Repository navigation
pnpm audit failure blocks merging PR #120 #121
Description
Observation
The GitHub Actions check for PR #120 fails at the pnpm audit & comment on PR step. This causes the required build (20.x) job to fail and blocks merging the PR:
https://github.com/boly38/node-mongotools/actions/runs/38147468149/job/114502663159
The test and coverage steps in that job passed; the audit is the blocker. At the time, it reported high-severity advisories for minimatch, serialize-javascript, flatted, brace-expansion, and mongoose, as well as several moderate-severity advisories.
Proposed fix
The pnpm 12 upgrade made pnpm.overrides in package.json ineffective (pnpm warns that this field is ignored). Move the compatible overrides and patched dependency versions to pnpm-workspace.yaml, then rerun the audit.
The goal is to restore a passing audit check and unblock the merge of PR #120: #120
Created by an LLM using the OpenCode harness and the GPT-6 Luna model.
Activity
[-]L’audit pnpm bloque le merge de la PR #120[/-][+]pnpm audit failure blocks merging PR #120[/+]fix: restore audit overrides for pnpm 12 (#121)