors
Results of prettier linter (version 3.6.2)
See documentation on https://megalinter.io/9.2.0/descriptors/javascript_prettier/
-----------------------------------------------

❌ [ERROR] electron-app/__mocks__/electron.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/Results-H2VOSWW7.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/Sprite-BZ4Kwmf3.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/binaryString-DLpsQS3c.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/findFields-C7eiFatx.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/getMessagesForName-CXPND5Gu.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-B6xcXKpx.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-C1xoUegX.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-CQWboq_8.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-D4CCfpM1.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/index-LvWRIhnC.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/isUnknown-BvXlyTdW.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/useMeasure-Df3vRnzU.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js

❌ [ERROR] electron-app/ffv/assets/waypoint_icons_sprite-Dqa_dKt2.js
    Checking formatting...
    [error] Cannot find package 'prettier-plugin-packagejson' importe

(Truncated to 2500 characters out of 54832)
⚠️ JSON / prettier - 21 errors
Results of prettier linter (version 3.6.2)
See documentation on https://megalinter.io/9.2.0/descriptors/json_prettier/
-----------------------------------------------

❌ [ERROR] .devskim.json
    Checking formatting...
    [warn] .devskim.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .jscpd.json
    Checking formatting...
    [warn] .jscpd.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .markdown-link-check.json
    Checking formatting...
    [warn] .markdown-link-check.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .markdownlint.json
    Checking formatting...
    [warn] .markdownlint.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .prettierrc.json
    Checking formatting...
    [warn] .prettierrc.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .vscode/extensions.json
    Checking formatting...
    [warn] .vscode/extensions.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .vscode/launch.json
    Checking formatting...
    [warn] .vscode/launch.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .vscode/settings.json
    Checking formatting...
    [warn] .vscode/settings.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .vscode/tasks.json
    Checking formatting...
    [warn] .vscode/tasks.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] cspell.json
    Checking formatting...
    [warn] cspell.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
❌ [ERROR] docusaurus/tsconfig.json
    Checking formatting...
    [warn] docusaurus/tsconfig.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] docusaurus/typedoc.json
    Checking formatting...
    [warn] docusaurus/typedoc.json
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] docusaurus/typedoc.local.json
    Checking formatting...
    [warn] docusaurus/typedoc.local.json
    [warn] Code style issues found 

(Truncated to 2500 characters out of 4241)
⚠️ YAML / prettier - 52 errors
Results of prettier linter (version 3.6.2)
See documentation on https://megalinter.io/9.2.0/descriptors/yaml_prettier/
-----------------------------------------------

❌ [ERROR] .checkov.yml
    Checking formatting...
    [warn] .checkov.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/.spellcheck.yml
    Checking formatting...
    [warn] .github/.spellcheck.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/dependabot.yml
    Checking formatting...
    [warn] .github/dependabot.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/ActionLint.yml
    Checking formatting...
    [warn] .github/workflows/ActionLint.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/Build.yml
    Checking formatting...
    [warn] .github/workflows/Build.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/VirusTotal.yml
    Checking formatting...
    [warn] .github/workflows/VirusTotal.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/build-win7.yml
    Checking formatting...
    [warn] .github/workflows/build-win7.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/cleanReleases.yml
    Checking formatting...
    [warn] .github/workflows/cleanReleases.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/codeql.yml
    Checking formatting...
    [warn] .github/workflows/codeql.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/dependency-review.yml
    Checking formatting...
    [warn] .github/workflows/dependency-review.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/devskim.yml
    Checking formatting...
    [warn] .github/workflows/devskim.yml
    [warn] Code style issues found in the above file. Run Prettier with --write to fix.

❌ [ERROR] .github/workflows/docusaurus.yml
    Checking formatting...
    [warn] .github/workflows/docusaurus.yml
    [warn] Code style issues found in the above file. Run Prettier 

(Truncated to 2500 characters out of 10629)
⚠️ REPOSITORY / secretlint - 3 errors
error: found basic auth credential: *****************************
    ┌─ electron-app/tests/unit/main/ipc/registerExternalHandlers.test.js:161:56
    │
161 │             await expect(shellOpenExternalHandler({}, "https://user:[email protected]")).rejects.toThrow(
    │                                                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    │
    = secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error

error: found basic auth credential: *****************************
   ┌─ electron-app/tests/unit/main/security/externalUrlPolicy.test.ts:20:43
   │
20 │         expect(() => validateExternalUrl("https://user:[email protected]")).toThrow();
   │                                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error

error: found basic auth credential: *****************************
   ┌─ electron-app/tests/unit/main/updater/setupAutoUpdater.test.ts:68:23
   │
68 │             feedURL: "https://user:[email protected]/releases",
   │                       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   │
   = secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error

error: 3 errors emitted
⚠️ CSS / stylelint - 306 errors
Results of stylelint linter (version 16.26.0)
See documentation on https://megalinter.io/9.2.0/descriptors/css_stylelint/
-----------------------------------------------

