Commit 9294b48
committed
Upgrade @hotwired/turbo-rails to resolve security warning
Details of the security vulnerability are available at:
GHSA-qppm-g56g-fpvp
> A race condition in Turbo Frames allows delayed HTTP responses to
> restore stale session cookies after session-modifying operations.
As a result, my project started receiving the following warning:
> Dependabot cannot update @hotwired/turbo to a non-vulnerable version
>
> The latest possible version that can be installed is 7.3.0 because of the following conflicting dependencies:
>
> rails_admin@3.3.0 requires @hotwired/turbo@^7.3.0 via @hotwired/turbo-rails@7.3.0
> No patched version available for @hotwired/turbo
>
> The earliest fixed version is 8.0.21.1 parent d8e0809 commit 9294b48
3 files changed
Lines changed: 5 additions & 5 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
19 | | - | |
| 19 | + | |
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
472 | 472 | | |
473 | 473 | | |
474 | 474 | | |
475 | | - | |
| 475 | + | |
476 | 476 | | |
477 | 477 | | |
478 | 478 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | | - | |
| 10 | + | |
11 | 11 | | |
12 | 12 | | |
13 | | - | |
14 | | - | |
| 13 | + | |
| 14 | + | |
15 | 15 | | |
16 | 16 | | |
17 | 17 | | |
| |||
0 commit comments