Commits

History for

Commits on Aug 11, 2026

Bump nanoid to 3.3.17 to fix infinite loop vulnerability (GHSA-2v37-7h3g-55p8) (#62706)

docs-bot
and
Copilot
authored
a783225

Commits on Aug 10, 2026

Dedupe sharp to 0.35.3 with an overrides entry (#62611)

heiskr
and
Copilot
authored
06f03b8
Bump js-yaml from 4.3.0 to 4.3.1 in the npm_and_yarn group across 1 directory (#62656)

dependabot[bot]
and
heiskr
authored
b03843c

Commits on Aug 4, 2026

Bump undici, fast-uri, postcss overrides for vuln-mgmt fixes (#62617)

docs-bot
and
Copilot
authored
5f5504f
Bump brace-expansion from 1.1.14 to 1.1.18 in the npm_and_yarn group across 1 directory (#62604)
dependabot[bot]
authored
7bb06fe

Commits on Aug 3, 2026

Security: bump js-yaml to 5.2.2, sharp to 0.35.3, and brace-expansion to 5.0.8+ (#62572)

authored
c647eee

Commits on Jul 29, 2026

Bump vulnerable transitive deps within existing ranges (#62498)

heiskr
and
Copilot
authored
e9b563c

Commits on Jul 28, 2026

Commits on Jul 22, 2026

Pin @primer/react to 38.19.0 to fix language picker scroll bug (#62342)

heiskr
and
Copilot
authored
df5f56a

Commits on Jul 16, 2026

Bump @opentelemetry deps to clear core < 2.8.0 baggage vuln (GHSA-8988-4f7v-96qf) (#62265)

heiskr
and
Copilot
authored
f530144

Commits on Jul 7, 2026

Add @primer/react-brand foundation and migrate Pagination (#62080)

Ebonsignori
and
Copilot
authored
2ced51d
Copilot CLI: Add docs for CLI extensions (#61851)

authored
4bfecd0
Fix broken apache-arrow symlink in package-lock.json (#61560)

ahpook
and
Copilot
authored
266a6c2

Commits on Jul 6, 2026

Bump js-yaml from 4.2.0 to 5.1.0 (#61999)

authored
6f20d1b

Commits on Jul 2, 2026

Remove unused dependencies (#62049)

heiskr
and
Copilot
authored
c7e89e6

Commits on Jul 1, 2026

Bump eslint-plugin-primer-react from 8.5.2 to 9.0.0 (#61997)

dependabot[bot]
and
steves
authored
5170e4e
Add script to measure the always-on Copilot instruction budget (#61973)

lecoursen
and
Copilot
authored
fcb1ef2

Commits on Jun 30, 2026

Add RenderedHTML foundation for removing dangerouslySetInnerHTML (#61956)

heiskr
and
Copilot
authored
5eaa04c

Commits on Jun 25, 2026

Fix security vulnerabilities in npm dependencies (#61885)

steves
and
Copilot
authored
ed7284c

Commits on Jun 24, 2026

Bump esbuild from 0.25.0 to 0.28.1 (fixes CVE-2026-27143) (#61872)

steves
and
Copilot
authored
38a2999
Bump hot-shots from 15.0.0 to 16.0.0 (#61784)

dependabot[bot]
and
heiskr
authored
877bd65
Bump csv-parse from 6.1.0 to 7.0.0 (#61877)

dependabot[bot]
and
heiskr
authored
632ea0d
Bump commander from 14.0.3 to 15.0.0 (#61630)
dependabot[bot]
authored
fc9ab2b

Commits on Jun 23, 2026

Bump the npm_and_yarn group across 1 directory with 2 updates (#61841)

dependabot[bot]
and
steves
authored
65898fc

Commits on Jun 22, 2026

Convert REST and webhook code highlighting to React (lowlight) (#61772)

heiskr
and
Copilot
authored
4eedb19

Commits on Jun 19, 2026

chore: remove styled-components and related code from package files (#61709)

francinelucca
and
Copilot
authored
7606f04

Commits on Jun 15, 2026

Bump @grpc/grpc-js from 1.14.3 to 1.14.4 in the npm_and_yarn group across 1 directory (#61697)

dependabot[bot]
and
steves
authored
e61026c

Commits on Jun 9, 2026

Bump hot-shots from 14.3.1 to 15.0.0 (#61631)
dependabot[bot]
authored
8f8251b

Commits on Jun 1, 2026

Commits on May 29, 2026

Bump liquidjs to ^10.27.0 (clears critical GHSA-gf2q-c269-pqgc) (#61486)

heiskr
and
Copilot
authored
1252517
Bump @playwright/test to ^1.60.0 (#61467)

heiskr
and
Copilot
authored
4b6162b

Commits on May 27, 2026

🧹 Remove connect-timeout and add per-fetch timeouts (#61086)

authored
d0aac8e

Commits on May 26, 2026

Bump qs from 6.14.2 to 6.15.2 in the npm_and_yarn group across 1 directory (#61383)
dependabot[bot]
authored
6335fd7