Clear all OSV-Scanner findings (2 CRITICAL + HIGH/MED/LOW) via dep bumps + overrides; drop Node <18#390

Open

vikrantpuppala wants to merge 16 commits into

mainfrom

vp/security-bump-runtime-and-dev

Commits on May 29, 2026

Clear OSV-Scanner HIGH/MED/LOW findings via dep bumps + overrides
vikrantpuppala
committed
ci: rewrite lockfile resolved: URLs to JFrog in setup-jfrog
vikrantpuppala
committed
ci: add diagnostic instrumentation for npm-ci hang
vikrantpuppala
committed
ci: also rewrite npm-proxy.dev URLs to JFrog in setup-jfrog
vikrantpuppala
committed
test: explicitly require ts-node/register from both mocharcs
vikrantpuppala
committed
fix: override transitive uuid to ^9 to keep Node 14/16/18/20 working
vikrantpuppala
committed
chore: keep package-lock.json at lockfileVersion 2 for Node 14 / npm 6
vikrantpuppala
committed
ci: drop Node 14 from the unit-test matrix (engines.node >= 16)
vikrantpuppala
committed
fix: bump uuid to ^11, sinon back to ^17, pin TypeScript to 5.5.4
vikrantpuppala
committed

Commits on Jul 10, 2026