-
Notifications
You must be signed in to change notification settings - Fork 3
[dependency](deps): Bump lodash from 4.17.21 to 4.17.23 in /electron-app #174
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[dependency](deps): Bump lodash from 4.17.21 to 4.17.23 in /electron-app #174
Conversation
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Summary of the Pull RequestThis pull request updates the Key Improvements and Fixes:
|
❌ 1 Tests Failed:
View the top 1 failed test(s) by shortest run time
To view more test analytics, go to the Test Analytics Dashboard |
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| ✅ ACTION | actionlint | 42 | 0 | 0 | 0.86s | |
| ✅ COPYPASTE | jscpd | yes | no | no | 49.1s | |
| stylelint | 9 | 306 | 0 | 14.86s | ||
| djlint | 2 | 3 | 0 | 3.04s | ||
| ✅ HTML | htmlhint | 2 | 0 | 0 | 0.57s | |
| prettier | 318 | 318 | 0 | 108.18s | ||
| jsonlint | 25 | 2 | 0 | 3.62s | ||
| prettier | 25 | 21 | 0 | 9.01s | ||
| v8r | 25 | 1 | 0 | 51.14s | ||
| markdownlint | 36 | 58 | 0 | 21.19s | ||
| ✅ MARKDOWN | markdown-table-formatter | 28 | 0 | 0 | 7.37s | |
| ✅ POWERSHELL | powershell | 3 | 0 | 0 | 5.59s | |
| ✅ POWERSHELL | powershell_formatter | 3 | 0 | 0 | 3.15s | |
| ✅ REPOSITORY | checkov | yes | no | no | 54.15s | |
| devskim | yes | 1 | 1 | 8.93s | ||
| ✅ REPOSITORY | dustilock | yes | no | no | 2.76s | |
| ✅ REPOSITORY | gitleaks | yes | no | no | 5.6s | |
| ✅ REPOSITORY | git_diff | yes | no | no | 0.32s | |
| grype | yes | 1 | 4 | 72.77s | ||
| kics | yes | 1 | 1 | 6.5s | ||
| secretlint | yes | 3 | no | 17.61s | ||
| ✅ REPOSITORY | syft | yes | no | no | 27.74s | |
| trivy | yes | 1 | 4 | 11.98s | ||
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 6.76s | |
| ✅ REPOSITORY | trufflehog | yes | no | no | 14.42s | |
| cspell | 782 | 2883 | 0 | 1468.38s | ||
| lychee | 118 | 4 | 0 | 131.12s | ||
| ts-standard | 306 | 306 | 0 | 123.05s | ||
| ✅ XML | xmllint | 1 | 0 | 0 | 1.56s | |
| prettier | 54 | 52 | 104 | 21.38s | ||
| ✅ YAML | v8r | 54 | 0 | 0 | 119.55s | |
| ✅ YAML | yamllint | 54 | 0 | 0 | 12.93s |
Detailed Issues
⚠️ SPELL / cspell - 2883 errors
Results of cspell linter (version 9.3.2)
See documentation on https://megalinter.io/9.2.0/descriptors/spell_cspell/
-----------------------------------------------
✅ [SUCCESS] .checkov.yml
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .djlintrc
✅ [SUCCESS] .git/FETCH_HEAD
✅ [SUCCESS] .git/HEAD
❌ [ERROR] .git/config
.git/config:11:13 - Unknown word (gitdir) -- [includeIf "gitdir:/home/runner/work/FitFileView
Suggestions: [gilder, girder, giddier, libdir, outdir]
.git/config:13:13 - Unknown word (gitdir) -- [includeIf "gitdir:/home/runner/work/FitFileView
Suggestions: [gilder, girder, giddier, libdir, outdir]
.git/config:13:71 - Unknown word (worktrees) -- FileViewer/FitFileViewer/.git/worktrees/*"]
Suggestions: [workers, worker's, workarea, workArea, worries]
.git/config:15:13 - Unknown word (gitdir) -- [includeIf "gitdir:.git
Suggestions: [gilder, girder, giddier, libdir, outdir]
.git/config:17:13 - Unknown word (gitdir) -- [includeIf "gitdir:.git
Suggestions: [gilder, girder, giddier, libdir, outdir]
.git/config:17:43 - Unknown word (worktrees) -- .git/worktrees/*"]
Suggestions: [workers, worker's, workarea, workArea, worries]
CSpell: Files checked: 1, Issues found: 6 in 1 file.
