From 00f4932df959eb06c6cbaaf9a414ccf491cb1fd8 Mon Sep 17 00:00:00 2001 From: EnixCoda Date: Sun, 13 Sep 2026 14:21:08 +0800 Subject: [PATCH] build(deps): bump node-fetch from 2.6.0 to 2.6.1 Security fix (CVE-2022-0235). package-lock.json already resolves node-fetch to 2.6.7; this closes the remaining yarn.lock ^2.1.2 path (2.6.0) to the patched 2.6.1. No lockfile-wide re-resolution. --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 1a558f5..d7b0901 100644 --- a/yarn.lock +++ b/yarn.lock @@ -712,9 +712,9 @@ node-fetch@2.6.1, node-fetch@^2.3.0: integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw== node-fetch@^2.1.2: - version "2.6.0" - resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.0.tgz#e633456386d4aa55863f676a7ab0daa8fdecb0fd" - integrity sha512-8dG4H5ujfvFiqDmVu9fQ5bOHUC15JMjMY/Zumv26oOvvVJjM67KF8koCWIabKQ1GJIa9r2mMZscBq/TbdOcmNA== + version "2.6.1" + resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.1.tgz#045bd323631f76ed2e2b55573394416b639a0052" + integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw== node-forge@^0.10.0: version "0.10.0"