Skip to content

chore: resolve Dependabot alerts#67

Open
Rokurolize wants to merge 1 commit into
mainfrom
fix/dependabot-alerts
Open

chore: resolve Dependabot alerts#67
Rokurolize wants to merge 1 commit into
mainfrom
fix/dependabot-alerts

Conversation

@Rokurolize
Copy link
Copy Markdown
Member

Update vulnerable transitive dependencies:

  • flatted: 3.2.9 -> 3.4.2 (high)
  • js-yaml: 4.1.0 -> 4.1.1 (medium)
  • minimatch: 3.1.2 -> 3.1.5 (high)
  • picomatch: 2.3.1 -> 2.3.2 (medium)
  • yaml: 2.3.4 -> 2.8.3 (medium)

Add resolutions field to override yaml version required by lint-staged.

Update vulnerable transitive dependencies:
- flatted: 3.2.9 -> 3.4.2
- js-yaml: 4.1.0 -> 4.1.1
- minimatch: 3.1.2 -> 3.1.5
- picomatch: 2.3.1 -> 2.3.2
- yaml: 2.3.4 -> 2.8.3

Add resolutions field to override yaml version required by lint-staged.
@Rokurolize Rokurolize requested a review from r74tech April 23, 2026 00:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant