Skip to content

Commit 7b7ac28

Browse files
kurtstohrerclaude
andcommitted
Add pnpm override to force dompurify >=3.4.0 across playground deps
A playground file-dep (antenna-component-library) was still pulling dompurify@3.3.3 transitively, leaving it in the root lockfile and keeping Dependabot alert #9 open. Override in package.json pins everything to >=3.4.0, so the lockfile now only resolves 3.4.0. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent f927957 commit 7b7ac28

2 files changed

Lines changed: 10 additions & 15 deletions

File tree

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,8 @@
5353
"overrides": {
5454
"follow-redirects": ">=1.16.0",
5555
"defu": ">=6.1.5",
56-
"lodash": ">=4.18.0"
56+
"lodash": ">=4.18.0",
57+
"dompurify": ">=3.4.0"
5758
}
5859
},
5960
"engines": {

pnpm-lock.yaml

Lines changed: 8 additions & 14 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)