Skip to content

Fix Dependabot security update failure for adm-zip - #1887

Merged
stephenegriffin merged 4 commits into
mainfrom
copilot/fix-dependabot-failure-again
Jul 24, 2026
Merged

Fix Dependabot security update failure for adm-zip#1887
stephenegriffin merged 4 commits into
mainfrom
copilot/fix-dependabot-failure-again

Conversation

Copilot AI commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

Dependabot was failing with security_update_not_possible when trying to update the transitive dependency adm-zip to its patched version (0.6.0). Conflicting version pins from office-addin-* packages (requiring 0.5.12, 0.5.16, ^0.5.17) made it impossible to satisfy all constraints while reaching the minimum safe version.

Changes

  • package.json: Added adm-zip to the overrides section, forcing all transitive resolutions to 0.6.0
  • package-lock.json: Updated to reflect the forced resolution
"overrides": {
  "adm-zip": "0.6.0",
  "tmp": "^0.2.5"
}

Copilot AI changed the title [WIP] Fix failing GitHub Actions job Dependabot Fix Dependabot security update failure for adm-zip Jul 24, 2026
Copilot AI requested a review from stephenegriffin July 24, 2026 15:07
@stephenegriffin
stephenegriffin marked this pull request as ready for review July 24, 2026 15:14
@stephenegriffin

Copy link
Copy Markdown
Member

@copilot resolve the merge conflicts in this pull request

Copilot AI commented Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

@copilot resolve the merge conflicts in this pull request

Merge conflicts resolved in 26ff5e6. package.json now includes all overrides from main (uuid, @babel/core, js-yaml, @hono/node-server) plus the adm-zip: "0.6.0" override from this PR. package-lock.json was regenerated accordingly.

@stephenegriffin
stephenegriffin merged commit 30aedd4 into main Jul 24, 2026
7 checks passed
@stephenegriffin
stephenegriffin deleted the copilot/fix-dependabot-failure-again branch July 24, 2026 19:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants