Skip to content

Commit 8c01433

Browse files
raifdmuellerclaude
andcommitted
chore(deps): raise tmp override to >=0.2.6 to clear high audit findings
npm audit --audit-level=high failed on four high-severity transitive deps of @lhci/cli, all tracing to tmp <0.2.6 (tmp → external-editor → inquirer). The existing override pinned tmp >=0.2.4, which still allowed the vulnerable 0.2.4/0.2.5. Bumping the override to >=0.2.6 resolves tmp to 0.2.7 and clears all high findings. npm's own fix path (audit fix --force) would downgrade @lhci/cli to 0.1.0, a SemVer-major regression — the override avoids that. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent bd1a8a4 commit 8c01433

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

website/package-lock.json

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

website/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,6 @@
4444
"overrides": {
4545
"minimatch": ">=10.2.1",
4646
"cookie": ">=0.7.0",
47-
"tmp": ">=0.2.4"
47+
"tmp": ">=0.2.6"
4848
}
4949
}

0 commit comments

Comments
 (0)