microsoft / microsoft/vscode-notebook-renderers
Update dependencies with actionable security alerts
Open
Beginner friendly
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 140
- Forks
- 44
- Avg merge
- 12d 9h
- Merged PRs (30d)
- 4
Description
Dependency updates
| Dependency | Current version | Required version |
|---|---|---|
sanitize-html |
2.12.1 |
2.17.7 |
Please update the dependencies listed above to at least the required versions.
Requirements
- Do not use force flags, dependency-resolution overrides, or equivalent mechanisms to bypass
compatibility or security checks. - For package-lock.json files, use npm 11.10.0 or newer, and run every
npm installandnpm updatecommand with--min-release-age 7. - Do not create or update
.npmrcfiles. - Keep the changes focused on these dependency updates and any directly required lockfile changes.
- Run the repository's relevant tests and validation after making the updates.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the package manifest and any package-lock.json, then inspect how sanitize-html is declared before applying the required version update. Use npm 11.10.0 or newer with the specified seven-day release-age setting, keep the lockfile changes focused, and run the repository's relevant tests and validation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- node.js, typescript
- Domain
- security, tooling
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 72/100