✅ [SUCCESS] .git/description
✅ [SUCCESS] .git/index
✅ [SUCCESS] .git/info/exclude
✅ [SUCCESS] .git/logs/HEAD
✅ [SUCCESS] .git/logs/refs/remotes/pull/174/merge
✅ [SUCCESS] .git/refs/remotes/pull/174/merge
✅ [SUCCESS] .git/shallow
❌ [ERROR] .github/.spellcheck.yml
.github/.spellcheck.yml:6:11 - Unknown word (wordlists) -- wordlists:
Suggestions: [wordless, wordiest, worldliest, worsts, wrists]
.github/.spellcheck.yml:7:18 - Unknown word (wordlist) -- - .wordlist.txt
Suggestions: [wordiest, wordless, worldliest, worlds, wordily]
.github/.spellcheck.yml:10:17 - Unknown word (pyspelling) -- - pyspelling.filters.markdown:
Suggestions: [propelling, pistolling]
.github/.spellcheck.yml:12:23 - Unknown word (pymdownx) -- - pymdownx.superfences
Suggestions: [mydown, myDown, putdown, putdowns]
.github/.spellcheck.yml:12:32 - Unknown word (superfences) -- - pymdownx.superfences
Suggestions: [supervenes, superdense, superfine, supervene, supersedes]
.github/.spellcheck.yml:13:17 - Unknown word (pyspelling) -- - pyspelling.filters.html:
Suggestions: [propelling, pistolling]
CSpell: Files checked: 1, Iss
(Truncated to 2500 characters out of 567163)
⚠️ REPOSITORY / devskim - 1 error
[05:23:17 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
[05:23:17 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
.devskim.json:41:46:41:55 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:47:66:47:75 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:53:61:53:70 [ManualReview] DS162092 Do not leave debug code in production
.devskim.json:59:61:59:70 [ManualReview] DS162092 Do not leave debug code in production
[05:23:17 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
electron-app/utils/ui/quickColorSwitcher.js:82:69:82:86 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/quickColorSwitcher.js:110:49:110:66 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/quickColorSwitcher.js:387:16:388:54 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:547:12:547:25 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:1122:8:1123:44 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:1246:29:1246:42 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/createSettingsHeader.js:1524:8:1525:44 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/settingsModal.js:38:8:38:21 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/settingsModal.js:102:50:102:67 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/settingsModal.js:108:50:108:67 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/settingsModal.js:151:53:151:70 [Moderate] DS137138 Insecure URL
electron-app/utils/ui/settingsModal.js:409:8:409:21 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/ui/components/ensureChartSettingsDropdowns.js:69:8:71:41 [ManualReview] DS172411 Review setTimeout for untrusted data
[05:23:17 ERR] Failed to parse Data at the root level is invalid. Line 1, position 1. as a XML document: null
electron-app/utils/net/networkUtils.js:22:35:22:70 [ManualReview] DS172411 Review setTimeout for untrusted data
electron-app/utils/debug/stateDevTools.js:589:43:589:52 [ManualReview] DS162092 Do not leave debug code in production
electron-app/utils/debug/sta
(Truncated to 2500 characters out of 32428)
⚠️ HTML / djlint - 3 errors
Results of djlint linter (version 1.36.4)
See documentation on https://megalinter.io/9.2.0/descriptors/html_djlint/
-----------------------------------------------
❌ [ERROR] electron-app/ffv/index.html
Linting 0/1 files ┈┈┈┈┈┈┈┈┈┈ 00:00
Linting 1/1 files ━━━━━━━━━━ 00:00
Linting 1/1 files ━━━━━━━━━━ 00:00
electron-app/ffv/index.html
───────────────────────────────────────────────────────────────────────────────
H031 2:0 Consider adding meta keywords. <html lang="en">
H037 5:59 Duplicate attribute found. initial-scale
Linted 1 file, found 2 errors.
❌ [ERROR] electron-app/index.html
Linting 0/1 files ┈┈┈┈┈┈┈┈┈┈ 00:00
Linting 1/1 files ━━━━━━━━━━ 00:01
Linting 1/1 files ━━━━━━━━━━ 00:01
Linting 1/1 files ━━━━━━━━━━ 00:01
electron-app/index.html
───────────────────────────────────────────────────────────────────────────────
H006 93:24 Img tag should have height and width attributes. <img
Linted 1 file, found 1 error.
