Commit 13b0ee2
committed
fix(ci): remove path-to-regexp override that broke Express and MSW
The blanket `"path-to-regexp": "^8.4.0"` override forced all transitive
consumers (Express v0.1.x, MSW v6.x) to v8 — a major breaking change
that removed regex syntax support. The original versions (0.1.12, 6.3.0)
were already patched for CVE-2024-45296 and not vulnerable.1 parent 119386b commit 13b0ee2
2 files changed
Lines changed: 13 additions & 5 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
133 | 133 | | |
134 | 134 | | |
135 | 135 | | |
136 | | - | |
137 | 136 | | |
138 | 137 | | |
139 | 138 | | |
| |||
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments