Overview - @builder.io/sdks

7 days30 days

Latest CI Pipeline Executions

Fuzzy

Succeeded
main
229f515b chore[deps]: fix prototype pollution in lodash (#4762) ## Description Fixes below alerts: | Project | Alerts | | --- | --- | | plugins/async-dropdown | [2298](https://github.com/BuilderIO/builder/security/dependabot/2298), [7339](https://github.com/BuilderIO/builder/security/dependabot/7339), [2307](https://github.com/BuilderIO/builder/security/dependabot/2307), [16076](https://github.com/BuilderIO/builder/security/dependabot/16076) | | plugins/emporix | [7419](https://github.com/BuilderIO/builder/security/dependabot/7419), [7459](https://github.com/BuilderIO/builder/security/dependabot/7459), [7431](https://github.com/BuilderIO/builder/security/dependabot/7431), [16040](https://github.com/BuilderIO/builder/security/dependabot/16040) | | plugins/example-app-campaign-builder | [2499](https://github.com/BuilderIO/builder/security/dependabot/2499), [7347](https://github.com/BuilderIO/builder/security/dependabot/7347), [1338](https://github.com/BuilderIO/builder/security/dependabot/1338), [16079](https://github.com/BuilderIO/builder/security/dependabot/16079) | | plugins/example-app-simple | [2522](https://github.com/BuilderIO/builder/security/dependabot/2522), [7348](https://github.com/BuilderIO/builder/security/dependabot/7348), [1395](https://github.com/BuilderIO/builder/security/dependabot/1395), [16082](https://github.com/BuilderIO/builder/security/dependabot/16082) | | plugins/jodit-html-editor | [8298](https://github.com/BuilderIO/builder/security/dependabot/8298), [8376](https://github.com/BuilderIO/builder/security/dependabot/8376), [8321](https://github.com/BuilderIO/builder/security/dependabot/8321), [16081](https://github.com/BuilderIO/builder/security/dependabot/16081) | | plugins/localized-preview | [2545](https://github.com/BuilderIO/builder/security/dependabot/2545), [7346](https://github.com/BuilderIO/builder/security/dependabot/7346), [1447](https://github.com/BuilderIO/builder/security/dependabot/1447), [16085](https://github.com/BuilderIO/builder/security/dependabot/16085) | | plugins/multi-cloudinary | [8984](https://github.com/BuilderIO/builder/security/dependabot/8984), [9035](https://github.com/BuilderIO/builder/security/dependabot/9035), [8999](https://github.com/BuilderIO/builder/security/dependabot/8999), [16015](https://github.com/BuilderIO/builder/security/dependabot/16015) | | plugins/phrase-conector | [6019](https://github.com/BuilderIO/builder/security/dependabot/6019), [7362](https://github.com/BuilderIO/builder/security/dependabot/7362), [6041](https://github.com/BuilderIO/builder/security/dependabot/6041), [16019](https://github.com/BuilderIO/builder/security/dependabot/16019) | | plugins/rich-text | [2594](https://github.com/BuilderIO/builder/security/dependabot/2594), [7345](https://github.com/BuilderIO/builder/security/dependabot/7345), [1535](https://github.com/BuilderIO/builder/security/dependabot/1535), [16083](https://github.com/BuilderIO/builder/security/dependabot/16083) | | plugins/salesforce-commerce-api-plugin | [4392](https://github.com/BuilderIO/builder/security/dependabot/4392), [7358](https://github.com/BuilderIO/builder/security/dependabot/7358), [4415](https://github.com/BuilderIO/builder/security/dependabot/4415), [16008](https://github.com/BuilderIO/builder/security/dependabot/16008) | | plugins/salesforce-einstein-api | [4535](https://github.com/BuilderIO/builder/security/dependabot/4535), [7359](https://github.com/BuilderIO/builder/security/dependabot/7359), [4557](https://github.com/BuilderIO/builder/security/dependabot/4557), [16065](https://github.com/BuilderIO/builder/security/dependabot/16065) | | plugins/sfcc-headless | [4021](https://github.com/BuilderIO/builder/security/dependabot/4021), [7356](https://github.com/BuilderIO/builder/security/dependabot/7356), [4045](https://github.com/BuilderIO/builder/security/dependabot/4045), [16053](https://github.com/BuilderIO/builder/security/dependabot/16053) | | plugins/sfcc-sync | [2617](https://github.com/BuilderIO/builder/security/dependabot/2617), [7331](https://github.com/BuilderIO/builder/security/dependabot/7331), [2629](https://github.com/BuilderIO/builder/security/dependabot/2629), [16060](https://github.com/BuilderIO/builder/security/dependabot/16060) | | plugins/shopify | [2666](https://github.com/BuilderIO/builder/security/dependabot/2666), [7337](https://github.com/BuilderIO/builder/security/dependabot/7337), [2678](https://github.com/BuilderIO/builder/security/dependabot/2678), [16009](https://github.com/BuilderIO/builder/security/dependabot/16009) | | plugins/shopify-demo | [2643](https://github.com/BuilderIO/builder/security/dependabot/2643), [7338](https://github.com/BuilderIO/builder/security/dependabot/7338), [1622](https://github.com/BuilderIO/builder/security/dependabot/1622), [16051](https://github.com/BuilderIO/builder/security/dependabot/16051) | | plugins/smartling | [4211](https://github.com/BuilderIO/builder/security/dependabot/4211), [7357](https://github.com/BuilderIO/builder/security/dependabot/7357), [4234](https://github.com/BuilderIO/builder/security/dependabot/4234), [16012](https://github.com/BuilderIO/builder/security/dependabot/16012) | | plugins/swell | [2692](https://github.com/BuilderIO/builder/security/dependabot/2692), [7344](https://github.com/BuilderIO/builder/security/dependabot/7344), [1698](https://github.com/BuilderIO/builder/security/dependabot/1698), [16058](https://github.com/BuilderIO/builder/security/dependabot/16058) | | plugins/virtocommerce | [9927](https://github.com/BuilderIO/builder/security/dependabot/9927), [7363](https://github.com/BuilderIO/builder/security/dependabot/7363), [9939](https://github.com/BuilderIO/builder/security/dependabot/9939), [16070](https://github.com/BuilderIO/builder/security/dependabot/16070) | | plugins/vtex | [2718](https://github.com/BuilderIO/builder/security/dependabot/2718), [7334](https://github.com/BuilderIO/builder/security/dependabot/7334), [2730](https://github.com/BuilderIO/builder/security/dependabot/2730), [16045](https://github.com/BuilderIO/builder/security/dependabot/16045) | | examples/embed-starter-kit/plugin | [2749](https://github.com/BuilderIO/builder/security/dependabot/2749), [7349](https://github.com/BuilderIO/builder/security/dependabot/7349), [1779](https://github.com/BuilderIO/builder/security/dependabot/1779), [16078](https://github.com/BuilderIO/builder/security/dependabot/16078) | **Screenshot/Clip** NA  --- > [!NOTE] > **Low Risk** > Dependency-only security pin with no runtime code changes; minor risk if lodash 4.18.1 behavior differs from 4.17.x in edge cases. > > **Overview** > Pins **lodash** to **4.18.1** across several example and plugin packages to address prototype pollution in older transitive versions (e.g. 4.17.11, 4.17.21). > > Each affected `package.json` gains an npm **`overrides`** entry for `"lodash": "4.18.1"` (alongside existing `minimist` overrides where present). **`plugins/emporix`** adds a new `overrides` block with only lodash. Matching **`package-lock.json`** updates resolve the whole tree to 4.18.1 and drop redundant nested `lodash` copies under `@commitlint` and similar packages. > > No application source changes—lockfile and manifest dependency policy only. > > <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 33157f7fae85b56a0f907a7a66ec9398c99230d2. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup> 
by Aishwarya ...
Succeeded
main
46043693 fix[depandabotAlert]: patch y18n prototype pollution vulnerabilities (#4754)
by Sridhar Ma...