Skip to content

Commit 732b0d0

Browse files
committed
DOC-3386: Fix transitive dependency vulnerabilities via yarn resolutions
Add resolutions for brace-expansion, sha.js, lodash, js-yaml, qs, minimatch, ecstatic, liquidjs, yauzl. yarn audit: 0 vulnerabilities.
1 parent 9769503 commit 732b0d0

2 files changed

Lines changed: 313 additions & 70 deletions

File tree

package.json

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,17 @@
2727
"delay": "2500ms",
2828
"ext": "*"
2929
},
30+
"resolutions": {
31+
"brace-expansion": ">=1.1.12",
32+
"sha.js": ">=2.4.12",
33+
"lodash": ">=4.17.23",
34+
"js-yaml": ">=4.1.1",
35+
"qs": ">=6.14.2",
36+
"minimatch": ">=3.1.4",
37+
"ecstatic": ">=4.1.3",
38+
"liquidjs": ">=10.25.0",
39+
"yauzl": ">=3.2.1"
40+
},
3041
"devDependencies": {
3142
"@antora/cli": "^3.1.10",
3243
"@antora/site-generator-default": "^3.1.10",

0 commit comments

Comments
 (0)