⚠️ REPOSITORY / grype - 1 error
error: A high vulnerability in npm package: qs, version 6.13.0 was found at: /docusaurus/package-lock.json
warning: A medium vulnerability in npm package: lodash, version 4.17.21 was found at: /docusaurus/package-lock.json
warning: A medium vulnerability in npm package: lodash-es, version 4.17.21 was found at: /docusaurus/package-lock.json
warning: A medium vulnerability in npm package: undici, version 7.16.0 was found at: /docusaurus/package-lock.json
warning: A medium vulnerability in npm package: js-yaml, version 4.1.0 was found at: /electron-app/package-lock.json
warning: 4 warnings emitted
error: 1 errors emitted
⚠️ JSON / jsonlint - 2 errors
Results of jsonlint linter (version 16.0.0)
See documentation on https://megalinter.io/9.2.0/descriptors/json_jsonlint/
-----------------------------------------------
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .jscpd.json
✅ [SUCCESS] .markdown-link-check.json
✅ [SUCCESS] .markdownlint.json
✅ [SUCCESS] .prettierrc.json
✅ [SUCCESS] .vscode/extensions.json
✅ [SUCCESS] .vscode/launch.json
✅ [SUCCESS] .vscode/settings.json
✅ [SUCCESS] .vscode/tasks.json
✅ [SUCCESS] cspell.json
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
✅ [SUCCESS] docusaurus/tsconfig.json
✅ [SUCCESS] docusaurus/typedoc.json
✅ [SUCCESS] docusaurus/typedoc.local.json
✅ [SUCCESS] electron-app/.markdown-link-check.json
✅ [SUCCESS] electron-app/.markdownlint.json
✅ [SUCCESS] electron-app/.npmpackagejsonlintrc.json
✅ [SUCCESS] electron-app/.vscode/tasks.json
✅ [SUCCESS] electron-app/ffv/manifest.json
✅ [SUCCESS] electron-app/package-lock.json
✅ [SUCCESS] electron-app/package.json
❌ [ERROR] electron-app/tsconfig.json
File: electron-app/tsconfig.json
Parse error on line 57, column 9:
...ck": false, // We use extensive ...
----------------------^
Unexpected token "/"
❌ [ERROR] electron-app/tsconfig.vitest.json
File: electron-app/tsconfig.vitest.json
Parse error on line 5, column 9:
...Options": { // Vitest's typechec...
----------------------^
Unexpected token "/"
✅ [SUCCESS] mermaid.config.json
⚠️ REPOSITORY / kics - 1 error
warning: Action is not pinned to a full length commit SHA.
┌─ .github/workflows/vitest.yml:92:1
│
92 │ uses: codecov/test-results-action@v1
│ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│
= Unpinned Actions Full Length Commit SHA
= Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload. When selecting a SHA, you should verify it is from the action's repository and not a repository fork.
warning: 1 warnings emitted
⚠️ SPELL / lychee - 4 errors
Results of lychee linter (version 0.18.0)
See documentation on https://megalinter.io/9.2.0/descriptors/spell_lychee/
-----------------------------------------------
✅ [SUCCESS] .checkov.yml
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .github/.spellcheck.yml
✅ [SUCCESS] .github/CHANGELOG.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/bug_report.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/custom-issue.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/feature_request.md
✅ [SUCCESS] .github/PROMPTS/Consistency-Check.prompt.md
✅ [SUCCESS] .github/PROMPTS/Continue.prompt.md
✅ [SUCCESS] .github/PROMPTS/Do-ToDo.prompt.md
❌ [ERROR] .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
[ERROR] https://vitest.dev/guide/testing-types.html | Network error: error sending request for url (https://vitest.dev/guide/testing-types.html) Maybe a certificate error?
[200] https://vitest.dev/api/
[200] https://vitest.dev/guide/snapshot.html
[200] https://vitest.dev/guide/test-context.html
[200] https://vitest.dev/api/assert.html
[200] https://vitest.dev/guide/mocking.html
[200] https://vitest.dev/config/#benchmark
📝 Summary
---------------------
🔍 Total............7
✅ Successful.......6
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........1
Errors in .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
[ERROR] https://vitest.dev/guide/testing-types.html | Network error: error sending request for url (https://vitest.dev/guide/testing-types.html) Maybe a certificate error?
