General maintenance and bug fix for scrolling in textarea #23

Merged

flopana merged 4 commits from feature/update-dependencies into develop 2026-03-26 22:02:50 +00:00

Conversation 0 Commits 4 Files changed 5 +27 -44

flopana commented 2026-03-26 21:57:32 +00:00

Owner

Copy link

No description provided.

flopana added 4 commits 2026-03-26 21:57:32 +00:00

fix: pin vulnerable transitive deps via npm overrides ... f7f2406c2c

Two high-severity vulnerabilities were present in transitive dependencies
that could not be resolved by upgrading direct dependencies alone.

- flatted <=3.4.1: Prototype Pollution via parse() (https://app.opencve.io/cve/CVE-2026-33228)
Affected: @vitest/ui -> flatted ^3.3.3
Fix: pinned to >=3.4.2 (resolved to 3.4.2)

- serialize-javascript <=7.0.2: RCE via RegExp/Date (https://advisories.gitlab.com/pkg/npm/serialize-javascript/GHSA-5c6j-r48x-rmvq/)
Affected: vite-plugin-pwa -> workbox-build -> @rollup/plugin-terser -> serialize-javascript
Fix: pinned to >=7.0.3 (resolved to 7.0.5)

Both fixes applied via the `overrides` field in package.json, which is
the npm-native mechanism for forcing transitive dependency versions
without downgrading direct dependencies.

equivalent 4ef5c8837c

fix: sync textarea line numbers with content on scroll ... 084a778680

Use onScroll handler to mirror textarea scrollTop to line numbers div,
keeping them aligned when height is constrained.

add compount command ab535f75a7

flopana merged commit c59bf2406a into develop 2026-03-26 22:02:50 +00:00

flopana deleted branch feature/update-dependencies 2026-03-26 22:02:50 +00:00

flopana referenced this pull request from a commit 2026-03-26 22:02:50 +00:00

Merge pull request 'General maintenance and bug fix for scrolling in textarea' (#23) from feature/update-dependencies into develop

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

bug

Something is not working

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

question

More information is needed

  

wontfix

This won't be fixed

No labels

bug

duplicate

enhancement

help wanted

invalid

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

flopana/OpenDevTools!23

No description provided.