From 31bd8a2c8f556f19d6f6199b505499c2f22b36af Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Fri, 11 Sep 2026 14:12:12 +0000
Subject: [PATCH] build(deps): override smol-toml to 1.7.1 for Dependabot alert
 #3

Pin the transitive markdownlint-cli2 dependency so the lockfile
installs the DoS fix instead of 1.7.0.

Co-authored-by: John Osumi <sumitake@users.noreply.github.com>
---
 package-lock.json | 6 +++---
 package.json      | 3 ++-
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index d78395b..ae991c0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1973,9 +1973,9 @@
       }
     },
     "node_modules/smol-toml": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.7.0.tgz",
-      "integrity": "sha512-aqVvWoyO21L23mb+drl4RmMXbf6N7FdHjAhTRA9ZBL7apWBgfWC16KjrASI+1p9GAroljyMHj6fK67i0UiTNvQ==",
+      "version": "1.7.1",
+      "resolved": "https://registry.npmjs.org/smol-toml/-/smol-toml-1.7.1.tgz",
+      "integrity": "sha512-PPlsspAZ4jbMBu5DMFhfUGDQLu/vrL4SyBROVS37x8ynnVmFIs1VPBz1Co8Xks3TvpIaZXmU85y4DrQ+UyVFoQ==",
       "dev": true,
       "license": "BSD-3-Clause",
       "engines": {
diff --git a/package.json b/package.json
index 33acccf..3928122 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,8 @@
     "vscode-jsonrpc": "9.0.2"
   },
   "overrides": {
-    "uuid": "11.1.1"
+    "uuid": "11.1.1",
+    "smol-toml": "1.7.1"
   },
   "devDependencies": {
     "markdownlint-cli2": "0.23.2"