Adds daily Dependabot triage artifacts for 27 open alerts across the WebeWizard/lib-webe repository.
Summary
All 27 alerts are in the npm ecosystem (devDependencies, manifest: package-lock.json). Ownership is inferred to Justin Leis (justin.leis@webewizard.com) via git blame on gulpfile.coffee/package.json.
Alerts by package
Package
Alerts
Severity
Introduced via
tar
#51, #50, #45, #43, #41, #40, #36, #35, #20 , #17 , #16 (×11)
high
gulp (transitive)
minimist
#23 , #22 , #14 , #13 (×4)
critical / medium
gulp (transitive)
lodash
#42, #27, #6 (×3)
medium / high
node-elm-compiler (transitive)
minimatch
#49
high
gulp, node-elm-compiler
braces
#30
high
gulp
es5-ext
#29
low
gulp
fsevents
#26
critical
gulp
decode-uri-component
#12
high
gulp
copy-props
#10
high
gulp
y18n
#5
high
gulp
ini
#4
high
gulp
yargs-parser
#3
medium
gulp
Changed files
27 new triage JSON files under .triage-agent/dependabot/, one per alert.
Generated by Dependabot Triage Agent · ◷
Note
This was originally intended as a pull request, but the git push operation failed.
Workflow Run: View run details and download patch artifact
The patch file is available in the agent-artifacts artifact in the workflow run linked above.
To create a pull request with the changes:
# Download the artifact from the workflow run
gh run download 23099890000 -n agent-artifacts -D /tmp/agent-artifacts-23099890000
# Create a new branch
git checkout -b chore/dependabot-triage-2026-03-15-a9ff1a25a3fa2863
# Apply the patch (--3way handles cross-repo patches where files may already exist)
git am --3way /tmp/agent-artifacts-23099890000/aw-chore-dependabot-triage-2026-03-15.patch
# Push the branch to origin
git push origin chore/dependabot-triage-2026-03-15-a9ff1a25a3fa2863
# Create the pull request
gh pr create --title ' chore: update dependabot triage output' --base master --head chore/dependabot-triage-2026-03-15-a9ff1a25a3fa2863 --repo WebeWizard/lib-webe
Show patch preview (500 of 1184 lines)
From 1e9c1fb9473e0a60c1866331cca6e9cfc01712a5 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Sun, 15 Mar 2026 00:46:49 +0000
Subject: [PATCH] chore: add dependabot triage artifacts for 27 open alerts
Generated triage JSON files for all 27 open Dependabot alerts.
All alerts are in the npm ecosystem (devDependencies via package-lock.json).
Recommended owner: Justin Leis (justin.leis@webewizard.com).
Packages covered: tar (x11), minimist (x4), lodash (x3), minimatch, braces,
es5-ext, fsevents, decode-uri-component, copy-props, y18n, ini, yargs-parser.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
.../dependabot/alert-10-copy-props.json | 35 ++++++++++++++++++
.../alert-12-decode-uri-component.json | 35 ++++++++++++++++++
.../dependabot/alert-13-minimist.json | 35 ++++++++++++++++++
.../dependabot/alert-14-minimist.json | 35 ++++++++++++++++++
.triage-agent/dependabot/alert-16-tar.json | 36 +++++++++++++++++++
.triage-agent/dependabot/alert-17-tar.json | 36 +++++++++++++++++++
.triage-agent/dependabot/alert-20-tar.json | 36 +++++++++++++++++++
.../dependabot/alert-22-minimist.json | 35 ++++++++++++++++++
.../dependabot/alert-23-minimist.json | 35 ++++++++++++++++++
.../dependabot/alert-26-fsevents.json | 35 ++++++++++++++++++
.triage-agent/dependabot/alert-27-lodash.json | 32 +++++++++++++++++
.../dependabot/alert-29-es5-ext.json | 35 ++++++++++++++++++
.../dependabot/alert-3-yargs-parser.json | 35 ++++++++++++++++++
.triage-agent/dependabot/alert-30-braces.json | 35 ++++++++++++++++++
.triage-agent/dependabot/alert-35-tar.json | 36 +++++++++++++++++++
.triage-agent/dependabot/alert-36-tar.json | 36 +++++++++++++++++++
.triage-agent/dependabot/alert-4-ini.json | 35 ++++++++++++++++++
.triage-agent/dependabot/alert-40-tar.json | 36 +++++++++++++++++++
.triage-agent/dependabot/a
... (truncated)
Adds daily Dependabot triage artifacts for 27 open alerts across the
WebeWizard/lib-weberepository.Summary
All 27 alerts are in the npm ecosystem (
devDependencies, manifest:package-lock.json). Ownership is inferred to Justin Leis (justin.leis@webewizard.com) viagit blameongulpfile.coffee/package.json.Alerts by package
targulp(transitive)minimistgulp(transitive)lodashnode-elm-compiler(transitive)minimatchgulp,node-elm-compilerbracesgulpes5-extgulpfseventsgulpdecode-uri-componentgulpcopy-propsgulpy18ngulpinigulpyargs-parsergulpChanged files
27 new triage JSON files under
.triage-agent/dependabot/, one per alert.Note
This was originally intended as a pull request, but the git push operation failed.
Workflow Run: View run details and download patch artifact
The patch file is available in the
agent-artifactsartifact in the workflow run linked above.To create a pull request with the changes:
Show patch preview (500 of 1184 lines)
From 1e9c1fb9473e0a60c1866331cca6e9cfc01712a5 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com> Date: Sun, 15 Mar 2026 00:46:49 +0000 Subject: [PATCH] chore: add dependabot triage artifacts for 27 open alerts Generated triage JSON files for all 27 open Dependabot alerts. All alerts are in the npm ecosystem (devDependencies via package-lock.json). Recommended owner: Justin Leis (justin.leis@webewizard.com). Packages covered: tar (x11), minimist (x4), lodash (x3), minimatch, braces, es5-ext, fsevents, decode-uri-component, copy-props, y18n, ini, yargs-parser. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .../dependabot/alert-10-copy-props.json | 35 ++++++++++++++++++ .../alert-12-decode-uri-component.json | 35 ++++++++++++++++++ .../dependabot/alert-13-minimist.json | 35 ++++++++++++++++++ .../dependabot/alert-14-minimist.json | 35 ++++++++++++++++++ .triage-agent/dependabot/alert-16-tar.json | 36 +++++++++++++++++++ .triage-agent/dependabot/alert-17-tar.json | 36 +++++++++++++++++++ .triage-agent/dependabot/alert-20-tar.json | 36 +++++++++++++++++++ .../dependabot/alert-22-minimist.json | 35 ++++++++++++++++++ .../dependabot/alert-23-minimist.json | 35 ++++++++++++++++++ .../dependabot/alert-26-fsevents.json | 35 ++++++++++++++++++ .triage-agent/dependabot/alert-27-lodash.json | 32 +++++++++++++++++ .../dependabot/alert-29-es5-ext.json | 35 ++++++++++++++++++ .../dependabot/alert-3-yargs-parser.json | 35 ++++++++++++++++++ .triage-agent/dependabot/alert-30-braces.json | 35 ++++++++++++++++++ .triage-agent/dependabot/alert-35-tar.json | 36 +++++++++++++++++++ .triage-agent/dependabot/alert-36-tar.json | 36 +++++++++++++++++++ .triage-agent/dependabot/alert-4-ini.json | 35 ++++++++++++++++++ .triage-agent/dependabot/alert-40-tar.json | 36 +++++++++++++++++++ .triage-agent/dependabot/a ... (truncated)