Skip to content

Commit a8df806

Browse files
gorzellCopilot
andcommitted
chore(deps): update js-yaml for npm security alert
Updated packages: - js-yaml: 3.14.2 -> 4.2.0 - argparse: 1.0.10 -> 2.0.1 Resolved Dependabot alert 43 / GHSA-h67p-54hq-rp68 by using an npm override for the transitive development dependency pulled in by Jest coverage tooling. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 2c3ff25 commit a8df806

2 files changed

Lines changed: 21 additions & 33 deletions

File tree

crates/string-offsets/js/package-lock.json

Lines changed: 18 additions & 33 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

crates/string-offsets/js/package.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,5 +29,8 @@
2929
"devDependencies": {
3030
"@types/jest": "^30.0.0",
3131
"jest": "^30.4.2"
32+
},
33+
"overrides": {
34+
"js-yaml": "^4.2.0"
3235
}
3336
}

0 commit comments

Comments
 (0)