Skip to content

Update dependencies and Obsidian Plugin Kit - #30

Merged
vrtmrz merged 1 commit into
mainfrom
chore/dependency-audit-updates
Nov 4, 2026
Merged

vrtmrz merged 1 commit into
mainfrom
chore/dependency-audit-updates

Conversation

@vrtmrz

@vrtmrz vrtmrz commented Nov 4, 2026 •

Copy link
Copy Markdown
Owner

Updates the dependency lockfile with available compatible audit fixes and advances the Obsidian Plugin Kit to version 0.1.7.

Changes

  • Apply the fixes available within existing dependency ranges.
  • Upgrade @vrtmrz/obsidian-plugin-kit from 0.1.4 to 0.1.7; DiffZip's existing /ui entry point remains compatible.

Verification

  • NODE_OPTIONS=--max-old-space-size=3072 npm run build — passed, with one Svelte warning about the initial value of initialItems.
  • NODE_OPTIONS=--max-old-space-size=3072 npm run lint:community — 0 errors and 49 warnings; no deprecated API findings.
  • npm audit --omit=dev — 0 vulnerabilities.
  • NODE_OPTIONS=--max-old-space-size=3072 npm run check:e2e:obsidian — passed.
  • All four real-Obsidian E2E scenarios passed on Linux arm64 with Obsidian 1.12.7 under Xvfb: restore confirmation, legacy-folder restore, mirror-delete semantics, and wake-lock lifecycle.

Remaining audit findings

npm audit reports 24 vulnerabilities (2 low and 22 moderate), all in development dependencies. A patched minimatch requires a major-version override that is incompatible with the current eslint-plugin-import call shape, and deepmerge has no published patched version. A force dry run did not resolve these findings, so the PR keeps the current toolchain compatibility.

@vrtmrz
vrtmrz merged commit c89ad48 into main Nov 4, 2026
1 check passed
@vrtmrz vrtmrz mentioned this pull request Nov 4, 2026
3 tasks done
@vrtmrz
vrtmrz deleted the chore/dependency-audit-updates branch November 4, 2026 06:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant