[thomhurst]

This PR contains the following updates:

Package	Type	Update	Change
node-forge	resolutions	patch	1.4.1 → 1.4.2

---

Release Notes

digitalbazaar/forge (node-forge)

v1.4.2

Compare Source

Fixed

• [pem] Convert non-string input to a string in pem.decode() as before
  1.4.1. The 1.4.1 PEM ReDoS fix (GHSA-7wch-p9px-956x) caused a TypeError
  for Buffer input, which is used by node-jose.
  (#​1165)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-27T14:17:02.936564Z	1fa3e4d	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 25de9a2d-8e85-4472-91f2-a7ef9222d2ee

Commits

Reviewing files that changed from the base of the PR and between 916875e and 1fa3e4d.

Files ignored due to path filters: 1

• docs/yarn.lock is excluded by !**/yarn.lock, !**/*.lock

Files selected for processing: 1

• docs/package.json

Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 7 remain after this review.

Walkthrough

The resolved node-forge version in docs/package.json changed from 1.4.1 to 1.4.2.

Changes: Documentation dependency update

Layer / File(s)	Summary
Update node-forge resolution docs/package.json	The resolved node-forge version changed from 1.4.1 to 1.4.2.

Priority: Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Possibly related PRs

• thomhurst/TUnit#7268: This PR updates the same node-forge resolution from 1.4.0 to 1.4.1, immediately before this change.

Merge Risk: Minimal · up to 1fa3e

The documentation dependency update is mergeable; no actionable risk remains.

Pre-merge checks: 4

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely describes the dependency update from node-forge to v1.4.2, which is the main change in the pull request.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the docs package tree,
A newer forge appears at 1.4.2.
The old resolution hops away,
One small version change takes its place,
Then carrots mark the update’s day.}

_{Comment @coderabbitai help to get the list of available commands.}

[greptile-apps]

Confidence Score: 5/5

[Low impact] The PR appears safe to merge; no actionable issues were found.

Summary

Updates the docs site's node-forge resolution from 1.4.1 to 1.4.2.

• The docs site now resolves node-forge 1.4.2.

_{Reviews (1) · Last reviewed commit: "chore(deps): update dependency node-forg..." · Reviewed by Greptile}