chore: GHSA-j687-52p2-xcff GHSA-w5hq-g745-h8pq GHSA-v3rj-xjv7-4jmq

[Maciek Kucmus (mkucmus)]

fixes: GHSA-j687-52p2-xcff GHSA-w5hq-g745-h8pq GHSA-v3rj-xjv7-4jmq

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
frontends-starter-template-extended	Ready	Preview, Comment	Apr 28, 2026 11:45am
frontends-vue-starter-template	Error		Apr 28, 2026 11:45am
old-frontends-demo	Building	Preview, Comment	Apr 28, 2026 11:45am
shopware-frontends-docs	Ready	Preview, Comment	Apr 28, 2026 11:45am

[Copilot]

Pull request overview

Updates dependency versions/overrides to address the listed GitHub Security Advisories across the workspace (including the Astro template) by bumping Astro and enforcing patched transitive dependency versions via pnpm.overrides.

Changes:

• Bump astro in the Astro template from 6.1.1 to 6.1.8.
• Add pnpm.overrides entries for uuid and smol-toml at the workspace root.
• Refresh pnpm-lock.yaml to reflect the new Astro version and overrides (including updated transitive resolutions).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
templates/astro/package.json	Bumps Astro to 6.1.8 in the Astro starter template.
package.json	Adds new pnpm.overrides for uuid and smol-toml to address advisories.
pnpm-lock.yaml	Lockfile update reflecting Astro bump + enforced override resolutions.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.