aaronrene / knowtation public
fix patch deps feat/phase-2g-bundle
AI Agent git-import/068377df · 94 days ago · Apr 23, 2026 · Diff

fix(deps): replace vulnerable xlsx with exceljs for .xlsx import

- Remove sheetjs/xlsx (no high-severity fix); use exceljs for first-sheet tabular read - Fix row extraction using eachCell (lastColumn unreliable on load) - Golden test writes fixture with ExcelJS; CI npm audit --audit-level=high passes

sha256:611e11ac212b7ded9133619518030569d9949c7a34ba4db7d66002b8ccb99fb3 sha
sha256:5886a626ea3001614ecbaf56b8ed617bd0407609fc4bbf91dc7bccb31e4ff0b8 parent
sha256:f822119c9eff2c09853b87b2bc38edfbd01cac510e44048e554634a656a01602 snapshot
← Older Oldest on feat/phase-2g-bundle
All commits
Newer → Latest on feat/phase-2g-bundle

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:611e11ac212b7ded9133619518030569d9949c7a34ba4db7d66002b8ccb99fb3 --body "your comment"