Skip to content

Commit 43be7b0

Browse files
chargomeclaude
andauthored
fix(deps): Bump transitive rollup deps to patch CVE-2026-27606 (#19565)
Update lockfile to pull patched rollup versions for transitive dependencies vulnerable to arbitrary file write via path traversal: - ng-packagr: rollup 2.79.2 → 2.80.0 - astro/vite: rollup 3.29.5 → 3.30.0 - unbuild: rollup 3.29.5 → 3.30.0 Co-authored-by: Claude <noreply@anthropic.com>
1 parent 6707fd3 commit 43be7b0

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

yarn.lock

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -26377,16 +26377,16 @@ rollup-pluginutils@^2.8.2:
2637726377
estree-walker "^0.6.1"
2637826378

2637926379
rollup@^2.70.0:
26380-
version "2.79.2"
26381-
resolved "https://registry.yarnpkg.com/rollup/-/rollup-2.79.2.tgz#f150e4a5db4b121a21a747d762f701e5e9f49090"
26382-
integrity sha512-fS6iqSPZDs3dr/y7Od6y5nha8dW1YnbgtsyotCVvoFGKbERG++CVRFv1meyGDE1SNItQA8BrnCw7ScdAhRJ3XQ==
26380+
version "2.80.0"
26381+
resolved "https://registry.npmjs.org/rollup/-/rollup-2.80.0.tgz"
26382+
integrity sha512-cIFJOD1DESzpjOBl763Kp1AH7UE/0fcdHe6rZXUdQ9c50uvgigvW97u3IcSeBwOkgqL/PXPBktBCh0KEu5L8XQ==
2638326383
optionalDependencies:
2638426384
fsevents "~2.3.2"
2638526385

2638626386
rollup@^3.27.1, rollup@^3.28.1:
26387-
version "3.29.5"
26388-
resolved "https://registry.yarnpkg.com/rollup/-/rollup-3.29.5.tgz#8a2e477a758b520fb78daf04bca4c522c1da8a54"
26389-
integrity sha512-GVsDdsbJzzy4S/v3dqWPJ7EfvZJfCHiDqe80IyrF59LYuP+e6U1LJoUqeuqRbwAWoMNoXivMNeNAOf5E22VA1w==
26387+
version "3.30.0"
26388+
resolved "https://registry.npmjs.org/rollup/-/rollup-3.30.0.tgz"
26389+
integrity sha512-kQvGasUgN+AlWGliFn2POSajRQEsULVYFGTvOZmK06d7vCD+YhZztt70kGk3qaeAXeWYL5eO7zx+rAubBc55eA==
2639026390
optionalDependencies:
2639126391
fsevents "~2.3.2"
2639226392

@@ -28096,7 +28096,6 @@ stylus@0.59.0, stylus@^0.59.0:
2809628096

2809728097
sucrase@^3.27.0, sucrase@^3.35.0, sucrase@getsentry/sucrase#es2020-polyfills:
2809828098
version "3.36.0"
28099-
uid fd682f6129e507c00bb4e6319cc5d6b767e36061
2810028099
resolved "https://codeload.github.com/getsentry/sucrase/tar.gz/fd682f6129e507c00bb4e6319cc5d6b767e36061"
2810128100
dependencies:
2810228101
"@jridgewell/gen-mapping" "^0.3.2"

0 commit comments

Comments
 (0)