Skip to content

[Snyk] Security upgrade @openapitools/openapi-generator-cli from 2.31.0 to 2.38.0#12614

Open
sestinj wants to merge 1 commit into
mainfrom
snyk-fix-f5860626bbc7b6b57fb7b15375bf3c5c
Open

[Snyk] Security upgrade @openapitools/openapi-generator-cli from 2.31.0 to 2.38.0#12614
sestinj wants to merge 1 commit into
mainfrom
snyk-fix-f5860626bbc7b6b57fb7b15375bf3c5c

Conversation

@sestinj

@sestinj sestinj commented Jun 12, 2026

Copy link
Copy Markdown
Contributor

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • packages/continue-sdk/package.json
  • packages/continue-sdk/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
critical severity Arbitrary Command Injection
SNYK-JS-SHELLQUOTE-16799355
  853  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Command Injection

…ge-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-SHELLQUOTE-16799355
@sestinj sestinj requested a review from a team as a code owner June 12, 2026 09:07
@dosubot dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Jun 12, 2026

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="packages/continue-sdk/package.json">

<violation number="1" location="packages/continue-sdk/package.json:18">
P1: The upgraded dependency @openapitools/openapi-generator-cli@^2.38.0 requires Node.js >=22.0.0, but the project targets Node 20.20.1 (per .nvmrc and .node-version). This will cause npm install to fail (with --engine-strict) or emit engine warnings in the current Node 20 environment.</violation>
</file>

Reply with feedback, questions, or to request a fix.

Re-trigger cubic

"dependencies": {
"@continuedev/config-yaml": "^1.38.0",
"@openapitools/openapi-generator-cli": "^2.31.0",
"@openapitools/openapi-generator-cli": "^2.38.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1: The upgraded dependency @openapitools/openapi-generator-cli@^2.38.0 requires Node.js >=22.0.0, but the project targets Node 20.20.1 (per .nvmrc and .node-version). This will cause npm install to fail (with --engine-strict) or emit engine warnings in the current Node 20 environment.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At packages/continue-sdk/package.json, line 18:

<comment>The upgraded dependency @openapitools/openapi-generator-cli@^2.38.0 requires Node.js >=22.0.0, but the project targets Node 20.20.1 (per .nvmrc and .node-version). This will cause npm install to fail (with --engine-strict) or emit engine warnings in the current Node 20 environment.</comment>

<file context>
@@ -15,7 +15,7 @@
   "dependencies": {
     "@continuedev/config-yaml": "^1.38.0",
-    "@openapitools/openapi-generator-cli": "^2.31.0",
+    "@openapitools/openapi-generator-cli": "^2.38.0",
     "express": "^4.22.0",
     "swagger-ui-express": "^5.0.0"
</file context>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

Status: Todo

Development

Successfully merging this pull request may close these issues.

2 participants