Skip to content

Commit 09c9395

Browse files
security: bump fsevents to latest(SEC- 2161) (#2643)
### Changes - **Bump `fsevents` to latest** (`2.3.3` → `^2.3.3`) in `package.json` and `package-lock.json` - Addresses compatibility issues with Node 18+ and fixes the sandbox-compatibility error in CI - **Lockfile cleanup** - Regenerated `package-lock.json` to remove outdated entries and avoid conflicts ### References - Security ticket: [SEC-2025-0421](https://support.auth0.com/tickets/SEC-2025-0421) - Resolves security vulnerability SEC-2161 - Related GitHub issue: #2609 ### Testing - [x] Installed dependencies and confirmed `npm install` completes without errors - [x] Ran **unit tests** (`npm test`) — all tests pass - [x] Ran **e2e tests** (`npm run test:e2e -- --no-sandbox`) in CI environment — ChromeHeadless now starts successfully - [x] Verified local build (`npm run build`) and manual smoke test of Lock UI ### Checklist * [x] I have read the [Auth0 general contribution guidelines](https://github.com/auth0/open-source-template/blob/master/GENERAL-CONTRIBUTING.md) * [x] I have read the [Auth0 Code of Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md) * [x] All code quality tools/guidelines have been run/followed (`npm run lint`, `npm run test:es-check`) * [x] All relevant assets have been compiled Co-authored-by: Omar Quazi <[email protected]>
1 parent 518ccff commit 09c9395

File tree

2 files changed

+8
-2
lines changed

2 files changed

+8
-2
lines changed

package-lock.json

Lines changed: 5 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -187,5 +187,8 @@
187187
"*.{js,jsx,json}": [
188188
"prettier --write"
189189
]
190+
},
191+
"optionalDependencies": {
192+
"fsevents": "^2.3.3"
190193
}
191194
}

0 commit comments

Comments
 (0)