✅ [SUCCESS] .github/PROMPTS/Review.prompt.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/README.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/bugfix.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/documentation.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/feature.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/maintenance.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/pull_request_template.md
✅ [SUCCESS] .github/PULL_REQUEST_TEMPLATE/quick-fix.md
✅ [SUCCESS] .github/agents/BeastMode.agent.md
✅ [SUCCESS] .github/copilot-commit-message-instructions.md
✅ [SUCCESS] .github/copilot-instructions.md
✅ [SUCCESS] .github/dependabot.yml
✅ [SUCCESS] .github/workflows/ActionLint.yml
✅ [SUCCESS] .github/workflows/Build.yml
✅ [SUCCESS] .github/workflows/VirusTotal.yml
✅ [SUCCESS] .github/workflows/build-win7.yml
✅ [SUCCESS] .github/workflows/cleanReleases.yml
✅ [SUCCESS] .github/workflows/codeql.yml
✅ [SUCCESS] .github/workflows/depende
(Truncated to 2500 characters out of 239113)
⚠️ MARKDOWN / markdownlint - 58 errors
Results of markdownlint linter (version 0.45.0)
See documentation on https://megalinter.io/9.2.0/descriptors/markdown_markdownlint/
-----------------------------------------------
✅ [SUCCESS] .github/CHANGELOG.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/bug_report.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/custom-issue.md
✅ [SUCCESS] .github/ISSUE_TEMPLATE/feature_request.md
❌ [ERROR] .github/PROMPTS/Consistency-Check.prompt.md
.github/PROMPTS/Consistency-Check.prompt.md:54 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- Relevant file path(s) with c..."]
.github/PROMPTS/Consistency-Check.prompt.md:65 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- The preferred approach or ex..."]
.github/PROMPTS/Consistency-Check.prompt.md:72 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- **Quick Wins** – light stand..."]
.github/PROMPTS/Consistency-Check.prompt.md:87 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "1. **Understand the Context**:..."]
.github/PROMPTS/Consistency-Check.prompt.md:98 MD032/blanks-around-lists Lists should be surrounded by blank lines [Context: "- Different naming conventions..."]
❌ [ERROR] .github/PROMPTS/Continue.prompt.md
.github/PROMPTS/Continue.prompt.md:9 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "- This is a generic continuati..."]
❌ [ERROR] .github/PROMPTS/Do-ToDo.prompt.md
.github/PROMPTS/Do-ToDo.prompt.md:9 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "- Begin by clearing any existi..."]
.github/PROMPTS/Do-ToDo.prompt.md:21:124 MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: '.']
❌ [ERROR] .github/PROMPTS/Generate-100%-Test-Coverage.prompt.md
.github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:53:1 MD029/ol-prefix Ordered list item prefix [Expected: 1; Actual: 6; Style: 1/2/3]
.github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:54:1 MD029/ol-prefix Ordered list item prefix [Expected: 2; Actual: 7; Style: 1/2/3]
.github/PROMPTS/Generate-100%-Test-Coverage.prompt.md:100:32 MD026/no-trailing-punctuation Trailing punctuation in heading [Punctuation: ':']
❌ [ERROR] .github/PROMPTS/Review.prompt.md
.github/PROMPTS/Review.prompt.md:9 MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Conte
(Truncated to 2500 characters out of 9755)
⚠️ JAVASCRIPT / prettier - 318 errors
Results of prettier linter (version 3.6.2)
See documentation on https://megalinter.io/9.2.0/descriptors/javascript_prettier/
-----------------------------------------------
❌ [ERROR] electron-app/__mocks__/electron.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/Results-H2VOSWW7.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/Sprite-BZ4Kwmf3.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/binaryString-DLpsQS3c.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/findFields-C7eiFatx.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/getMessagesForName-CXPND5Gu.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-B6xcXKpx.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-C1xoUegX.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-CQWboq_8.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-D4CCfpM1.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/index-LvWRIhnC.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/isUnknown-BvXlyTdW.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/useMeasure-Df3vRnzU.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' imported from noop.js
❌ [ERROR] electron-app/ffv/assets/waypoint_icons_sprite-Dqa_dKt2.js
Checking formatting...
[error] Cannot find package 'prettier-plugin-packagejson' importe
(Truncated to 2500 characters out of 54832)
⚠️ JSON / prettier - 21 errors
Results of prettier linter (version 3.6.2)
See documentation on https://megalinter.io/9.2.0/descriptors/json_prettier/
-----------------------------------------------
❌ [ERROR] .devskim.json
Checking formatting...
[warn] .devskim.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .jscpd.json
Checking formatting...
[warn] .jscpd.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .markdown-link-check.json
Checking formatting...
[warn] .markdown-link-check.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .markdownlint.json
Checking formatting...
[warn] .markdownlint.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .prettierrc.json
Checking formatting...
[warn] .prettierrc.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .vscode/extensions.json
Checking formatting...
[warn] .vscode/extensions.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .vscode/launch.json
Checking formatting...
[warn] .vscode/launch.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .vscode/settings.json
Checking formatting...
[warn] .vscode/settings.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .vscode/tasks.json
Checking formatting...
[warn] .vscode/tasks.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] cspell.json
Checking formatting...
[warn] cspell.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
❌ [ERROR] docusaurus/tsconfig.json
Checking formatting...
[warn] docusaurus/tsconfig.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] docusaurus/typedoc.json
Checking formatting...
[warn] docusaurus/typedoc.json
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] docusaurus/typedoc.local.json
Checking formatting...
[warn] docusaurus/typedoc.local.json
[warn] Code style issues found
(Truncated to 2500 characters out of 4241)
⚠️ YAML / prettier - 52 errors
Results of prettier linter (version 3.6.2)
See documentation on https://megalinter.io/9.2.0/descriptors/yaml_prettier/
-----------------------------------------------
❌ [ERROR] .checkov.yml
Checking formatting...
[warn] .checkov.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/.spellcheck.yml
Checking formatting...
[warn] .github/.spellcheck.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/dependabot.yml
Checking formatting...
[warn] .github/dependabot.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/ActionLint.yml
Checking formatting...
[warn] .github/workflows/ActionLint.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/Build.yml
Checking formatting...
[warn] .github/workflows/Build.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/VirusTotal.yml
Checking formatting...
[warn] .github/workflows/VirusTotal.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/build-win7.yml
Checking formatting...
[warn] .github/workflows/build-win7.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/cleanReleases.yml
Checking formatting...
[warn] .github/workflows/cleanReleases.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/codeql.yml
Checking formatting...
[warn] .github/workflows/codeql.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/dependency-review.yml
Checking formatting...
[warn] .github/workflows/dependency-review.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/devskim.yml
Checking formatting...
[warn] .github/workflows/devskim.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
❌ [ERROR] .github/workflows/docusaurus.yml
Checking formatting...
[warn] .github/workflows/docusaurus.yml
[warn] Code style issues found in the above file. Run Prettier
(Truncated to 2500 characters out of 10629)
⚠️ REPOSITORY / secretlint - 3 errors
error: found basic auth credential: *****************************
┌─ electron-app/tests/unit/main/ipc/registerExternalHandlers.test.js:161:56
│
161 │ await expect(shellOpenExternalHandler({}, "https://user:[email protected]")).rejects.toThrow(
│ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│
= secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error
error: found basic auth credential: *****************************
┌─ electron-app/tests/unit/main/security/externalUrlPolicy.test.ts:20:43
│
20 │ expect(() => validateExternalUrl("https://user:[email protected]")).toThrow();
│ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│
= secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error
error: found basic auth credential: *****************************
┌─ electron-app/tests/unit/main/updater/setupAutoUpdater.test.ts:68:23
│
68 │ feedURL: "https://user:[email protected]/releases",
│ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│
= secretlint rule(@secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-basicauth) error
error: 3 errors emitted
⚠️ CSS / stylelint - 306 errors
Results of stylelint linter (version 16.26.0)
See documentation on https://megalinter.io/9.2.0/descriptors/css_stylelint/
-----------------------------------------------
❌ [ERROR] docusaurus/src/components/GitHubStats/styles.module.css
docusaurus/src/components/GitHubStats/styles.module.css
1:1 ✖ Expected class selector ".githubStats" to be kebab-case selector-class-pattern
8:1 ✖ Expected class selector ".statBadge" to be kebab-case selector-class-pattern
22:1 ✖ Expected class selector ".statBadge" to be kebab-case selector-class-pattern
✖ 3 problems (3 errors, 0 warnings)
❌ [ERROR] docusaurus/src/components/HomepageFeatures/styles.module.css
docusaurus/src/components/HomepageFeatures/styles.module.css
6:1 ✖ Expected class selector ".featuresTitle" to be kebab-case selector-class-pattern
13:1 ✖ Expected class selector ".featureCard" to be kebab-case selector-class-pattern
23:1 ✖ Expected class selector ".featureCard" to be kebab-case selector-class-pattern
29:1 ✖ Expected class selector ".featureIcon" to be kebab-case selector-class-pattern
35:1 ✖ Expected class selector ".featureTitle" to be kebab-case selector-class-pattern
42:1 ✖ Expected class selector ".featureDescription" to be kebab-case selector-class-pattern
✖ 6 problems (6 errors, 0 warnings)
❌ [ERROR] docusaurus/src/css/custom.css
docusaurus/src/css/custom.css
33:65 ✖ Expected "Roboto" to be "roboto" value-keyword-case
33:73 ✖ Expected "Ubuntu" to be "ubuntu" value-keyword-case
33:81 ✖ Expected "Cantarell" to be "cantarell" value-keyword-case
35:63 ✖ Expected "Menlo" to be "menlo" value-keyword-case
35:70 ✖ Expected "Monaco" to be "monaco" value-keyword-case
35:78 ✖ Expected "Consolas" to be "consolas" value-keyword-case
52:3 ✖ Unexpected empty line before custom property custom-property-empty-line-before
57:3 ✖ Unexpected empty line before custom property custom-property-empty-line-before
70:19 ✖ Expected "optimizeLegibility" to be "optimizelegibility"
(Truncated to 2500 characters out of 48264)
⚠️ REPOSITORY / trivy - 1 error
warning: Package: lodash
Installed Version: 4.17.21
Vulnerability CVE-2025-13465
Severity: MEDIUM
Fixed Version: 4.17.23
Link: [CVE-2025-13465](https://avd.aquasec.com/nvd/cve-2025-13465)
┌─ docusaurus/package-lock.json:12620:1
│
12620 │ ╭ "node_modules/lodash": {
12621 │ │ "version": "4.17.21",
12622 │ │ "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
12623 │ │ "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
12624 │ │ "license": "MIT"
12625 │ │ },
│ ╰^
│
= lodash: prototype pollution in _.unset and _.omit functions
= Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.
The issue permits deletion of properties but does not allow overwriting their original behavior.
This issue is patched on 4.17.23
warning: Package: lodash-es
Installed Version: 4.17.21
Vulnerability CVE-2025-13465
Severity: MEDIUM
Fixed Version: 4.17.23
Link: [CVE-2025-13465](https://avd.aquasec.com/nvd/cve-2025-13465)
┌─ docusaurus/package-lock.json:12626:1
│
12626 │ ╭ "node_modules/lodash-es": {
12627 │ │ "version": "4.17.21",
12628 │ │ "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz",
12629 │ │ "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==",
12630 │ │ "license": "MIT"
12631 │ │ },
│ ╰^
│
= lodash: prototype pollution in _.unset and _.omit functions
= Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.
The issue permits deletion of properties but does not allow overwriting their original behavior.
This issue is patched on 4.17.23
error: Package: qs
Installed Version: 6.13.0
Vulnerability CVE-2025-15284
Severity: HIGH
Fixed Version: 6.14.1
Link: [CVE-2025-15284](https://avd.aquasec.com/nvd/cve-2025-15284)
┌─ docusaurus/package-lock.json:17742:1
│
17742 │ ╭ "node_modules/qs": {
17743 │ │ "version": "6.13.
(Truncated to 2500 characters out of 8093)
⚠️ TYPESCRIPT / ts-standard - 306 errors
Results of ts-standard linter (version 12.0.2)
See documentation on https://megalinter.io/9.2.0/descriptors/typescript_ts_standard/
-----------------------------------------------
❌ [ERROR] docusaurus/docusaurus.config.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] docusaurus/sidebars.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] docusaurus/src/js/modernEnhancements.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/fitsdk.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/global.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/Results-H2VOSWW7.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/Sprite-BZ4Kwmf3.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/binaryString-DLpsQS3c.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/findFields-C7eiFatx.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/getMessagesForName-CXPND5Gu.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/index-B6xcXKpx.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/index-C1xoUegX.d.ts
Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.
❌ [ERROR] electron-app/types/ffv/assets/inde
(Truncated to 2500 characters out of 62473)
⚠️ JSON / v8r - 1 error
Results of v8r linter (version 5.1.0)
See documentation on https://megalinter.io/9.2.0/descriptors/json_v8r/
-----------------------------------------------
✅ [SUCCESS] .devskim.json
✅ [SUCCESS] .jscpd.json
✅ [SUCCESS] .markdown-link-check.json
✅ [SUCCESS] .markdownlint.json
✅ [SUCCESS] .prettierrc.json
✅ [SUCCESS] .vscode/extensions.json
✅ [SUCCESS] .vscode/launch.json
✅ [SUCCESS] .vscode/settings.json
❌ [ERROR] .vscode/tasks.json
ℹ No config file found
ℹ Pre-warming the cache
ℹ Processing .vscode/tasks.json
ℹ Found schema in https://www.schemastore.org/api/json/catalog.json ...
ℹ Validating .vscode/tasks.json against schema from https://www.schemastore.org/task.json ...
✖ .vscode/tasks.json is invalid
.vscode/tasks.json#/tasks/7/group must be object
.vscode/tasks.json#/tasks/7/group must be equal to one of the allowed values
.vscode/tasks.json#/tasks/7/group must match a schema in anyOf
✅ [SUCCESS] cspell.json
✅ [SUCCESS] docusaurus/package-lock.json
✅ [SUCCESS] docusaurus/package.json
✅ [SUCCESS] docusaurus/tsconfig.json
✅ [SUCCESS] docusaurus/typedoc.json
✅ [SUCCESS] docusaurus/typedoc.local.json
✅ [SUCCESS] electron-app/.markdown-link-check.json
✅ [SUCCESS] electron-app/.markdownlint.json
✅ [SUCCESS] electron-app/.npmpackagejsonlintrc.json
✅ [SUCCESS] electron-app/.vscode/tasks.json
✅ [SUCCESS] electron-app/ffv/manifest.json
✅ [SUCCESS] electron-app/package-lock.json
✅ [SUCCESS] electron-app/package.json
✅ [SUCCESS] electron-app/tsconfig.json
✅ [SUCCESS] electron-app/tsconfig.vitest.json
✅ [SUCCESS] mermaid.config.json
See detailed reports in MegaLinter artifacts
Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)
- Documentation: Custom Flavors
- Command:
npx [email protected] --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,COPYPASTE_JSCPD,CSS_STYLELINT,HTML_DJLINT,HTML_HTMLHINT,JAVASCRIPT_PRETTIER,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,POWERSHELL_POWERSHELL,POWERSHELL_POWERSHELL_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DEVSKIM,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_KICS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,TYPESCRIPT_STANDARD,XML_XMLLINT,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>
6c99071 to
0bbdd81
Compare
|
Summary of Pull Request: This pull request updates the Key Changes of the Update:
Why It Matters: |
Summary of the GitHub Pull RequestTitle: dependency: Bump lodash from 4.17.21 to 4.17.23 in /electron-app Description: Key Updates and Changes in Lodash:
|
|
Summary of the Pull Request: This pull request upgrades the lodash dependency in the Electron application from version 4.17.21 to 4.17.23. The update addresses security and functionality improvements within lodash. Key Changes:
Benefits of the Update:
|
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |

Bumps lodash from 4.17.21 to 4.17.23.
Commits
dec55b7Bump main to v4.17.23 (#6088)19c9251fix: setCacheHas JSDoc return type should be boolean (#6071)b5e6729jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)edadd45Prevent prototype pollution on baseUnset function4879a7adoc: fix autoLink function, conversion of source links (#6056)9648f69chore: removeyarn.lockfile (#6053)dfa407dci: remove legacy configuration files (#6052)156e196feat: add renovate setup (#6039)933e106ci: add pipeline for Bun (#6023)072a807docs: update links related to Open JS Foundation (#5968)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.