❌ [ERROR] docusaurus/src/components/GitHubStats/styles.module.css
    
    docusaurus/src/components/GitHubStats/styles.module.css
       1:1  ✖  Expected class selector ".githubStats" to be kebab-case  selector-class-pattern
       8:1  ✖  Expected class selector ".statBadge" to be kebab-case    selector-class-pattern
      22:1  ✖  Expected class selector ".statBadge" to be kebab-case    selector-class-pattern
    
    ✖ 3 problems (3 errors, 0 warnings)

❌ [ERROR] docusaurus/src/components/HomepageFeatures/styles.module.css
    
    docusaurus/src/components/HomepageFeatures/styles.module.css
       6:1  ✖  Expected class selector ".featuresTitle" to be kebab-case       selector-class-pattern
      13:1  ✖  Expected class selector ".featureCard" to be kebab-case         selector-class-pattern
      23:1  ✖  Expected class selector ".featureCard" to be kebab-case         selector-class-pattern
      29:1  ✖  Expected class selector ".featureIcon" to be kebab-case         selector-class-pattern
      35:1  ✖  Expected class selector ".featureTitle" to be kebab-case        selector-class-pattern
      42:1  ✖  Expected class selector ".featureDescription" to be kebab-case  selector-class-pattern
    
    ✖ 6 problems (6 errors, 0 warnings)

❌ [ERROR] docusaurus/src/css/custom.css
    
    docusaurus/src/css/custom.css
       33:65  ✖  Expected "Roboto" to be "roboto"                                         value-keyword-case
       33:73  ✖  Expected "Ubuntu" to be "ubuntu"                                         value-keyword-case
       33:81  ✖  Expected "Cantarell" to be "cantarell"                                   value-keyword-case
       35:63  ✖  Expected "Menlo" to be "menlo"                                           value-keyword-case
       35:70  ✖  Expected "Monaco" to be "monaco"                                         value-keyword-case
       35:78  ✖  Expected "Consolas" to be "consolas"                                     value-keyword-case
       52:3   ✖  Unexpected empty line before custom property                             custom-property-empty-line-before
       57:3   ✖  Unexpected empty line before custom property                             custom-property-empty-line-before
       70:19  ✖  Expected "optimizeLegibility" to be "optimizelegibility"              

(Truncated to 2500 characters out of 48264)
⚠️ REPOSITORY / trivy - 1 error
warning: Package: lodash
Installed Version: 4.17.21
Vulnerability CVE-2025-13465
Severity: MEDIUM
Fixed Version: 4.17.23
Link: [CVE-2025-13465](https://avd.aquasec.com/nvd/cve-2025-13465)
      ┌─ docusaurus/package-lock.json:12620:1
      │  
12620 │ ╭         "node_modules/lodash": {
12621 │ │             "version": "4.17.21",
12622 │ │             "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
12623 │ │             "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
12624 │ │             "license": "MIT"
12625 │ │         },
      │ ╰^
      │  
      = lodash: prototype pollution in _.unset and _.omit functions
      = Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.
        
        The issue permits deletion of properties but does not allow overwriting their original behavior.
        
        This issue is patched on 4.17.23

warning: Package: lodash-es
Installed Version: 4.17.21
Vulnerability CVE-2025-13465
Severity: MEDIUM
Fixed Version: 4.17.23
Link: [CVE-2025-13465](https://avd.aquasec.com/nvd/cve-2025-13465)
      ┌─ docusaurus/package-lock.json:12626:1
      │  
12626 │ ╭         "node_modules/lodash-es": {
12627 │ │             "version": "4.17.21",
12628 │ │             "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz",
12629 │ │             "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==",
12630 │ │             "license": "MIT"
12631 │ │         },
      │ ╰^
      │  
      = lodash: prototype pollution in _.unset and _.omit functions
      = Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.
        
        The issue permits deletion of properties but does not allow overwriting their original behavior.
        
        This issue is patched on 4.17.23

error: Package: qs
Installed Version: 6.13.0
Vulnerability CVE-2025-15284
Severity: HIGH
Fixed Version: 6.14.1
Link: [CVE-2025-15284](https://avd.aquasec.com/nvd/cve-2025-15284)
      ┌─ docusaurus/package-lock.json:17742:1
      │  
17742 │ ╭         "node_modules/qs": {
17743 │ │             "version": "6.13.

(Truncated to 2500 characters out of 8093)
⚠️ TYPESCRIPT / ts-standard - 306 errors
Results of ts-standard linter (version 12.0.2)
See documentation on https://megalinter.io/9.2.0/descriptors/typescript_ts_standard/
-----------------------------------------------

❌ [ERROR] docusaurus/docusaurus.config.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] docusaurus/sidebars.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] docusaurus/src/js/modernEnhancements.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/fitsdk.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/global.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/Results-H2VOSWW7.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/Sprite-BZ4Kwmf3.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/binaryString-DLpsQS3c.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/findFields-C7eiFatx.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/getMessagesForName-CXPND5Gu.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/index-B6xcXKpx.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/index-C1xoUegX.d.ts
    Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

❌ [ERROR] electron-app/types/ffv/assets/inde

(Truncated to 2500 characters out of 62473)
⚠️ JSON / v8r - 1 error
Results of v8r linter (version 5.1.0)
See documentation on https://megalinter.io/9.2.0/descriptors/json_v8r/
-----------------------------------------------

✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .jscpd.json
✅ [SUCCESS] .markdown-link-check.json
✅ [SUCCESS] .markdownlint.json
✅ [SUCCESS] .prettierrc.json
✅ [SUCCESS] .vscode/extensions.json
✅ [SUCCESS] .vscode/launch.json
✅ [SUCCESS] .vscode/settings.json
❌ [ERROR] .vscode/tasks.json
    ℹ No config file found
    ℹ Pre-warming the cache
    ℹ Processing .vscode/tasks.json
    ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
    ℹ Validating .vscode/tasks.json against schema from https://www.schemastore.org/task.json ...
    ✖ .vscode/tasks.json is invalid
    
    .vscode/tasks.json#/tasks/7/group must be object
    .vscode/tasks.json#/tasks/7/group must be equal to one of the allowed values
    .vscode/tasks.json#/tasks/7/group must match a schema in anyOf

✅ [SUCCESS] cspell.json
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
✅ [SUCCESS] docusaurus/tsconfig.json
✅ [SUCCESS] docusaurus/typedoc.json
✅ [SUCCESS] docusaurus/typedoc.local.json
✅ [SUCCESS] electron-app/.markdown-link-check.json
✅ [SUCCESS] electron-app/.markdownlint.json
✅ [SUCCESS] electron-app/.npmpackagejsonlintrc.json
✅ [SUCCESS] electron-app/.vscode/tasks.json
✅ [SUCCESS] electron-app/ffv/manifest.json
✅ [SUCCESS] electron-app/package-lock.json
✅ [SUCCESS] electron-app/package.json
✅ [SUCCESS] electron-app/tsconfig.json
✅ [SUCCESS] electron-app/tsconfig.vitest.json
✅ [SUCCESS] mermaid.config.json

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx [email protected] --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,COPYPASTE_JSCPD,CSS_STYLELINT,HTML_DJLINT,HTML_HTMLHINT,JAVASCRIPT_PRETTIER,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,POWERSHELL_POWERSHELL,POWERSHELL_POWERSHELL_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_KICS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,TYPESCRIPT_STANDARD,XML_XMLLINT,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/electron-app/lodash-4.17.23 branch from 6c99071 to 0bbdd81 Compare January 29, 2026 05:19
@github-actions
Copy link
Contributor

Summary of Pull Request:

This pull request updates the lodash dependency in the electron-app project from version 4.17.21 to 4.17.23. The primary motivation for this update is to ensure the project uses the most recent version of lodash, which contains bug fixes, security improvements, and updated functionality.

Key Changes of the Update:

  1. Security Fix: Addresses a prototype pollution vulnerability in the baseUnset function.
  2. Bug Fixes: Includes minor corrections such as fixing return types in the setCacheHas function and updating JSDoc documentation.
  3. Documentation Enhancements: Updates related links, improves auto-link functions, and makes minor adjustments to documentation formatting.
  4. Chores: Cleans up unnecessary files like yarn.lock and removes legacy CI configurations.

Why It Matters:
Updating lodash ensures that your project benefits from the latest fixes and remains secure from potential

@github-actions
Copy link
Contributor

Summary of the GitHub Pull Request

Title: dependency: Bump lodash from 4.17.21 to 4.17.23 in /electron-app

Description:
This Dependabot pull request upgrades Lodash, a utility library, from version 4.17.21 to 4.17.23. The update includes minor fixes, enhancements, and security updates. Dependabot will rebase the PR automatically to align with any new changes in the repository, as long as no manual edits are made to the PR.

Key Updates and Changes in Lodash:

  • Patches a prototype pollution vulnerability in the baseUnset function.
  • Fixes JSDoc return type for setCacheHas to correctly reflect a return type of boolean.
  • Updates to documentation and internal tooling (e.g., removal of outdated files and configurations).
  • Compatibility adjustments for modern JavaScript environments like Bun.
  • General maintenance

@github-actions
Copy link
Contributor

Summary of the Pull Request:

This pull request upgrades the lodash dependency in the Electron application from version 4.17.21 to 4.17.23. The update addresses security and functionality improvements within lodash.

Key Changes:

  1. Bug Fixes & Improvements in lodash:

    • Fixes to baseUnset to prevent prototype pollution (security vulnerability) – critical for secure handling of objects.
    • JSDoc and documentation updates to improve code clarity and type definitions.
    • Additions to .compact() falsey checks for better handling of certain edge cases.
    • Updated pipeline configuration and removed deprecated/legacy files.
  2. Version Compatibility:

    • The provided compatibility score from Dependabot indicates that the updated version (4.17.23) should not create compatibility issues with your project.

Benefits of the Update:

  • Resolves any potential prototype pollution vulnerabilities in lodash.
  • Aligns the project with the latest patches

@Nick2bad4u Nick2bad4u closed this Feb 1, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 1, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/electron-app/lodash-4.17.23 branch February 1, 2026 23:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot Dependabot Pull Requests dependencies Pull requests that update a dependency file npm npm updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant