Skip to content

Commit 4b79b83

Browse files
antonisclaude
andcommitted
chore(deps): bump ajv to fix ReDoS vulnerabilities
Uses scoped yarn resolutions to bump ajv: - eslint/eslintrc consumers: 6.12.6 → 6.14.0 (fixes alert #423) - appium, detox, expo-dev-launcher: → 8.18.0 (fixes alert #424) Parent-scoped resolutions avoid the unscoped override that would force eslint onto incompatible ajv v8. https://github.com/getsentry/sentry-react-native/security/dependabot/423 https://github.com/getsentry/sentry-react-native/security/dependabot/424 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 5a14e8e commit 4b79b83

File tree

2 files changed

+27
-19
lines changed

2 files changed

+27
-19
lines changed

package.json

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,14 @@
6060
],
6161
"resolutions": {
6262
"appium-chromedriver@npm:5.6.73/@xmldom/xmldom": "0.8.10",
63+
"appium@npm:2.4.1/ajv": "^8.18.0",
64+
"detox@npm:20.46.0/ajv": "^8.18.0",
65+
"expo-dev-launcher@npm:6.0.20/ajv": "^8.18.0",
66+
"@eslint/eslintrc@npm:2.1.4/ajv": "^6.14.0",
67+
"@eslint/eslintrc@npm:3.3.3/ajv": "^6.14.0",
68+
"eslint@npm:8.57.0/ajv": "^6.14.0",
69+
"eslint@npm:8.57.1/ajv": "^6.14.0",
70+
"eslint@npm:9.39.2/ajv": "^6.14.0",
6371
"fast-xml-parser": "^5.3.6",
6472
"form-data": "4.0.4",
6573
"qs": "^6.14.2",

yarn.lock

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -13682,31 +13682,19 @@ __metadata:
1368213682
languageName: node
1368313683
linkType: hard
1368413684

13685-
"ajv@npm:8.12.0":
13686-
version: 8.12.0
13687-
resolution: "ajv@npm:8.12.0"
13685+
"ajv@npm:^6.14.0":
13686+
version: 6.14.0
13687+
resolution: "ajv@npm:6.14.0"
1368813688
dependencies:
1368913689
fast-deep-equal: ^3.1.1
13690-
json-schema-traverse: ^1.0.0
13691-
require-from-string: ^2.0.2
13690+
fast-json-stable-stringify: ^2.0.0
13691+
json-schema-traverse: ^0.4.1
1369213692
uri-js: ^4.2.2
13693-
checksum: 4dc13714e316e67537c8b31bc063f99a1d9d9a497eb4bbd55191ac0dcd5e4985bbb71570352ad6f1e76684fb6d790928f96ba3b2d4fd6e10024be9612fe3f001
13693+
checksum: 7bb3ea97bb8af52521589079f427e799b6561acaa94f50e13410cb87588c51df8db1afe1157b3e48f1a829269adaa11116e0c2cafe2b998add1523789809a3c5
1369413694
languageName: node
1369513695
linkType: hard
1369613696

13697-
"ajv@npm:^6.12.4":
13698-
version: 6.12.6
13699-
resolution: "ajv@npm:6.12.6"
13700-
dependencies:
13701-
fast-deep-equal: "npm:^3.1.1"
13702-
fast-json-stable-stringify: "npm:^2.0.0"
13703-
json-schema-traverse: "npm:^0.4.1"
13704-
uri-js: "npm:^4.2.2"
13705-
checksum: 874972efe5c4202ab0a68379481fbd3d1b5d0a7bd6d3cc21d40d3536ebff3352a2a1fabb632d4fd2cc7fe4cbdcd5ed6782084c9bbf7f32a1536d18f9da5007d4
13706-
languageName: node
13707-
linkType: hard
13708-
13709-
"ajv@npm:^8.0.0, ajv@npm:^8.11.0, ajv@npm:^8.6.3":
13697+
"ajv@npm:^8.0.0":
1371013698
version: 8.17.1
1371113699
resolution: "ajv@npm:8.17.1"
1371213700
dependencies:
@@ -13718,6 +13706,18 @@ __metadata:
1371813706
languageName: node
1371913707
linkType: hard
1372013708

13709+
"ajv@npm:^8.18.0":
13710+
version: 8.18.0
13711+
resolution: "ajv@npm:8.18.0"
13712+
dependencies:
13713+
fast-deep-equal: ^3.1.3
13714+
fast-uri: ^3.0.1
13715+
json-schema-traverse: ^1.0.0
13716+
require-from-string: ^2.0.2
13717+
checksum: bcdf6c7b040ca488108e2b4e219b31cf9ed478331007d4dd1ed8acc3946dd6b84295817c0f4724207b8dd8589c9966168b2fd4c7f32109d4b8526cdd3743e936
13718+
languageName: node
13719+
linkType: hard
13720+
1372113721
"anser@npm:^1.4.9":
1372213722
version: 1.4.10
1372313723
resolution: "anser@npm:1.4.10"

0 commit comments

Comments
 (0)