Flight Log / novuhq/novu #8443
fix(root): update dset package to resolve prototype pollution vulnerability — a Cursor (Anysphere) bot flight
The Cursor bot (Anysphere) opened this pull request in novuhq/novu on Jun 4, 2025; merged clean in 3.3 h, merged by @scopsy: +1,320 −2,654, 6 files, 1 review.
Flown by
- Lines
- +1,320 −2,654
- Files
- 6
- Commits
- 3
- Reviews
- 1
- To merge
- 3.3 h
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
Cursor opened a fix in novuhq/novu to update the dset package and resolve a prototype pollution vulnerability in older versions. The change updates @segment/analytics-next across six files over three commits, with 1320 additions and 2654 deletions. The PR merged clean after one review round, with zero change requests, in 3.25 hours.
From the pull request description
## Security Fix: dset Prototype Pollution Vulnerability ### Overview Resolves prototype pollution vulnerability in dset package (versions < 3.1.4). ### Changes Made - Updated `@segment/analytics-next` to `^1.81.0` in: - `apps/web/package.json` - `apps/dashboard/package.json` - `libs/design-…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedCursor Agent
- —committedCursor Agent
- —committedDima Grossman
- —reviewed
- Jun 4, 2025labeledgithub-actions[bot]
- Jun 4, 2025labeledgithub-actions[bot]
- Jun 4, 2025mergedscopsy
- Jun 4, 2025closedscopsy
Read next
Cite this flight: AgentRiders Flight Log, novuhq/novu#8443, record updated Nov 4, 2026, https://agentriders.com/logs/novuhq/novu/8443/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.