Commit 331a38b
fix: Address Dependabot security alerts
- lodash ^4.17.23: prototype pollution in `_.unset` and `_.omit`
GHSA-xxjr-mmjv-4gpg
- rollup ^4.59.0: arbitrary file write via path traversal
GHSA-mw96-cpmx-2vgc
- storybook ^10.2.14: dev server WebSocket hijacking
GHSA-mjf5-7g4m-gx5w
- webpack ^5.105.3: buildHttp allowedUris SSRF bypass
GHSA-8fgc-7cc6-rx7x
GHSA-38r7-794h-5758
- @mll-lab/js-utils ^2.41.1: includes lodash 4.17.23
- Refresh lockfile transitive deps: minimatch, tar, lodash-es
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>1 parent e1438c4 commit 331a38b
2 files changed
Lines changed: 715 additions & 296 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
57 | 57 | | |
58 | 58 | | |
59 | 59 | | |
60 | | - | |
| 60 | + | |
61 | 61 | | |
62 | 62 | | |
63 | | - | |
| 63 | + | |
64 | 64 | | |
65 | 65 | | |
66 | 66 | | |
| |||
81 | 81 | | |
82 | 82 | | |
83 | 83 | | |
84 | | - | |
| 84 | + | |
85 | 85 | | |
86 | | - | |
| 86 | + | |
87 | 87 | | |
88 | 88 | | |
89 | 89 | | |
| |||
100 | 100 | | |
101 | 101 | | |
102 | 102 | | |
| 103 | + | |
103 | 104 | | |
104 | 105 | | |
105 | 106 | | |
106 | 107 | | |
107 | 108 | | |
108 | 109 | | |
109 | | - | |
| 110 | + | |
110 | 111 | | |
111 | 112 | | |
112 | 113 | | |
| |||
122 | 123 | | |
123 | 124 | | |
124 | 125 | | |
125 | | - | |
| 126 | + | |
126 | 127 | | |
127 | 128 | | |
128 | 129 | | |
129 | | - | |
| 130 | + | |
130 | 131 | | |
131 | 132 | | |
132 | 133 | | |
133 | 134 | | |
134 | 135 | | |
135 | 136 | | |
136 | 137 | | |
137 | | - | |
| 138 | + | |
138 | 139 | | |
139 | 140 | | |
140 | 141 | | |
0 commit comments