Skip to content

Commit c02c034

Browse files
committed
chore(deps): force patched versions of vulnerable transitives
Version-scoped pnpm overrides for minimatch, picomatch, js-yaml, lodash, ws, @babel/helpers, brace-expansion and ajv chains that old playground dependency pins kept on vulnerable versions.
1 parent 8146503 commit c02c034

2 files changed

Lines changed: 87 additions & 155 deletions

File tree

package.json

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,18 @@
7777
"overrides": {
7878
"handlebars": ">=4.7.9",
7979
"shell-quote": ">=1.8.4",
80-
"simple-git": ">=3.32.3"
80+
"simple-git": ">=3.32.3",
81+
"minimatch@3": ">=3.1.3",
82+
"minimatch@5": ">=5.1.8",
83+
"minimatch@9": ">=9.0.7",
84+
"picomatch@2": ">=2.3.2",
85+
"picomatch@4": ">=4.0.4",
86+
"js-yaml@4": ">=4.2.0",
87+
"lodash": ">=4.17.23",
88+
"ws@8": ">=8.21.0",
89+
"@babel/helpers@7": ">=7.26.10",
90+
"brace-expansion@1": ">=1.1.13",
91+
"ajv@6": ">=6.14.0"
8192
}
8293
}
8394
}

0 commit comments

Comments
 (0)