Commit 8c01433
chore(deps): raise tmp override to >=0.2.6 to clear high audit findings
npm audit --audit-level=high failed on four high-severity transitive
deps of @lhci/cli, all tracing to tmp <0.2.6 (tmp → external-editor →
inquirer). The existing override pinned tmp >=0.2.4, which still allowed
the vulnerable 0.2.4/0.2.5. Bumping the override to >=0.2.6 resolves
tmp to 0.2.7 and clears all high findings.
npm's own fix path (audit fix --force) would downgrade @lhci/cli to
0.1.0, a SemVer-major regression — the override avoids that.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>1 parent bd1a8a4 commit 8c01433
2 files changed
Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
44 | 44 | | |
45 | 45 | | |
46 | 46 | | |
47 | | - | |
| 47 | + | |
48 | 48 | | |
49 | 49 | | |
0 commit comments