From 82516398f43a9e5d789d8c26b9c2d0803dcc2456 Mon Sep 17 00:00:00 2001 From: anupamme Date: Sat, 3 Oct 2026 15:12:40 +0000 Subject: [PATCH] fix: GHSA-5p4m-2wfm-xmqj security vulnerability Automated dependency upgrade by OrbisAI Security --- pnpm-lock.yaml | 13 ++++++++----- pnpm-workspace.yaml | 3 +++ 2 files changed, 11 insertions(+), 5 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 4e8292c..279ea06 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -4,6 +4,9 @@ settings: autoInstallPeers: false excludeLinksFromLockfile: false +overrides: + js-yaml: 4.3.2 + importers: .: {} @@ -17,8 +20,8 @@ importers: specifier: 2.5.0 version: 2.5.0 js-yaml: - specifier: 4.1.1 - version: 4.1.1 + specifier: 4.3.2 + version: 4.3.2 socks: specifier: 2.8.7 version: 2.8.7 @@ -484,8 +487,8 @@ packages: isexe@2.0.0: resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==} - js-yaml@4.1.1: - resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==} + js-yaml@4.3.2: + resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==} hasBin: true junk@4.0.1: @@ -1257,7 +1260,7 @@ snapshots: isexe@2.0.0: {} - js-yaml@4.1.1: + js-yaml@4.3.2: dependencies: argparse: 2.0.1 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index f517fb9..61d7177 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -14,3 +14,6 @@ allowBuilds: minimumReleaseAgeExclude: - dsh-plugin-subscriptions@0.3.1 + +overrides: + 'js-yaml': '4.3.2'