Skip to content

Commit 2ed5015

Browse files
committed
chore(sdk/js): regenerate lockfile to fix bn.js vulnerability
bun.lockb pinned bn.js@5.2.2, which is below the patched 5.2.3 for advisory GHSA-378v-28hj-76wf (infinite loop). @solana/web3.js@1.98.4 declares `bn.js: ^5.2.1`, so a fresh resolution picks 5.2.3 naturally. incidentally migrates to bun's text-format `bun.lock` (default since bun 1.2), replacing the binary `bun.lockb`. The text format is diffable in git.
1 parent 24eccb4 commit 2ed5015

2 files changed

Lines changed: 365 additions & 0 deletions

File tree

0 commit comments

Comments
 (0)