Upgrading picomatch package in QuickLayout Docs

Andrei Banshchikov · meta-codesync[bot] · commit 5e56e8255dac · 2026-04-28T02:24:04.000-07:00
Summary: Received an alert on a vulnerability in picomatch package, upgraded to latest patched version (2.3.2). Mirrors D101617088 approach (yarn `resolutions`).

Differential Revision: D102589020

fbshipit-source-id: 1db7aca5d529b2a10b6caec6d66dd559da843841
diff --git a/Sources/QuickLayout/docs/package.json b/Sources/QuickLayout/docs/package.json
@@ -53,6 +53,7 @@
   },
   "resolutions": {
     "brace-expansion": "1.1.13",
-    "lodash": "4.18.1"
+    "lodash": "4.18.1",
+    "picomatch": "2.3.2"
   }
 }
diff --git a/Sources/QuickLayout/docs/yarn.lock b/Sources/QuickLayout/docs/yarn.lock
@@ -8973,10 +8973,10 @@ picocolors@^1.0.0, picocolors@^1.1.1:
   resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.1.1.tgz#3d321af3eab939b083c8f929a1d12cda81c26b6b"
   integrity sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==
 
-picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1:
-  version "2.3.1"
-  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.1.tgz#3ba3833733646d9d3e4995946c1365a67fb07a42"
-  integrity sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==
+picomatch@2.3.2, picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1:
+  version "2.3.2"
+  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.2.tgz#5a942915e26b372dc0f0e6753149a16e6b1c5601"
+  integrity sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==
 
 pkg-dir@^7.0.0:
   version "7.0.0"

Original file line number	Diff line number	Diff line change
`@@ -53,6 +53,7 @@`
`53`	`53`	`},`
`54`	`54`	`"resolutions": {`
`55`	`55`	`"brace-expansion": "1.1.13",`
`56`		`- "lodash": "4.18.1"`
	`56`	`+ "lodash": "4.18.1",`
	`57`	`+ "picomatch": "2.3.2"`
`57`	`58`	`}`
`58`	`59`	`}`