Skip to content

Commit c1d7300

Browse files
authored
Patch upgrade dependencies for vanta security issues (#161)
* Override patch version of lodash for vanta * Override patch version of minimatch for vanta * Allow patch upgrades for lodash and minimatch
1 parent c616a3b commit c1d7300

2 files changed

Lines changed: 37 additions & 37 deletions

File tree

package.json

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -124,7 +124,11 @@
124124
"overrides": {
125125
"form-data": ">=4.0.4",
126126
"@semantic-release/npm": "13.1.3",
127-
"undici": "^6.23.0"
127+
"undici": "^6.23.0",
128+
"lodash": "~4.17.23",
129+
"lodash-es": "~4.17.23",
130+
"minimatch@3": "~3.1.5",
131+
"minimatch@9": "~9.0.9"
128132
}
129133
},
130134
"dependencies": {

pnpm-lock.yaml

Lines changed: 32 additions & 36 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)