Skip to content

Conversation

@khendrikse
Copy link
Contributor

There was a high security vulnerability in the html-minifier dependency and that package is no longer maintained it seemed. This new dependency is a maintained fork that does not have the vulnerability anymore.

@khendrikse khendrikse requested a review from a team as a code owner November 11, 2025 10:37
@netlify
Copy link

netlify bot commented Nov 11, 2025

👷 Deploy Preview for plugin-lighthouse processing.

Name Link
🔨 Latest commit c398b6b
🔍 Latest deploy log https://app.netlify.com/projects/plugin-lighthouse/deploys/6913132ceed5b30008842f37

aitchiss
aitchiss previously approved these changes Nov 11, 2025
Copy link
Contributor

@aitchiss aitchiss left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm but let's double check reports still look correct in the UI with this new dep (if you haven't already)

@khendrikse khendrikse merged commit 43f7d15 into main Nov 11, 2025
7 checks passed
@khendrikse khendrikse deleted the fix/update-html-minifier branch November 11, 2025 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants